This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/3139302e3132332e31362e302f32322d3234203d3e203532333839.roa
File:                     3139302e3132332e31362e302f32322d3234203d3e203532333839.roa (raw, json)
Hash identifier:          v7m0YYBsPYH4/StCDVxoJYzg6NOgt6ZusK1bieTzYIU=
Subject key identifier:   60:B8:7C:C4:00:DA:A4:CD:F0:E9:A4:87:6E:0B:FA:82:36:1B:EB:D1
Certificate issuer:       /CN=C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8
Certificate serial:       0DF9E1AF021596AAA6F1EA64D97C61CFA9FFDBAE
Authority key identifier: C2:D0:E7:D1:A5:9D:2B:82:9A:F1:B2:62:94:9F:4B:94:C6:CE:F0:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/3139302e3132332e31362e302f32322d3234203d3e203532333839.roa
Signing time:             Tue 06 Jan 2026 19:08:56 +0000
ROA not before:           Tue 06 Jan 2026 19:03:56 +0000
ROA not after:            Tue 05 Jan 2027 19:08:56 +0000
asID:                     52389
IP address blocks:        190.123.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f9:e1:af:02:15:96:aa:a6:f1:ea:64:d9:7c:61:cf:a9:ff:db:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8
        Validity
            Not Before: Jan  6 19:03:56 2026 GMT
            Not After : Jan  5 19:08:56 2027 GMT
        Subject: CN=60B87CC400DAA4CDF0E9A4876E0BFA82361BEBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:db:65:18:6e:db:82:ea:03:b7:32:34:6d:43:
                    61:ab:4d:f0:dc:23:b3:27:2a:93:1d:43:66:59:75:
                    9f:7c:e9:a2:1a:b5:77:03:c3:c8:88:59:c3:cb:3e:
                    ad:63:2c:bd:70:d0:96:4c:62:83:e0:06:c7:4e:c4:
                    71:cd:9a:75:2b:e3:9a:be:00:0a:9f:b5:16:34:e2:
                    67:51:47:4d:37:4b:77:ef:ef:d8:de:72:13:a9:2c:
                    57:83:43:c1:7b:99:57:01:37:b9:9a:57:e8:15:1d:
                    4c:7e:8c:7f:93:48:3e:83:0a:a9:f5:d1:94:c9:a4:
                    f2:37:de:e9:db:a2:27:98:2e:f9:82:94:2e:2f:25:
                    62:14:57:c2:d2:3e:8d:81:c6:31:81:47:e1:f5:f2:
                    d1:24:bc:69:df:08:d0:15:e8:b4:bb:7a:06:63:7d:
                    1a:a2:86:a7:a2:46:dd:e9:f0:ab:6f:28:ac:54:a7:
                    af:cf:72:83:24:e5:63:78:35:98:e3:3e:f2:6d:97:
                    2a:d7:84:fa:45:15:32:07:0a:85:ad:4a:e0:8b:48:
                    54:ea:c0:90:9a:a0:49:e1:83:ca:0e:74:3f:60:d8:
                    c4:3f:c2:78:23:e6:a5:c3:20:6c:fe:63:e6:5f:a9:
                    b2:e6:17:4c:2c:74:32:ec:da:42:79:52:1c:22:fe:
                    4f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B8:7C:C4:00:DA:A4:CD:F0:E9:A4:87:6E:0B:FA:82:36:1B:EB:D1
            X509v3 Authority Key Identifier:
                keyid:C2:D0:E7:D1:A5:9D:2B:82:9A:F1:B2:62:94:9F:4B:94:C6:CE:F0:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2D0E7D1A59D2B829AF1B262949F4B94C6CEF0D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BD745DE6CB24955B38D4AA5346D9346A926A70CA065752E75BED13470A5F487/0/3139302e3132332e31362e302f32322d3234203d3e203532333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:65:0b:34:59:e9:41:1c:bb:1b:5b:83:0f:e1:a8:2e:52:af:
         2d:c2:5b:1a:b7:d5:c3:28:ee:ed:40:a6:73:03:06:4e:e3:c9:
         b6:0a:0c:99:5a:bf:11:42:4d:ef:73:a0:7f:17:9f:20:64:33:
         09:be:b2:6b:f3:9f:f0:65:be:69:eb:31:90:d1:c1:fc:49:2f:
         e1:73:f9:67:62:df:86:b7:21:55:ec:8d:17:5b:c2:58:e5:23:
         c2:1d:d2:65:80:a4:fb:4e:57:36:f3:67:25:c5:64:ed:04:cd:
         43:bd:03:6d:4d:36:79:34:75:d4:85:c5:74:ad:97:9b:d0:a4:
         1b:1f:9d:5f:a3:ab:d4:96:86:0c:14:b1:31:db:cc:31:fd:d2:
         8a:2d:02:ba:5a:05:20:22:5b:14:10:ae:8c:04:1a:36:f5:44:
         18:1e:a0:3c:4b:f6:4d:c4:6b:60:68:60:60:02:54:59:df:f0:
         ec:70:7f:8f:0a:e4:aa:f1:e3:f9:86:29:4b:8a:42:3c:a0:1b:
         35:40:49:05:e3:f6:d7:16:56:88:7a:63:98:03:34:b7:f1:8b:
         79:d9:cd:ee:94:9a:6b:82:81:f9:fd:34:09:b2:00:36:e8:c5:
         13:1b:a3:d0:34:66:19:7b:2d:89:0b:86:35:6b:1a:dd:34:db:
         be:f6:87:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 14 01:02:33 2026 by rpki-client