This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3139302e33302e302f32332d3234203d3e203131313732.roa
File:                     3139322e3139302e33302e302f32332d3234203d3e203131313732.roa (raw, json)
Hash identifier:          QSnABEzGTziHrTYoq2N0cy1XcNeCZqXWprMUjM2rF7k=
Subject key identifier:   5E:CB:74:DF:CB:1F:F7:EC:D9:AF:D8:48:33:12:41:FF:51:50:67:54
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       797ADDC6ED72BAD280E0DCCFFA6818110C4BD5EF
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3139302e33302e302f32332d3234203d3e203131313732.roa
Signing time:             Tue 06 Jan 2026 19:44:59 +0000
ROA not before:           Tue 06 Jan 2026 19:39:59 +0000
ROA not after:            Tue 05 Jan 2027 19:44:59 +0000
asID:                     11172
IP address blocks:        192.190.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7a:dd:c6:ed:72:ba:d2:80:e0:dc:cf:fa:68:18:11:0c:4b:d5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Jan  6 19:39:59 2026 GMT
            Not After : Jan  5 19:44:59 2027 GMT
        Subject: CN=5ECB74DFCB1FF7ECD9AFD848331241FF51506754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:2d:21:db:af:4f:e2:d8:58:4d:eb:56:ea:
                    5e:70:b1:9c:b9:2e:93:65:2a:a8:fc:c4:cb:74:8b:
                    0b:47:00:fa:ee:35:80:e1:4c:8e:d5:a8:64:c3:61:
                    ce:f2:e0:19:40:ee:d6:60:93:ad:ad:f6:64:03:bc:
                    85:ad:74:66:56:7a:dd:49:9d:c3:ed:4f:62:f7:a4:
                    2a:d9:fe:c6:be:f5:f7:cf:43:2b:1f:bd:3b:8d:9d:
                    a2:35:72:f7:0a:3d:5e:26:04:e6:14:09:45:26:7b:
                    c4:92:b1:2a:d2:7a:26:a9:4a:57:04:3f:5f:e0:74:
                    86:92:48:ad:33:80:5e:23:52:fa:16:cb:30:df:e1:
                    9a:83:c9:92:f0:5b:f8:da:82:02:02:74:5d:4f:4b:
                    72:06:4b:0a:2e:5c:99:dd:2e:c0:41:53:7d:76:9a:
                    c8:bb:07:bd:e1:2c:f5:b8:3a:6f:de:d1:b5:bb:4b:
                    0e:29:3d:5a:cb:69:e2:4d:86:7b:b1:52:28:2a:7c:
                    01:db:6a:ec:cf:c0:86:43:81:ea:8c:e3:ce:d2:b8:
                    e8:f7:e5:09:3e:cd:06:f5:b6:15:8b:4f:34:23:b3:
                    cd:92:e3:f7:2b:76:f1:aa:02:0a:44:49:a0:aa:eb:
                    e9:58:a7:da:74:42:0c:7c:b0:9a:78:cb:80:5f:ee:
                    91:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CB:74:DF:CB:1F:F7:EC:D9:AF:D8:48:33:12:41:FF:51:50:67:54
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3139322e3139302e33302e302f32332d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:f8:16:dc:64:b2:7f:4e:4a:f9:d5:d3:fa:b2:b7:ee:11:
         c1:1d:a3:b7:be:68:59:1e:cb:1a:d3:d8:02:bd:59:ad:1c:5e:
         5d:99:ba:b0:0d:55:02:58:5b:04:54:12:1f:7e:cd:24:a7:f8:
         16:8c:a1:6f:35:46:12:d8:48:8e:cd:00:72:a0:8d:ec:e9:19:
         bc:7a:fa:53:96:ef:f9:c5:eb:89:5a:6e:4a:35:95:b2:9f:ec:
         dd:73:ab:58:09:a1:c4:f4:ec:55:9e:53:67:b1:89:de:6a:03:
         13:da:18:e2:72:30:66:cf:53:e4:a3:f8:0d:f7:a9:99:e6:10:
         64:14:b5:f4:4b:33:92:92:e2:eb:00:19:6c:d3:1c:97:65:7d:
         58:cc:9e:6f:77:6f:93:a3:08:dc:7e:4f:8c:07:44:ad:05:ef:
         e9:36:bc:d0:a5:11:1d:81:d0:91:20:cd:38:79:0a:16:9a:05:
         22:0f:02:a7:ac:ae:f1:53:a0:d6:a7:c3:78:98:b2:46:bf:0c:
         64:0c:27:52:06:c8:6d:d6:a6:16:c1:1a:35:21:22:be:01:3d:
         c0:94:02:9d:1b:7c:1e:35:ae:c4:f5:15:8d:f5:07:75:99:e5:
         21:a1:a8:89:4a:bd:15:b2:db:21:bc:d8:df:51:62:64:47:02:
         01:98:38:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:20:08 2026 by rpki-client