This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/3139302e3132302e39362e302f31392d3234203d3e203238313030.roa
File:                     3139302e3132302e39362e302f31392d3234203d3e203238313030.roa (raw, json)
Hash identifier:          IjySXfetcpYyGTeXBtyTdVZ4nRjnR6W07gk4rlUBI4g=
Subject key identifier:   AF:13:7F:48:46:30:AA:7F:8A:57:13:49:79:34:7C:AC:D4:71:73:5D
Certificate issuer:       /CN=7522038107C274858A7861E432C932176D64E119
Certificate serial:       65256C37267AE4EC9FB1B0143DBF2FD9363ECD6C
Authority key identifier: 75:22:03:81:07:C2:74:85:8A:78:61:E4:32:C9:32:17:6D:64:E1:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7522038107C274858A7861E432C932176D64E119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/3139302e3132302e39362e302f31392d3234203d3e203238313030.roa
Signing time:             Tue 06 Jan 2026 19:21:29 +0000
ROA not before:           Tue 06 Jan 2026 19:16:29 +0000
ROA not after:            Tue 05 Jan 2027 19:21:29 +0000
asID:                     28100
IP address blocks:        190.120.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/7522038107C274858A7861E432C932176D64E119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/7522038107C274858A7861E432C932176D64E119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7522038107C274858A7861E432C932176D64E119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:25:6c:37:26:7a:e4:ec:9f:b1:b0:14:3d:bf:2f:d9:36:3e:cd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7522038107C274858A7861E432C932176D64E119
        Validity
            Not Before: Jan  6 19:16:29 2026 GMT
            Not After : Jan  5 19:21:29 2027 GMT
        Subject: CN=AF137F484630AA7F8A57134979347CACD471735D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:be:0f:87:86:7e:e4:81:ab:c0:3e:63:30:
                    fa:7a:f6:4d:f1:ae:0a:78:27:86:67:5a:40:0c:ea:
                    59:96:fe:65:45:55:d6:8d:42:c7:73:62:72:98:d6:
                    dd:a6:84:28:c5:db:f3:e9:46:69:f0:55:5d:90:e2:
                    8f:df:fe:d2:a0:12:d2:8f:32:4e:96:c4:0a:6a:f7:
                    7c:4f:f1:9d:59:0f:ea:69:1d:21:aa:89:a5:18:d3:
                    0a:b8:fe:31:bc:7f:75:b3:d3:30:aa:d3:89:a2:f0:
                    4c:38:e9:89:b6:c1:9a:24:89:93:c0:9e:35:26:69:
                    43:b5:f2:45:9a:c7:dc:84:51:54:ba:44:76:c2:b8:
                    96:37:a0:41:68:d0:c7:5e:c2:49:b8:47:54:e7:4e:
                    60:84:85:b8:df:6b:8b:55:3f:b6:4d:fb:19:11:39:
                    92:d9:88:45:e3:b6:fb:fe:a2:18:c7:cf:da:17:08:
                    8e:31:1a:65:0e:58:f2:84:41:e9:94:4b:b2:fd:86:
                    4a:aa:3d:e0:6e:97:08:b9:58:97:b0:d0:13:55:4f:
                    05:ee:ab:15:8e:22:2a:78:45:03:bb:9e:39:cc:96:
                    a7:9b:37:0b:67:a5:e0:d1:2f:de:49:d9:80:3d:65:
                    a7:5f:e6:5f:15:fd:7a:21:d0:00:15:a3:98:d9:12:
                    56:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:13:7F:48:46:30:AA:7F:8A:57:13:49:79:34:7C:AC:D4:71:73:5D
            X509v3 Authority Key Identifier:
