This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3139302e3132312e3137362e302f32302d3234203d3e203237373531.roa
File:                     3139302e3132312e3137362e302f32302d3234203d3e203237373531.roa (raw, json)
Hash identifier:          bS4cMrZuVyRcVFeuxygySclZXmwAtBtH3JJbUpwIl3g=
Subject key identifier:   F1:C0:E5:81:D2:93:C7:68:0F:4F:10:DD:7F:42:41:C2:32:5C:E9:CC
Certificate issuer:       /CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
Certificate serial:       04197A57457752D87D29B9C3611FE5EBB807C418
Authority key identifier: 49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3139302e3132312e3137362e302f32302d3234203d3e203237373531.roa
Signing time:             Tue 06 Jan 2026 19:37:14 +0000
ROA not before:           Tue 06 Jan 2026 19:32:14 +0000
ROA not after:            Tue 05 Jan 2027 19:37:14 +0000
asID:                     27751
IP address blocks:        190.121.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:19:7a:57:45:77:52:d8:7d:29:b9:c3:61:1f:e5:eb:b8:07:c4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
        Validity
            Not Before: Jan  6 19:32:14 2026 GMT
            Not After : Jan  5 19:37:14 2027 GMT
        Subject: CN=F1C0E581D293C7680F4F10DD7F4241C2325CE9CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:ed:c0:d5:0f:d5:f3:cd:f4:2b:e0:65:ed:
                    30:54:00:fc:5e:c3:13:2a:4e:11:74:f3:3d:9f:3d:
                    7b:3f:78:9e:dc:c5:b9:02:b1:e0:89:a9:c5:72:f9:
                    3e:a2:81:c5:f7:75:c2:2d:76:2d:8b:03:b9:92:c4:
                    a6:3d:a0:57:98:f3:04:77:5a:d1:03:de:17:85:e2:
                    e7:35:e9:94:f2:45:c8:e3:5f:ef:1b:ed:80:dd:b8:
                    7c:3d:9a:f5:b9:3e:7c:4e:c5:ce:49:b8:67:75:2d:
                    25:c5:1d:d8:48:55:ed:ce:a8:a1:da:77:54:7f:88:
                    dc:1a:35:5d:d3:2f:14:e2:48:ca:63:32:08:c2:4a:
                    84:7d:ee:49:89:cd:25:9c:b5:ab:eb:2c:3f:61:09:
                    25:cd:60:fa:7b:2f:b2:c7:80:5d:6b:28:6f:a0:39:
                    76:aa:81:a1:ee:1c:c7:2d:73:36:ef:6e:2a:24:08:
                    dd:49:12:4f:a8:44:45:0f:40:b7:71:d8:a6:a6:c4:
                    a5:02:55:e0:6b:e0:2e:66:e4:d9:d3:ac:8a:33:e8:
                    bc:a1:3e:be:2a:0c:db:b9:5f:81:94:92:03:01:60:
                    e9:30:6e:45:42:58:17:8f:cf:f4:51:65:7f:c2:57:
                    60:f2:1e:32:d7:b8:35:b4:df:9c:c1:af:38:26:6a:
                    bb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C0:E5:81:D2:93:C7:68:0F:4F:10:DD:7F:42:41:C2:32:5C:E9:CC
            X509v3 Authority Key Identifier:
                keyid:49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3139302e3132312e3137362e302f32302d3234203d3e203237373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:c3:1e:2e:d6:22:9f:62:09:10:cc:a4:95:af:2b:d0:22:fa:
         3d:d1:79:86:16:9e:5a:67:0e:f5:f0:98:cc:52:d0:8d:bb:37:
         c1:45:de:a0:0d:3a:58:30:b9:30:64:cf:44:34:b2:32:d1:20:
         ac:80:3a:74:cb:7c:0e:9f:9f:31:8d:10:5c:a3:5b:58:22:75:
         59:bd:48:e7:4b:4d:9c:5c:34:ab:99:4b:8b:bc:4a:81:76:b3:
         53:a5:68:19:aa:2a:6c:47:50:9e:a1:f8:ed:c0:4d:88:53:e9:
         d2:74:88:57:61:4c:cf:22:96:48:1c:c5:6f:09:50:ae:8f:34:
         e9:49:87:ef:8c:2f:bc:05:92:12:6a:fe:6c:59:92:b1:f5:88:
         85:ce:4a:8a:a5:bd:9f:13:7a:98:d2:a4:c6:55:4f:9b:20:57:
         e1:a3:e8:8f:90:c7:30:a7:91:4c:23:8c:b4:48:e0:bf:c4:4d:
         20:69:e2:c1:d4:2e:f5:61:69:a5:9c:48:20:8e:48:78:c1:9b:
         5d:4d:48:a0:26:77:86:dd:23:e5:67:80:38:22:d3:78:69:62:
         68:1d:00:ff:9d:b6:03:b5:21:1d:ce:c8:6d:6a:36:a6:d9:31:
         99:7a:2c:02:e2:f8:83:bc:76:99:a7:5c:86:fa:5c:a6:a8:40:
         8e:bf:cc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:32:04 2026 by rpki-client