This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/3139302e3132302e3139322e302f32302d3234203d3e203237373539.roa
File:                     3139302e3132302e3139322e302f32302d3234203d3e203237373539.roa (raw, json)
Hash identifier:          WBMzKWXP+MPFeApQTHCUo24hZCiq8MYQNPJaJ+RetYo=
Subject key identifier:   BD:E8:0A:30:A3:8A:DE:8E:18:C7:03:47:10:58:89:11:93:23:04:7F
Certificate issuer:       /CN=B72C94D573353BE962B600097BE1E558CF9533D1
Certificate serial:       59E66AF5CCBC2731E1CCD2A15E0A17E450225A69
Authority key identifier: B7:2C:94:D5:73:35:3B:E9:62:B6:00:09:7B:E1:E5:58:CF:95:33:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B72C94D573353BE962B600097BE1E558CF9533D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/3139302e3132302e3139322e302f32302d3234203d3e203237373539.roa
Signing time:             Thu 18 Dec 2025 19:40:01 +0000
ROA not before:           Thu 18 Dec 2025 19:35:01 +0000
ROA not after:            Thu 17 Dec 2026 19:40:01 +0000
asID:                     27759
IP address blocks:        190.120.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/B72C94D573353BE962B600097BE1E558CF9533D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/B72C94D573353BE962B600097BE1E558CF9533D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B72C94D573353BE962B600097BE1E558CF9533D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 00:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e6:6a:f5:cc:bc:27:31:e1:cc:d2:a1:5e:0a:17:e4:50:22:5a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72C94D573353BE962B600097BE1E558CF9533D1
        Validity
            Not Before: Dec 18 19:35:01 2025 GMT
            Not After : Dec 17 19:40:01 2026 GMT
        Subject: CN=BDE80A30A38ADE8E18C70347105889119323047F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:67:2a:8e:a2:18:38:f1:03:4e:36:03:2e:
                    23:92:0f:44:81:f4:1d:5c:0f:49:2a:7d:54:3e:78:
                    a6:42:b0:4d:88:48:55:c0:5a:f8:98:12:ba:70:01:
                    30:3e:00:73:36:31:01:c8:89:cd:15:b6:cf:e1:83:
                    f3:94:5b:18:1a:5b:84:86:0b:83:46:b0:ee:15:33:
                    ea:4e:86:8b:9e:81:5f:06:5d:45:90:7e:67:9d:64:
                    73:69:01:44:61:9f:69:95:2e:bd:d2:85:2b:2c:87:
                    82:a6:4c:8b:f3:31:f7:db:f0:ea:3e:bb:74:9d:e3:
                    d8:ff:6e:a3:96:29:95:bc:24:f2:f4:64:31:01:e7:
                    b1:6f:1d:8d:5a:46:b3:d1:8e:49:47:71:9c:f5:ea:
                    d9:b4:8e:50:50:80:23:75:00:67:5e:86:8e:c0:74:
                    5c:13:39:40:30:d0:e0:e2:02:e2:c7:b8:9d:ed:26:
                    a7:5e:0a:71:05:ed:2c:ac:40:bc:8c:4e:59:2a:df:
                    85:75:fb:46:af:3e:15:9b:f3:ef:77:e8:08:6d:99:
                    7a:33:91:f2:42:44:21:ac:b2:30:c0:73:34:48:81:
                    a0:99:25:45:ad:49:e0:07:5a:e1:3f:47:de:30:16:
                    f3:9a:e4:86:97:71:40:4c:f3:48:7c:7d:ff:a7:e2:
                    bc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E8:0A:30:A3:8A:DE:8E:18:C7:03:47:10:58:89:11:93:23:04:7F
            X509v3 Authority Key Identifier:
                keyid:B7:2C:94:D5:73:35:3B:E9:62:B6:00:09:7B:E1:E5:58:CF:95:33:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/B72C94D573353BE962B600097BE1E558CF9533D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B72C94D573353BE962B600097BE1E558CF9533D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/3139302e3132302e3139322e302f32302d3234203d3e203237373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:8c:d5:6d:0f:bb:db:d1:45:8c:62:e6:8a:fd:58:c6:14:de:
         d2:be:98:12:b6:c2:e4:cb:8c:1c:19:59:ee:c4:e1:d3:56:db:
         d1:9b:49:88:6b:8d:f0:35:3f:e7:03:83:70:a6:f4:a1:9e:a6:
         52:92:4d:a5:36:0d:4d:70:8d:4e:54:58:ab:29:56:30:49:f0:
         b3:53:3f:f6:1c:52:48:a2:24:db:d5:7e:0c:04:26:31:78:9e:
         eb:db:5a:c5:68:04:a9:22:07:53:9d:9b:a7:68:6d:c7:7d:85:
         64:f5:fd:47:a0:8e:10:c5:5b:57:19:56:c8:dc:a9:ac:40:c6:
         36:a7:8c:1d:ee:df:71:96:6d:d9:d7:4f:7f:c3:32:51:24:7a:
         90:d6:2a:e3:7d:30:00:1b:34:92:aa:07:f9:32:55:33:8a:1e:
         2f:0b:15:63:dd:de:c3:2b:73:31:c1:19:21:e5:e0:db:cf:39:
         05:c5:80:18:64:23:79:44:9b:e8:f1:12:3a:a5:c1:c2:75:f4:
         33:3d:49:61:89:c3:3f:20:20:56:8a:32:10:57:5f:27:f8:65:
         1a:fd:3b:f0:8d:6a:13:1f:90:c3:42:ba:8b:9f:f5:9c:af:5b:
         89:ae:93:29:cc:df:6c:b3:0b:ea:88:60:9b:b1:d2:28:8e:23:
         8b:70:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:36:34 2025 by rpki-client