This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e36342e302f31392d3139203d3e2036353335.roa
File:                     3139302e35342e36342e302f31392d3139203d3e2036353335.roa (raw, json)
Hash identifier:          U8C2w6gXXXvaQe/tzBKybvPQwdUO1+dTe27c5LgqT5k=
Subject key identifier:   9A:DD:53:1B:94:76:FA:F5:93:8D:7A:28:C9:3A:84:6C:C1:A2:C7:5A
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       42C2A13ED59A795A147D470CC9F1F142564724D1
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e36342e302f31392d3139203d3e2036353335.roa
Signing time:             Tue 06 Jan 2026 20:54:22 +0000
ROA not before:           Tue 06 Jan 2026 20:49:22 +0000
ROA not after:            Tue 05 Jan 2027 20:54:22 +0000
asID:                     6535
IP address blocks:        190.54.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 06:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c2:a1:3e:d5:9a:79:5a:14:7d:47:0c:c9:f1:f1:42:56:47:24:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Jan  6 20:49:22 2026 GMT
            Not After : Jan  5 20:54:22 2027 GMT
        Subject: CN=9ADD531B9476FAF5938D7A28C93A846CC1A2C75A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:eb:d5:dc:dc:9f:84:28:c7:37:e9:18:55:fa:
                    0c:7e:d1:91:25:1a:47:61:a6:24:ac:ee:31:e6:f0:
                    04:b3:ac:55:44:e8:5c:00:17:7b:6d:0f:c1:25:7a:
                    3a:83:62:85:06:a8:5d:f2:ae:44:a6:f5:9a:ce:5c:
                    58:e1:72:e6:b7:3a:73:6a:a9:8a:e2:ec:07:05:8f:
                    8f:6a:f5:5e:f1:d8:b1:04:22:79:69:69:69:f2:9f:
                    8f:26:aa:cd:5e:fd:f4:e2:bd:bd:56:0e:b0:7e:7a:
                    c4:99:a3:41:6b:22:c7:fd:4b:20:15:27:55:df:52:
                    75:a0:52:6e:30:9d:11:a6:9b:3b:57:39:7a:08:a2:
                    05:35:c8:e0:bf:b6:1e:9d:3c:6f:2c:d4:f7:2a:a2:
                    1f:25:37:be:21:60:20:02:18:ce:a3:40:a9:d8:a3:
                    ad:ab:e5:60:52:4a:d5:0c:ed:8d:12:9b:78:c3:94:
                    89:35:2b:c9:7b:62:f9:44:28:27:0f:b2:6d:43:db:
                    11:a1:2e:e4:28:ed:7f:c2:c1:d9:e0:3b:5c:36:6a:
                    bd:89:13:c2:cb:d1:df:b2:2d:b6:ef:24:be:7b:8b:
                    8d:62:be:8c:50:00:4a:53:fd:90:9d:a8:5b:66:99:
                    b6:39:a2:c8:c6:71:d8:8f:91:c4:8d:6c:23:57:dd:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DD:53:1B:94:76:FA:F5:93:8D:7A:28:C9:3A:84:6C:C1:A2:C7:5A
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e36342e302f31392d3139203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1f:7b:95:6c:18:0e:1e:07:53:7c:dd:c1:fb:8f:bc:ad:95:03:
         cd:bc:28:9f:01:57:3d:75:db:e1:f4:c0:b4:c4:9f:b6:1a:d4:
         76:98:e7:f5:f7:c7:45:ee:a2:b4:27:89:42:c0:a3:c8:7b:e6:
         a2:71:22:7a:d6:cd:a8:64:2f:41:ce:1e:dd:3e:0a:f5:32:22:
         2d:d8:9d:99:70:6c:72:62:e5:bb:3d:0e:96:3e:a7:7c:b0:1b:
         15:c6:09:28:31:83:38:6d:03:aa:81:9a:e9:10:86:b7:37:fd:
         bc:79:77:3f:dd:83:76:34:cb:2d:28:b7:cc:13:d2:21:41:98:
         46:cc:f1:25:ae:da:37:c2:c4:2e:52:b3:d8:28:b1:48:2a:5b:
         08:f6:5b:aa:af:e2:df:2b:92:eb:2a:c6:49:e2:5d:59:21:62:
         64:a1:60:6f:90:20:41:8c:43:a8:27:b7:ad:9e:82:ce:17:94:
         50:84:62:42:66:a0:15:ae:9d:54:7d:e6:81:dd:b0:b8:06:a6:
         f8:58:1d:50:ae:0a:bf:42:5a:97:1c:35:c3:bd:8e:49:7a:f4:
         8f:11:d8:a5:92:bf:70:a1:59:1f:97:6e:43:be:05:8b:ea:1d:
         07:e9:bf:36:55:44:a0:e2:f0:ac:5a:2a:d9:28:b5:69:95:21:
         ae:e5:d3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:38:10 2026 by rpki-client