This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3233362e302f32322d3234203d3e203237393739.roa
File:                     3139302e39332e3233362e302f32322d3234203d3e203237393739.roa (raw, json)
Hash identifier:          +WoqrzFe4SVGa25kB5Y4y6LvQl3iIUp7A4E5nIHSjZM=
Subject key identifier:   B5:3F:FB:17:EE:0A:3D:87:4C:CA:50:47:14:D4:FF:AD:FB:F6:7C:AA
Certificate issuer:       /CN=5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE
Certificate serial:       5AD5BD7F129F27CC7056CA5B427729377968ABCC
Authority key identifier: 5C:A7:B2:04:D1:1D:A9:5E:CC:3E:84:65:FD:E8:77:F7:67:0F:1A:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3233362e302f32322d3234203d3e203237393739.roa
Signing time:             Fri 23 Jan 2026 17:40:00 +0000
ROA not before:           Fri 23 Jan 2026 17:35:00 +0000
ROA not after:            Fri 22 Jan 2027 17:40:00 +0000
asID:                     27979
IP address blocks:        190.93.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d5:bd:7f:12:9f:27:cc:70:56:ca:5b:42:77:29:37:79:68:ab:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE
        Validity
            Not Before: Jan 23 17:35:00 2026 GMT
            Not After : Jan 22 17:40:00 2027 GMT
        Subject: CN=B53FFB17EE0A3D874CCA504714D4FFADFBF67CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d4:7d:7e:18:fc:5a:a2:0e:08:98:3a:6e:0f:
                    c3:5e:36:69:ea:bf:c8:0b:d7:57:68:0f:0e:1b:b6:
                    30:9a:ef:3f:24:de:fc:73:01:61:4b:f1:7e:7c:9f:
                    5c:c3:c1:59:d5:cd:f2:c1:3d:6d:c6:74:8b:03:77:
                    69:fd:57:d8:eb:58:35:60:8c:e9:ce:f2:28:a9:8c:
                    10:e9:7a:22:8a:3d:2e:21:37:ae:0d:3d:d2:b3:9f:
                    2b:c7:5f:8a:94:d1:5d:f5:36:9a:6c:1d:b7:7d:bb:
                    24:52:29:f1:ca:56:5d:1d:8b:78:ce:a0:85:71:e6:
                    b9:5c:9e:32:d8:77:b3:49:fa:dc:0b:d8:de:27:e3:
                    eb:e6:1a:d5:32:75:a8:b9:7b:58:25:42:a5:81:02:
                    88:b6:87:b2:79:15:09:0a:57:25:ff:6e:e2:df:ea:
                    27:a8:dc:53:4c:5b:7c:24:24:25:28:02:e4:ff:4f:
                    f5:c0:5c:54:12:63:5b:85:19:71:4b:c8:8d:b0:2e:
                    af:c7:81:e4:44:ed:c9:57:e7:9a:a6:e6:31:be:b4:
                    cb:3c:83:7d:03:3a:6e:4a:ab:46:18:eb:4e:49:73:
                    fe:be:fa:d7:a9:05:59:9e:41:de:0d:13:01:a0:7c:
                    9d:9f:38:a8:f3:24:ab:56:a0:29:ac:47:96:a4:d7:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3F:FB:17:EE:0A:3D:87:4C:CA:50:47:14:D4:FF:AD:FB:F6:7C:AA
            X509v3 Authority Key Identifier:
                keyid:5C:A7:B2:04:D1:1D:A9:5E:CC:3E:84:65:FD:E8:77:F7:67:0F:1A:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3233362e302f32322d3234203d3e203237393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:bb:e2:f8:80:31:f0:98:1c:a6:bf:04:9b:cd:5a:c6:ba:6f:
         f5:64:5e:5e:83:6d:52:2e:ec:f2:8e:42:78:c0:33:95:d4:3d:
         94:e1:68:95:f1:6e:c8:9f:f1:05:e4:1a:2c:92:05:a5:b1:cf:
         fc:43:7a:2a:be:b3:5c:4c:02:93:fa:6a:55:d9:3a:74:4f:87:
         b2:d6:f2:80:61:a1:ef:07:f9:4a:9a:17:c1:b0:b4:11:aa:20:
         08:db:0b:42:a7:39:6b:fc:0a:02:03:4c:ec:2d:3b:75:4b:bd:
         00:dc:8d:89:f8:72:6e:60:ed:91:40:a9:39:7e:a7:bb:22:88:
         a4:20:63:c1:15:75:c6:dd:85:a3:ce:af:22:16:82:96:e2:3b:
         3c:0b:d5:ef:f1:e2:58:db:50:21:87:03:b9:d5:30:a5:6b:73:
         5e:6d:1f:cc:4f:11:4b:69:7d:64:4c:09:a3:97:d0:67:e7:20:
         de:1d:3a:fe:a0:57:ae:d2:65:c9:6c:98:13:ad:ec:4d:5d:53:
         d2:4d:3c:27:7a:0f:75:69:49:c7:04:f4:57:04:64:41:71:9a:
         60:bb:a6:69:94:d8:8a:d0:6e:c0:e1:7e:58:eb:18:a7:fa:b5:
         27:69:4b:80:f1:ea:aa:38:9c:59:cf:76:d7:30:79:22:4b:4c:
         22:b2:43:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:53 2026 by rpki-client