This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3136302e302f31392d3234203d3e203232333638.roa
File:                     3139302e39362e3136302e302f31392d3234203d3e203232333638.roa (raw, json)
Hash identifier:          w0hDo6hjB5EMrra4FZBnEpHhFpDsfqEWet5jJncl7F4=
Subject key identifier:   1D:29:7A:3A:3D:C9:44:F7:19:02:FC:10:4A:20:56:EE:17:21:00:2B
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       6F4545AF7B6F96F3B4C4F734955C5E667ADBC6F9
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3136302e302f31392d3234203d3e203232333638.roa
Signing time:             Tue 06 Jan 2026 19:18:05 +0000
ROA not before:           Tue 06 Jan 2026 19:13:05 +0000
ROA not after:            Tue 05 Jan 2027 19:18:05 +0000
asID:                     22368
IP address blocks:        190.96.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:45:45:af:7b:6f:96:f3:b4:c4:f7:34:95:5c:5e:66:7a:db:c6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jan  6 19:13:05 2026 GMT
            Not After : Jan  5 19:18:05 2027 GMT
        Subject: CN=1D297A3A3DC944F71902FC104A2056EE1721002B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c9:68:f8:46:90:d9:7c:f3:f3:91:8a:a4:d9:
                    6a:3d:94:56:06:6b:20:f5:c4:b4:72:4f:fd:81:0c:
                    27:50:fa:98:7b:d7:91:0e:a8:13:29:ac:ae:07:a6:
                    12:ca:36:48:02:3c:46:12:f2:8f:b5:8a:cf:dc:47:
                    9b:2a:d2:b9:19:c2:64:e3:7e:52:44:81:4a:18:98:
                    a0:c3:a9:29:9f:21:89:84:1a:54:79:d8:41:37:b3:
                    5a:1f:45:a3:5c:39:f0:f5:8c:83:e3:11:a5:ba:34:
                    c0:e5:71:e1:02:b7:d5:d4:14:a5:ed:3f:47:8e:7a:
                    83:05:60:62:5b:60:96:a5:11:97:88:62:97:8f:65:
                    e1:05:6a:b6:2c:ae:ba:b0:c7:88:4c:00:16:2f:2c:
                    39:b5:a8:4d:79:ca:85:ae:08:bd:46:6a:bf:d4:57:
                    a9:b6:10:d5:9b:72:e6:b9:28:c1:27:9e:92:a7:cf:
                    b3:ac:2d:88:cd:19:fd:a5:6b:a1:bb:8e:cd:9b:5b:
                    d6:27:c9:f0:63:f1:3f:47:fb:e2:4b:87:26:fc:ff:
                    5d:50:16:0d:4d:1b:2f:48:6a:f0:3a:63:9d:31:31:
                    dc:0c:9e:9e:63:aa:15:ea:2d:48:23:83:dd:3c:18:
                    c8:96:5c:86:1d:b5:cb:09:5d:36:70:c7:79:69:ca:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:29:7A:3A:3D:C9:44:F7:19:02:FC:10:4A:20:56:EE:17:21:00:2B
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3136302e302f31392d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:15:c9:11:b6:a4:9e:3f:8d:ee:23:32:b3:b5:6e:02:6f:c2:
         ec:b9:42:37:89:7b:91:9c:dc:a3:6e:b4:1a:c2:66:e9:2c:90:
         14:bd:c3:d0:0d:f7:fa:0f:2e:70:45:f0:76:58:58:aa:1a:82:
         81:97:dc:b5:ec:36:58:a3:44:ca:82:35:cd:76:50:bc:92:9c:
         5f:b9:63:8e:19:c5:a6:72:f0:2a:0f:53:95:e6:f9:bb:ae:1e:
         7e:3e:36:cc:c5:0d:0c:6c:30:51:85:f3:f5:70:f4:89:ca:64:
         e2:aa:63:6b:be:22:70:ef:da:49:fc:12:46:65:64:5e:5d:80:
         a8:c2:7c:63:45:16:35:bc:5f:6a:20:40:3e:d0:40:d9:0a:2d:
         d9:d5:c6:75:53:e3:f8:6a:fc:de:0f:46:7b:19:94:80:a5:46:
         a7:f3:46:c1:5c:1c:0b:b7:61:d6:89:6e:0a:9b:3b:ac:65:88:
         c6:3c:e4:65:85:cd:f7:c5:3a:db:34:0e:02:3b:62:fe:6a:6a:
         38:5a:25:e5:57:f4:5d:d4:ef:bf:88:65:24:e4:a3:0d:0d:ff:
         36:3d:b5:fe:c8:6c:86:16:4e:d6:1b:3c:1d:46:c5:a3:2a:c9:
         0a:53:aa:28:00:2a:05:bb:af:4c:e2:70:fd:40:b6:59:fb:84:
         4a:2a:6d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:59:20 2026 by rpki-client