This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e3138342e3132382e302f31382d3234203d3e203232333638.roa
File:                     3139302e3138342e3132382e302f31382d3234203d3e203232333638.roa (raw, json)
Hash identifier:          SdqhQa5ZxXsWU6/RD2baizd8Btd0KcJ6Hr+KshxhCiE=
Subject key identifier:   10:F9:CC:E7:DC:E1:D8:7D:60:84:7C:4D:F6:61:38:32:10:E7:9D:45
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       2B807FCAF9A8CD5C8200C5F6F34C88A7192AE5B5
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e3138342e3132382e302f31382d3234203d3e203232333638.roa
Signing time:             Tue 06 Jan 2026 19:17:53 +0000
ROA not before:           Tue 06 Jan 2026 19:12:53 +0000
ROA not after:            Tue 05 Jan 2027 19:17:53 +0000
asID:                     22368
IP address blocks:        190.184.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:80:7f:ca:f9:a8:cd:5c:82:00:c5:f6:f3:4c:88:a7:19:2a:e5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jan  6 19:12:53 2026 GMT
            Not After : Jan  5 19:17:53 2027 GMT
        Subject: CN=10F9CCE7DCE1D87D60847C4DF661383210E79D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:c4:10:ed:15:04:63:31:fc:52:61:bc:11:
                    05:3f:a5:4b:be:bb:d6:33:e9:c8:f0:7f:66:a5:ab:
                    44:ac:45:95:94:1d:14:5b:d9:5d:4a:5d:cd:f7:d2:
                    78:6b:00:64:a4:f1:80:59:ec:53:39:f8:61:ca:f8:
                    23:44:90:3a:d1:35:74:40:97:d2:dd:47:eb:43:48:
                    d3:4a:79:fb:e7:cb:e5:de:28:c1:a4:62:5b:52:cb:
                    fc:7e:d2:1b:55:cd:07:5e:3f:57:ee:35:ed:4e:62:
                    45:0e:ea:5b:f2:1c:6c:e3:fa:6f:53:cd:74:a2:5d:
                    7d:88:a7:f5:94:c7:22:9e:51:27:6a:9d:1b:a1:54:
                    b5:ae:97:5d:28:42:90:e2:0c:02:9f:2e:76:96:60:
                    74:b7:cd:89:8e:db:4a:68:14:0a:ef:a6:d8:c7:63:
                    4a:60:97:e3:7b:a2:bf:e3:6a:26:78:94:38:e7:0e:
                    e4:e5:cb:7c:0d:0d:df:71:67:9c:a5:6d:81:9c:af:
                    8d:4b:a5:cd:9e:4d:f4:a2:a7:cd:ff:c3:22:47:da:
                    62:9b:87:f9:23:61:f6:c0:a5:01:9a:69:3f:8b:4d:
                    5e:ae:23:52:71:fd:74:76:e9:d1:ea:a8:da:91:31:
                    19:6b:23:41:8b:a0:88:1b:24:29:2c:23:51:60:53:
                    7f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F9:CC:E7:DC:E1:D8:7D:60:84:7C:4D:F6:61:38:32:10:E7:9D:45
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e3138342e3132382e302f31382d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         07:18:d6:b6:72:24:ea:81:ee:a2:dd:22:9b:69:08:44:be:12:
         ae:51:6d:22:8d:e5:ee:41:60:de:7d:dc:08:c5:17:e1:7e:2c:
         89:3f:c6:fa:73:ec:b5:b0:71:00:76:0e:41:09:30:88:e3:ca:
         83:68:8e:40:db:13:ad:a7:f7:e7:4e:f2:d1:e8:41:e9:af:44:
         19:ef:53:38:2c:ed:97:92:dc:04:dc:0c:71:82:c5:64:43:17:
         5a:89:42:65:84:dd:b8:82:f4:58:08:5c:ae:fb:b3:17:06:2a:
         79:92:1a:f2:fa:5e:e3:00:08:b5:cc:d5:d2:27:fc:d0:e0:f9:
         31:3e:4f:ba:4f:e1:ec:65:0b:86:b1:b8:c2:8e:81:61:6c:b1:
         34:37:a5:5d:9f:a3:fb:49:bf:13:a0:d0:f5:ce:31:e5:c1:87:
         98:62:c2:82:ef:2d:4a:4c:61:51:20:88:f6:61:4e:f2:5c:a9:
         38:a7:2f:3b:ff:17:8e:eb:fc:47:bf:82:2a:ca:9b:25:04:85:
         00:fd:c7:a0:12:f0:87:19:7c:f3:62:67:e0:da:01:20:03:fa:
         37:30:5c:eb:87:c8:4e:61:8b:16:c6:fa:0f:29:cd:76:a2:fe:
         1a:5e:61:63:2a:e5:84:2b:df:ed:4e:d6:8c:79:82:3e:78:d4:
         d7:62:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:07 2026 by rpki-client