This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3134302e302f32332d3234203d3e2036343239.roa
File:                     3139302e35342e3134302e302f32332d3234203d3e2036343239.roa (raw, json)
Hash identifier:          5zHy/v+e/cixZ971x3y69iKAgjcT1Y+GkeymywWctgc=
Subject key identifier:   4D:41:5D:E1:FC:74:65:CB:B1:A5:90:C0:1E:80:B0:9F:AA:8E:2A:2F
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       21AE89D98751FC5C4F9C0AC0B1CD8A1317238F08
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3134302e302f32332d3234203d3e2036343239.roa
Signing time:             Tue 06 Jan 2026 20:54:20 +0000
ROA not before:           Tue 06 Jan 2026 20:49:20 +0000
ROA not after:            Tue 05 Jan 2027 20:54:20 +0000
asID:                     6429
IP address blocks:        190.54.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 06:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ae:89:d9:87:51:fc:5c:4f:9c:0a:c0:b1:cd:8a:13:17:23:8f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Jan  6 20:49:20 2026 GMT
            Not After : Jan  5 20:54:20 2027 GMT
        Subject: CN=4D415DE1FC7465CBB1A590C01E80B09FAA8E2A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f5:a4:ba:96:a7:b1:29:fd:56:89:3d:b2:dc:
                    c4:00:6f:c3:15:bc:e6:83:ec:7c:b9:de:f5:02:6c:
                    82:ff:36:12:72:90:db:6c:ed:c1:7d:a9:22:f7:5b:
                    04:23:e1:87:d1:e6:ab:ea:28:81:34:6d:e1:2d:88:
                    de:8f:fe:0a:e8:21:8b:c9:58:10:86:0a:ee:5a:bc:
                    9d:9d:e4:c2:68:74:9d:08:94:cb:0b:32:b5:a7:69:
                    3a:e9:a4:06:c0:f5:2d:79:8e:78:e0:c2:33:18:14:
                    d1:67:ea:99:56:53:28:43:23:ec:e4:89:bc:0f:4e:
                    01:61:3a:69:6b:38:a5:4e:d8:ce:e2:8d:cb:96:68:
                    4e:58:28:d8:bb:63:4b:21:a3:28:84:55:f4:7c:05:
                    bb:cc:cf:9c:fa:fb:88:f0:72:a2:89:54:f6:a3:df:
                    50:81:22:f9:f3:e8:e5:7d:b4:81:19:94:5a:be:db:
                    fa:09:c7:e4:00:80:05:b6:20:91:9a:d9:e2:53:62:
                    39:12:a6:82:a0:b4:0b:c5:07:e6:72:2a:7d:c3:cc:
                    02:88:20:92:59:fc:62:f1:5b:36:39:1f:ea:d0:cf:
                    a5:76:57:bd:21:1e:81:37:67:ce:d2:e0:2e:05:17:
                    81:4b:47:75:6d:d2:cc:1f:09:4a:59:00:43:14:6e:
                    47:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:41:5D:E1:FC:74:65:CB:B1:A5:90:C0:1E:80:B0:9F:AA:8E:2A:2F
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3134302e302f32332d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:86:0f:ba:cd:29:a6:27:2c:a6:9c:25:3b:d0:4e:27:29:c9:
         ae:f8:f0:45:1a:9f:c5:70:40:07:cb:87:f7:7d:8f:93:9c:89:
         38:60:91:70:4b:33:80:be:39:3f:b7:2f:7f:a9:e3:b0:47:fc:
         af:ec:61:0f:a8:df:d4:c4:28:2c:a3:ff:54:51:06:15:7e:f2:
         a0:65:b6:00:4a:0d:9c:e4:b8:c4:c5:ae:2a:69:89:50:41:4c:
         71:3d:cb:b1:08:76:8d:fa:80:a8:e6:6d:af:ec:5e:fd:df:7f:
         47:a2:01:32:44:e1:23:3d:c4:c5:55:71:70:eb:94:8e:aa:fb:
         4b:94:1d:b1:3f:57:4a:87:1d:33:89:9e:21:45:40:ca:df:b9:
         f7:19:2e:8e:89:66:40:07:da:b4:55:a5:34:c3:f6:60:bd:f8:
         21:34:88:7b:05:2e:da:b9:fa:ba:3c:c5:a2:b9:0e:4e:8b:21:
         57:5b:34:b3:27:3d:73:7f:1e:e6:c0:d0:cd:46:a0:c9:c7:da:
         25:38:b1:5a:45:0d:5b:5a:65:f7:65:3d:94:ea:3a:5d:d0:c8:
         f6:9c:3a:0c:24:9e:bb:11:01:a3:2f:b6:ff:65:69:a0:17:ab:
         04:42:b9:18:6f:2c:23:82:07:f9:0f:ea:ea:94:55:1e:b8:a3:
         a7:5e:e3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:34:02 2026 by rpki-client