This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/3139302e3136392e302e302f31362d3332203d3e203139313932.roa
File:                     3139302e3136392e302e302f31362d3332203d3e203139313932.roa (raw, json)
Hash identifier:          jRzf32CsucrnOzE8i0l6/U/kAuUrmF5FyIaDEkVPrxo=
Subject key identifier:   AA:6F:D0:1B:5F:48:5F:98:04:38:54:8E:67:66:E5:EE:FE:66:62:15
Certificate issuer:       /CN=898729973C2338366642A6EE0E3DA10797106F7B
Certificate serial:       561E68A9D9A5EF99DE7559F01EB52192E259EEB9
Authority key identifier: 89:87:29:97:3C:23:38:36:66:42:A6:EE:0E:3D:A1:07:97:10:6F:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/898729973C2338366642A6EE0E3DA10797106F7B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/3139302e3136392e302e302f31362d3332203d3e203139313932.roa
Signing time:             Tue 06 Jan 2026 19:00:34 +0000
ROA not before:           Tue 06 Jan 2026 18:55:34 +0000
ROA not after:            Tue 05 Jan 2027 19:00:34 +0000
asID:                     19192
IP address blocks:        190.169.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/898729973C2338366642A6EE0E3DA10797106F7B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/898729973C2338366642A6EE0E3DA10797106F7B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/898729973C2338366642A6EE0E3DA10797106F7B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1e:68:a9:d9:a5:ef:99:de:75:59:f0:1e:b5:21:92:e2:59:ee:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=898729973C2338366642A6EE0E3DA10797106F7B
        Validity
            Not Before: Jan  6 18:55:34 2026 GMT
            Not After : Jan  5 19:00:34 2027 GMT
        Subject: CN=AA6FD01B5F485F980438548E6766E5EEFE666215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7e:11:b9:d3:5b:6e:0a:08:bf:b0:cb:24:a9:
                    b4:f3:eb:7c:91:b6:4a:7c:f7:e8:c0:1c:d3:93:8b:
                    4a:58:68:ce:da:83:26:de:52:7d:1e:fd:4f:1f:d7:
                    22:d1:97:89:95:7a:0e:0b:d4:9b:82:a2:26:44:19:
                    fb:64:89:b5:c8:08:41:6e:a9:7b:16:fa:ed:9c:60:
                    b2:13:c8:79:65:f2:01:0e:d8:da:11:f0:78:a8:90:
                    ee:b7:68:c0:1d:c5:0e:35:91:3c:14:73:2c:33:e8:
                    40:f9:92:97:8a:46:0a:9f:47:f5:23:1c:c5:02:5f:
                    85:ec:d3:1e:1f:de:a0:6e:44:04:ad:5c:9a:cb:97:
                    83:38:0c:b5:6f:54:b5:3f:52:ca:87:74:82:33:d0:
                    17:b3:ef:95:78:aa:90:a6:33:d8:e3:48:a9:68:7a:
                    6c:51:c6:81:11:ea:d1:f9:bb:51:d9:c4:63:69:16:
                    53:38:d8:7c:a0:80:12:63:74:8f:7a:a6:79:84:b6:
                    93:32:71:94:89:59:cd:0f:9b:ff:ab:11:fd:fc:0a:
                    11:69:79:f9:46:b5:89:fc:e6:6f:4a:b3:9d:48:cf:
                    a7:f9:cf:da:99:0a:67:bc:cf:56:62:63:63:e2:a4:
                    67:10:b4:bd:6e:ce:44:f4:fd:44:f0:0b:70:0b:3c:
                    37:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6F:D0:1B:5F:48:5F:98:04:38:54:8E:67:66:E5:EE:FE:66:62:15
            X509v3 Authority Key Identifier:
                keyid:89:87:29:97:3C:23:38:36:66:42:A6:EE:0E:3D:A1:07:97:10:6F:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/898729973C2338366642A6EE0E3DA10797106F7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/898729973C2338366642A6EE0E3DA10797106F7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6E5776F6FE06B99BE1EBE6A681C20D16BC7B30398741A59C0D2E45071BA546A/0/3139302e3136392e302e302f31362d3332203d3e203139313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.169.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:a4:a9:f1:24:8d:71:d5:ae:ab:55:a5:ea:15:e5:f8:dd:ef:
         53:8d:76:33:cc:09:67:5c:4f:d7:c6:5b:46:b1:a5:3e:33:7c:
         c8:55:e3:2e:c6:e6:7c:88:c1:b0:76:b9:34:30:aa:45:f6:d4:
         f4:ac:cc:58:0b:f7:cb:b4:9c:46:05:fe:99:8d:e0:b3:5c:46:
         2e:40:8b:fe:08:60:38:10:e5:a6:d4:4f:dc:0d:a9:5a:8e:25:
         37:4f:d1:85:8f:72:11:52:ad:17:5f:fc:90:29:2d:ac:db:a8:
         aa:e1:5b:9f:9a:61:0d:ec:71:32:2a:91:fd:f2:61:cc:27:9f:
         cc:10:66:7e:1b:f5:e9:37:72:fa:2d:25:ae:cc:f2:78:3f:50:
         21:06:94:98:dc:ab:d3:46:4c:18:4e:8a:da:70:1e:41:5b:da:
         6d:1a:dc:bc:22:44:7b:72:aa:8b:25:fc:f3:2a:4f:d8:3c:d4:
         35:92:aa:3a:98:12:c6:94:a3:39:49:62:b4:fd:c8:e1:90:3e:
         f4:88:c6:ef:11:72:cc:75:0e:9b:22:96:ec:6f:fe:39:78:9a:
         a9:db:60:50:ee:ee:60:6a:aa:d4:33:05:59:ca:55:e6:d3:74:
         db:d2:fa:bf:5e:08:cf:48:a7:62:b3:71:4e:66:d6:f1:ac:c5:
         3a:1e:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:52:18 2026 by rpki-client