This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3139302e3130372e3232342e302f32312d3234203d3e203532333431.roa
File:                     3139302e3130372e3232342e302f32312d3234203d3e203532333431.roa (raw, json)
Hash identifier:          CLtajcLGMMllDi1Ib8saPuqY1RP0lrKP4w/hhxSXTnU=
Subject key identifier:   3C:05:38:E7:9D:03:C1:63:86:E4:17:19:0D:7A:06:52:8E:AB:E7:13
Certificate issuer:       /CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC
Certificate serial:       405B827BC442D2728881B8DD9CAF552252FF276A
Authority key identifier: AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3139302e3130372e3232342e302f32312d3234203d3e203532333431.roa
Signing time:             Tue 06 Jan 2026 19:36:54 +0000
ROA not before:           Tue 06 Jan 2026 19:31:54 +0000
ROA not after:            Tue 05 Jan 2027 19:36:54 +0000
asID:                     52341
IP address blocks:        190.107.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 02:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5b:82:7b:c4:42:d2:72:88:81:b8:dd:9c:af:55:22:52:ff:27:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC
        Validity
            Not Before: Jan  6 19:31:54 2026 GMT
            Not After : Jan  5 19:36:54 2027 GMT
        Subject: CN=3C0538E79D03C16386E417190D7A06528EABE713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:8d:3e:91:63:3a:ec:e2:94:0d:a8:3b:00:
                    15:4d:cc:47:32:8e:51:50:6a:57:91:21:b1:e0:b0:
                    eb:6f:27:35:74:ed:6a:ce:4a:c8:73:64:51:63:28:
                    e9:bc:3e:bb:de:de:36:83:4d:32:2e:68:e4:d8:a8:
                    2f:33:06:78:33:96:29:cd:13:da:40:28:c1:bb:1f:
                    39:ad:b9:d0:b7:44:20:90:62:c8:68:cc:a3:76:c1:
                    4f:8e:78:38:7a:10:00:97:e7:ba:53:f7:02:1c:84:
                    11:68:60:3f:86:52:d5:b3:6c:fa:8c:63:3c:13:74:
                    0e:b3:03:7a:8d:5a:e5:50:c6:d6:15:91:6c:ce:42:
                    30:a5:f0:c9:26:f8:05:03:ec:21:bf:ab:b2:5d:29:
                    22:39:4f:b7:77:14:eb:88:a1:7b:48:ae:bd:e4:6b:
                    8d:ac:cc:b5:9a:0e:82:86:90:23:49:f9:8a:89:0d:
                    d3:9e:f6:38:f1:c5:45:f3:99:40:33:68:82:f0:e3:
                    1c:1a:cc:b3:6d:17:d4:6b:50:b7:25:29:f7:a5:ed:
                    41:e7:c2:e6:47:34:d9:f0:71:e8:05:bc:bd:89:f8:
                    fd:3e:cc:a8:f6:55:01:0e:0e:3c:6c:b5:24:1c:56:
                    3a:c1:38:35:5d:fa:1f:bd:7b:2a:2e:24:f7:e9:fa:
                    19:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:05:38:E7:9D:03:C1:63:86:E4:17:19:0D:7A:06:52:8E:AB:E7:13
            X509v3 Authority Key Identifier:
                keyid:AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3139302e3130372e3232342e302f32312d3234203d3e203532333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:4e:82:50:68:6a:47:26:5e:b8:22:18:3d:4d:dd:ad:97:15:
         d5:40:79:4d:47:ea:20:8c:3e:37:02:21:07:07:65:20:10:77:
         2c:3c:17:b6:34:df:9f:e3:ab:a0:ca:8c:33:12:ea:47:73:49:
         d3:07:49:0f:ce:2e:27:82:82:87:63:ce:ba:32:ae:02:dd:85:
         b8:c3:b2:82:ad:f5:33:95:6e:e5:6a:0d:2e:87:4c:49:02:99:
         41:4f:f4:b8:ea:e6:8b:d1:33:19:23:5a:a0:c5:ba:c8:97:a2:
         ad:f1:95:66:0e:11:07:14:24:82:92:98:ee:b0:a9:74:a3:a2:
         4a:01:bd:7c:ee:40:ed:17:84:1f:d2:76:62:96:43:1c:98:d4:
         72:7d:a0:cc:8c:6d:a4:fa:dc:4b:14:0e:9a:d3:ea:e8:a5:5b:
         08:e1:7e:d9:58:36:21:de:7d:a7:16:ee:2a:ae:f9:b8:d0:73:
         e4:96:78:1d:fa:0e:eb:e5:b5:86:49:f7:46:4e:15:a3:de:73:
         e3:16:2a:03:69:0e:39:d2:a8:47:54:b7:1c:94:bc:5b:d6:4f:
         5a:ce:c0:0c:36:f0:8e:d5:23:ff:41:ad:83:88:c8:83:88:a1:
         16:99:e6:ba:42:0e:45:46:b1:d6:99:25:c3:c8:49:bf:ea:3c:
         6f:3c:46:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:48:11 2026 by rpki-client