This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3139302e38322e302e302f31382d3234203d3e203136363239.roa
File:                     3139302e38322e302e302f31382d3234203d3e203136363239.roa (raw, json)
Hash identifier:          XKVNujcZRBRSPAGZ6nJwSWvvnvS5XoBg/sBpTCacFAg=
Subject key identifier:   E2:E5:0C:A5:54:00:9A:A5:1C:65:5E:82:75:34:C3:D0:5C:B3:A2:DD
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       4782AEE574AA12744064183B7485C0308C5A8AF5
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3139302e38322e302e302f31382d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 20:52:14 +0000
ROA not before:           Tue 06 Jan 2026 20:47:14 +0000
ROA not after:            Tue 05 Jan 2027 20:52:14 +0000
asID:                     16629
IP address blocks:        190.82.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:82:ae:e5:74:aa:12:74:40:64:18:3b:74:85:c0:30:8c:5a:8a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:47:14 2026 GMT
            Not After : Jan  5 20:52:14 2027 GMT
        Subject: CN=E2E50CA554009AA51C655E827534C3D05CB3A2DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:4b:12:5f:ff:69:fe:e4:09:f2:e4:fc:89:
                    9d:cc:e3:b4:11:12:ca:9e:fa:83:88:18:01:1c:ae:
                    98:38:2a:44:d4:56:40:80:55:0c:5b:76:88:6e:36:
                    e3:e1:79:d5:27:94:40:43:e6:d4:3f:fe:e5:72:88:
                    15:a9:6c:33:e6:44:98:99:59:d4:72:99:4c:67:b5:
                    e6:62:c2:2f:1f:69:30:b9:bc:24:96:80:e4:e5:88:
                    fc:69:1d:ea:28:52:e2:25:0a:7d:2c:a0:87:6d:01:
                    c6:46:fc:d3:9a:39:5b:84:7a:0f:8f:8d:38:cb:69:
                    63:8e:4b:63:d9:b1:75:f0:c5:32:b5:11:61:fc:4c:
                    0b:64:ba:b7:8a:fa:66:6d:5a:2a:a3:c6:54:f7:96:
                    3a:19:79:c8:ed:9d:a4:9d:8c:07:7b:01:bd:9a:83:
                    e9:7c:76:d4:c3:3f:d0:0b:93:47:03:88:77:7f:cd:
                    7f:bd:ac:88:95:14:e0:8d:05:05:7c:c9:6e:02:85:
                    00:83:23:b4:63:52:a1:e5:95:ba:38:b8:df:3e:79:
                    0d:f8:c4:8c:8d:84:fe:81:f3:98:e6:c4:b0:f4:df:
                    17:a7:84:4f:e0:0d:b1:35:b2:77:cd:1c:42:7e:32:
                    a6:6d:27:c2:16:cc:59:35:9a:98:62:d3:4f:59:10:
                    c1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E5:0C:A5:54:00:9A:A5:1C:65:5E:82:75:34:C3:D0:5C:B3:A2:DD
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3139302e38322e302e302f31382d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.82.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         90:5b:07:8e:9b:a2:93:ea:8f:bd:cd:9c:15:d0:17:87:55:1d:
         f4:02:57:03:9b:e6:60:86:16:64:03:82:a1:79:fd:34:3d:90:
         34:ff:19:d8:1b:86:b1:61:ad:eb:7d:97:20:75:f3:86:d7:f2:
         bd:14:43:cd:28:23:87:7b:c1:e0:75:95:f2:72:68:3f:4d:3b:
         6d:5e:9a:cd:75:a4:2e:dd:c5:43:16:78:6e:f7:36:70:63:87:
         8c:6f:2d:63:60:0a:ed:87:27:49:bb:e1:d4:79:69:64:cb:46:
         c6:10:ae:b9:c0:1d:c5:0c:14:51:75:88:d2:18:46:90:11:d9:
         ac:40:d6:ad:46:ac:d5:69:77:a5:ae:1b:03:db:8b:65:11:4f:
         4a:cf:b3:d1:fe:b4:66:09:93:7d:43:60:f6:17:ba:48:f9:94:
         82:87:05:96:0e:54:ab:5e:ef:d6:1e:13:22:9f:6d:9d:f5:ec:
         c5:07:22:43:2e:0d:fc:22:79:80:89:a4:0d:a8:9c:d6:32:e8:
         87:a7:67:0d:fc:70:95:bb:ff:da:11:76:63:69:93:40:0f:f3:
         5a:37:8d:91:64:6e:9f:34:04:ae:bf:7b:ee:5c:8c:fc:a2:0e:
         8d:bc:a7:c7:c1:ae:ea:88:d1:c5:bc:46:4c:2e:3a:35:68:ca:
         3d:bb:64:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:53 2026 by rpki-client