This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33392e302f32342d3234203d3e203139383633.roa
File:                     3139302e39332e33392e302f32342d3234203d3e203139383633.roa (raw, json)
Hash identifier:          s7H932nrmx/yuDjyQGaPrtAfufn8TIEjBbw4fkx9/9k=
Subject key identifier:   12:B3:AC:3F:85:A3:73:83:D8:7A:38:FC:E5:02:C1:7D:4A:46:59:BF
Certificate issuer:       /CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
Certificate serial:       7D78A8BD8878731092BF4DC29CA18ECB1FD95A51
Authority key identifier: 54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33392e302f32342d3234203d3e203139383633.roa
Signing time:             Tue 06 Jan 2026 19:42:14 +0000
ROA not before:           Tue 06 Jan 2026 19:37:14 +0000
ROA not after:            Tue 05 Jan 2027 19:42:14 +0000
asID:                     19863
IP address blocks:        190.93.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 16:04:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:78:a8:bd:88:78:73:10:92:bf:4d:c2:9c:a1:8e:cb:1f:d9:5a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
        Validity
            Not Before: Jan  6 19:37:14 2026 GMT
            Not After : Jan  5 19:42:14 2027 GMT
        Subject: CN=12B3AC3F85A37383D87A38FCE502C17D4A4659BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:38:32:3a:6b:50:ba:99:82:5e:51:9c:96:93:
                    7d:0a:46:b7:2b:fe:84:87:8a:71:a0:9d:01:a9:79:
                    3e:70:3e:11:e1:62:c8:ae:ee:ff:34:7a:f0:80:18:
                    f6:f7:0b:1f:19:bd:1a:23:0c:8f:f8:72:a2:7e:e9:
                    0a:01:d9:9a:ca:0f:2a:f6:d6:9c:dd:50:91:4b:52:
                    f5:eb:2a:bc:d1:7b:23:da:98:b9:f6:72:6d:d9:a4:
                    a2:4f:9c:78:ca:81:49:cd:a3:90:a9:ec:a7:06:67:
                    a2:83:3d:11:85:c8:98:2a:5c:e7:8c:61:3b:f6:95:
                    f1:52:b1:ce:ce:2f:ff:82:5d:9b:be:bc:dc:8b:59:
                    fb:6e:4f:11:be:0d:c5:43:9b:29:a4:ac:e5:41:9b:
                    33:f3:30:5f:64:87:ab:7b:77:d5:f4:9a:4d:18:ac:
                    c3:93:bd:4f:87:0b:bb:18:89:fd:53:8c:3d:f8:90:
                    d4:5b:f6:97:31:65:2e:d0:1c:f2:9e:3b:5d:af:1d:
                    5c:b3:c7:16:9b:90:34:bc:77:85:c0:ea:6c:a9:8b:
                    88:b7:f2:df:10:e2:b1:91:d1:d8:4b:5c:f7:fb:21:
                    3a:72:08:d7:9b:7e:fc:af:d4:4a:ad:50:ed:e1:6f:
                    fd:b7:7c:c5:f7:74:b8:ef:2c:1c:47:45:17:b9:f5:
                    4b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B3:AC:3F:85:A3:73:83:D8:7A:38:FC:E5:02:C1:7D:4A:46:59:BF
            X509v3 Authority Key Identifier:
                keyid:54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33392e302f32342d3234203d3e203139383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:dd:76:04:38:7e:6f:d3:18:3c:18:3e:34:e2:ec:4e:f6:a1:
         7b:2e:9e:ff:76:2f:b9:f9:14:b9:bc:f9:08:1a:fb:d2:a1:b0:
         db:69:a5:7f:00:59:83:71:00:f6:04:5a:43:d8:0c:58:6b:fd:
         69:65:8e:ca:7c:34:6e:5a:32:05:ae:ee:90:27:f5:4b:07:8f:
         a8:a3:ff:29:92:a7:21:8c:d8:9e:17:2f:2b:a5:7f:68:a1:51:
         e5:cf:1c:39:ef:e4:6b:6f:23:0f:99:e8:fd:8e:71:27:91:81:
         4f:45:82:4d:78:ce:70:c1:a6:fc:4f:eb:c5:70:0a:ca:b1:62:
         18:6a:67:00:05:61:92:8f:88:73:13:b2:c7:d2:a6:58:d4:a1:
         73:11:a1:74:bc:67:09:04:f7:0b:4b:13:83:e7:56:c9:b9:50:
         e8:97:7f:b2:4d:2d:f2:94:ee:a6:c7:93:0f:2c:39:4a:2c:c9:
         9b:d2:ba:99:ef:56:63:ed:ed:ea:16:91:f9:13:12:01:c9:4f:
         ef:f4:88:78:af:b1:92:f5:d4:fa:69:a8:dc:7b:6e:75:5a:cd:
         19:ba:e2:a5:e9:59:27:a4:cf:3b:7c:fe:9a:a2:e7:a5:f4:b8:
         70:43:f9:06:62:16:b0:bc:62:16:ac:85:23:80:57:21:a8:bc:
         0e:8b:0a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:21:17 2026 by rpki-client