This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139302e3132332e31322e302f32332d3234203d3e20323635353430.roa
File:                     3139302e3132332e31322e302f32332d3234203d3e20323635353430.roa (raw, json)
Hash identifier:          J1SayXzfT4ImNaMCguXEW2Io5NojncuagX0mBVzdr7A=
Subject key identifier:   8D:71:DC:4E:44:7C:1E:F9:B8:1E:60:37:58:1B:3D:3E:0F:84:08:74
Certificate issuer:       /CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Certificate serial:       7377D220B03CFF292F4D9EB011BA44C88D742235
Authority key identifier: FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139302e3132332e31322e302f32332d3234203d3e20323635353430.roa
Signing time:             Tue 06 Jan 2026 19:42:41 +0000
ROA not before:           Tue 06 Jan 2026 19:37:41 +0000
ROA not after:            Tue 05 Jan 2027 19:42:41 +0000
asID:                     265540
IP address blocks:        190.123.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:77:d2:20:b0:3c:ff:29:2f:4d:9e:b0:11:ba:44:c8:8d:74:22:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
        Validity
            Not Before: Jan  6 19:37:41 2026 GMT
            Not After : Jan  5 19:42:41 2027 GMT
        Subject: CN=8D71DC4E447C1EF9B81E6037581B3D3E0F840874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:50:15:8b:47:e5:61:c9:05:ef:e2:b1:1f:
                    c5:84:b9:0a:12:30:3a:2f:30:47:87:51:60:7b:4f:
                    3b:49:0e:4b:b0:f5:40:09:37:1a:c2:fd:0a:1a:d2:
                    01:e0:a9:52:db:e7:3f:e5:4a:de:b2:8c:70:a4:ef:
                    3a:85:e3:26:e7:1e:bb:1a:d7:09:00:fb:2e:0a:a7:
                    65:ec:b5:49:93:d1:56:a0:d2:03:03:15:ac:c9:ee:
                    5b:3f:67:7b:b2:d8:9f:d8:6e:87:e6:b1:cd:2b:c5:
                    03:b4:bc:0e:08:cb:d1:e6:6d:a0:01:a6:68:11:c2:
                    e5:9f:b7:10:89:69:35:d1:7c:52:6d:c4:18:76:3d:
                    e3:8f:07:5b:cd:f9:3b:68:7a:69:4c:81:15:6e:2b:
                    e3:d6:cc:56:86:b8:0c:d2:3a:a2:68:c0:aa:7f:a6:
                    3a:45:e4:15:e2:aa:14:2b:b7:bc:22:b7:a9:1c:66:
                    35:a2:1b:a3:05:6e:13:70:b3:e7:78:20:d2:ff:ac:
                    ab:16:b7:96:69:71:ff:11:0a:47:88:7d:d1:0e:90:
                    a4:a5:fc:46:53:8d:45:07:9d:33:d8:98:65:b0:1e:
                    4f:cd:2a:f9:03:a5:7d:da:82:43:34:e4:4c:4e:4a:
                    58:e8:1e:13:17:df:ed:b1:5e:12:de:64:2a:b8:47:
                    1f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:71:DC:4E:44:7C:1E:F9:B8:1E:60:37:58:1B:3D:3E:0F:84:08:74
            X509v3 Authority Key Identifier:
                keyid:FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139302e3132332e31322e302f32332d3234203d3e20323635353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:97:62:7a:d1:48:30:e4:68:91:f6:20:2b:f6:37:c8:fc:1e:
         fa:d3:d3:79:ca:1c:a1:f5:c9:7b:bb:a9:f8:2d:48:cf:f9:d2:
         8b:cc:e9:13:f7:6b:83:4c:44:d8:36:32:3b:dc:10:b1:1c:72:
         67:7a:e8:2c:48:18:af:91:55:e5:f1:78:6a:64:70:48:2f:2a:
         9e:ae:e4:7c:2c:d3:47:56:98:b1:3d:bc:c4:3b:23:4e:41:6a:
         6c:f3:9e:02:cc:54:ba:7d:3d:97:72:16:d2:d3:19:66:ee:45:
         14:bf:88:9d:bb:3e:91:da:a0:79:45:40:86:a2:0b:97:8a:fb:
         6e:75:7c:66:c2:bc:e0:a4:61:95:22:f9:d7:43:10:d3:fe:9d:
         1d:e9:56:fe:c7:66:17:4e:b0:80:47:c4:8a:6f:d5:87:54:39:
         50:70:73:9d:de:60:24:4b:7a:16:6a:95:67:b3:93:d3:8c:89:
         a8:14:72:de:29:00:8e:d9:f1:9c:d9:f2:9f:a1:3e:e6:d9:50:
         49:f0:40:2d:20:bd:46:45:1a:3f:fa:08:1a:ad:b2:30:88:a5:
         ec:70:73:df:0f:f4:3d:3c:16:b6:fd:1d:e9:e4:89:c2:c9:28:
         95:e6:f2:0b:46:7c:85:2f:b7:59:a6:b2:b2:0a:8d:a7:c1:6e:
         35:1d:a1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:33 2026 by rpki-client