                keyid:75:22:03:81:07:C2:74:85:8A:78:61:E4:32:C9:32:17:6D:64:E1:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/7522038107C274858A7861E432C932176D64E119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7522038107C274858A7861E432C932176D64E119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFE1526AC20ECFF893EBE7AE2C16ABE46D8A2657F76E1DF377567D25E06488EA/0/3139302e3132302e39362e302f31392d3234203d3e203238313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         88:87:d9:7d:a7:e3:86:5a:2d:24:e4:e1:09:46:d5:dc:29:33:
         44:60:30:47:7f:b4:e5:2e:11:65:c1:62:59:10:a7:6a:83:4b:
         3a:de:c4:24:6d:83:1c:74:8f:4c:b1:45:47:e3:49:4b:77:cd:
         bb:8a:8a:b8:e6:93:ff:6e:39:ec:31:67:d2:1b:67:4a:84:10:
         c0:6c:94:65:92:bd:e3:f1:b8:e6:1b:22:11:6e:ad:96:c5:68:
         29:d4:29:40:59:ec:9b:5d:95:b9:3a:b7:d5:ab:4d:1d:7f:06:
         dc:64:99:eb:be:28:e7:54:c1:5a:4c:44:01:97:6d:53:11:2d:
         bc:1f:48:4e:2c:53:ea:86:7f:ef:ee:86:df:0c:07:06:73:2a:
         28:ae:d3:9f:4b:af:c4:23:1a:40:96:32:24:bf:9f:8b:b1:e9:
         45:e6:59:35:2d:94:98:7f:f9:a8:89:f4:66:71:ca:bf:6d:e2:
         52:1d:f1:fd:89:57:93:da:a0:8c:61:69:bd:c1:b9:d3:f5:80:
         7a:fd:b8:a5:1c:cb:83:63:99:53:a7:a5:b6:ff:be:7b:c1:ac:
         64:ea:6e:92:81:c7:38:97:b2:d2:c1:c9:cb:6e:1b:ea:2d:82:
         7f:7b:14:5b:15:a1:6d:cd:3e:21:28:ab:57:87:6d:35:c4:20:
         e4:28:dc:b8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZSVsNyZ65OyfsbAUPb8v2TY+zWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzUyMjAzODEwN0MyNzQ4NThBNzg2MUU0MzJDOTMyMTc2
RDY0RTExOTAeFw0yNjAxMDYxOTE2MjlaFw0yNzAxMDUxOTIxMjlaMDMxMTAvBgNV
BAMTKEFGMTM3RjQ4NDYzMEFBN0Y4QTU3MTM0OTc5MzQ3Q0FDRDQ3MTczNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Kb4Ph4Z+5IGrwD5jMPp69k3x
rgp4J4ZnWkAM6lmW/mVFVdaNQsdzYnKY1t2mhCjF2/PpRmnwVV2Q4o/f/tKgEtKP
Mk6WxApq93xP8Z1ZD+ppHSGqiaUY0wq4/jG8f3Wz0zCq04mi8Ew46Ym2wZokiZPA
njUmaUO18kWax9yEUVS6RHbCuJY3oEFo0Mdewkm4R1TnTmCEhbjfa4tVP7ZN+xkR
OZLZiEXjtvv+ohjHz9oXCI4xGmUOWPKEQemUS7L9hkqqPeBulwi5WJew0BNVTwXu
qxWOIip4RQO7njnMlqebNwtnpeDRL95J2YA9Zadf5l8V/Xoh0AAVo5jZElbVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUrxN/SEYwqn+KVxNJeTR8rNRxc10wHwYDVR0j
BBgwFoAUdSIDgQfCdIWKeGHkMskyF21k4RkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRkUxNTI2QUMyMEVDRkY4OTNFQkU3QUUyQzE2QUJFNDZE
OEEyNjU3Rjc2RTFERjM3NzU2N0QyNUUwNjQ4OEVBLzAvNzUyMjAzODEwN0MyNzQ4
NThBNzg2MUU0MzJDOTMyMTc2RDY0RTExOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NTIyMDM4MTA3QzI3NDg1OEE3
ODYxRTQzMkM5MzIxNzZENjRFMTE5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUZFMTUyNkFDMjBFQ0ZGODkzRUJFN0FFMkMxNkFCRTQ2RDhBMjY1N0Y3
NkUxREYzNzc1NjdEMjVFMDY0ODhFQS8wLzMxMzkzMDJlMzEzMjMwMmUzOTM2MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzODMxMzAzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBb54YDAN
BgkqhkiG9w0BAQsFAAOCAQEAiIfZfafjhlotJOThCUbV3CkzRGAwR3+05S4RZcFi
WRCnaoNLOt7EJG2DHHSPTLFFR+NJS3fNu4qKuOaT/2457DFn0htnSoQQwGyUZZK9
4/G45hsiEW6tlsVoKdQpQFnsm12VuTq31atNHX8G3GSZ674o51TBWkxEAZdtUxEt
vB9ITixT6oZ/7+6G3wwHBnMqKK7Tn0uvxCMaQJYyJL+fi7HpReZZNS2UmH/5qIn0
ZnHKv23iUh3x/YlXk9qgjGFpvcG50/WAev24pRzLg2OZU6eltv++e8GsZOpukoHH
OJey0sHJy24b6i2Cf3sUWxWhbc0+ISirV4dtNcQg5CjcuA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:18:20 2026 by rpki-client