This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3139302e3132342e32382e302f32322d3234203d3e203631343631.roa
File:                     3139302e3132342e32382e302f32322d3234203d3e203631343631.roa (raw, json)
Hash identifier:          wEeUKgi/5VmrEqyWz3VYoEvMi265zjdEIC24ChVXTbI=
Subject key identifier:   05:6C:77:FB:40:06:11:53:00:AD:DE:7A:08:B0:90:DC:38:75:6E:9D
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       37233C3FB53938AE90B1D51352F351F0397237DD
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3139302e3132342e32382e302f32322d3234203d3e203631343631.roa
Signing time:             Tue 06 Jan 2026 19:11:35 +0000
ROA not before:           Tue 06 Jan 2026 19:06:35 +0000
ROA not after:            Tue 05 Jan 2027 19:11:35 +0000
asID:                     61461
IP address blocks:        190.124.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 12:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:23:3c:3f:b5:39:38:ae:90:b1:d5:13:52:f3:51:f0:39:72:37:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Jan  6 19:06:35 2026 GMT
            Not After : Jan  5 19:11:35 2027 GMT
        Subject: CN=056C77FB4006115300ADDE7A08B090DC38756E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:49:1b:2a:f8:62:67:3e:c8:76:c4:2b:ae:
                    23:ef:ac:55:a1:15:c3:c2:8e:87:a1:44:97:cd:22:
                    3a:1c:d1:f6:ab:32:54:3c:3c:87:09:7f:9d:13:c4:
                    09:6c:ce:a8:3d:fe:26:69:21:8f:e5:81:08:c7:1c:
                    fb:f8:fb:11:ae:dd:f8:bf:7e:2b:15:18:2b:74:48:
                    e9:ff:a9:35:c4:60:f7:54:5c:d4:40:31:93:8e:09:
                    94:a3:a7:ce:90:62:96:13:f7:76:89:cd:85:d5:62:
                    5e:7a:19:83:25:b2:36:91:4e:e1:39:27:53:d4:7f:
                    74:a1:64:2d:6b:da:90:d4:36:2d:68:41:e0:b9:c3:
                    5d:c5:a1:d0:6a:63:9f:3c:78:d8:d7:77:da:64:4d:
                    5b:b3:8d:60:84:98:3b:05:a8:bd:82:1c:da:1b:e2:
                    15:43:00:85:3a:76:5a:2f:41:71:6d:36:fa:e3:cb:
                    51:16:76:ba:04:0c:6e:60:9b:84:0c:c9:5c:81:b3:
                    a3:0a:a9:d1:9e:26:be:46:fa:32:d8:ba:b2:1d:c3:
                    d1:3e:c5:6d:46:89:0a:71:90:aa:5d:b6:e4:74:94:
                    85:ce:28:d1:34:a9:b9:06:a2:09:87:f0:58:2f:c7:
                    68:55:32:22:3b:c8:79:6e:5b:4b:f7:4e:10:d1:74:
                    ac:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6C:77:FB:40:06:11:53:00:AD:DE:7A:08:B0:90:DC:38:75:6E:9D
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3139302e3132342e32382e302f32322d3234203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:67:7f:57:9d:b9:f0:48:ce:a4:4c:38:31:d6:2e:42:10:8a:
         cd:a8:2a:aa:5e:3c:5d:ee:11:95:20:91:51:cd:62:7e:2d:78:
         de:be:52:3b:ee:57:3e:24:9a:4a:1d:da:1b:d1:51:d3:81:60:
         59:a4:4c:fa:14:5b:57:e9:67:c8:fd:0d:cd:06:b7:2d:07:7a:
         d2:f4:44:3e:2d:00:62:38:60:f9:07:7f:25:82:45:41:9d:07:
         31:55:f4:a7:5a:16:76:70:56:0b:c6:13:e3:74:a4:1e:7d:15:
         bd:3f:5a:75:f5:07:4b:16:35:68:5d:cd:fc:9c:27:97:bd:24:
         fe:b9:05:2d:e2:91:57:a6:2f:4d:e5:14:63:8c:53:2a:4c:8a:
         aa:cc:aa:f5:fd:d5:4d:75:1b:6f:c2:0a:d6:24:51:43:cb:60:
         16:12:32:b0:bb:44:0b:ac:73:10:0e:ec:ca:fd:83:8e:d2:f0:
         7c:ca:9b:97:d9:a0:8d:14:88:31:94:1d:c0:86:b6:31:4e:ce:
         9c:ff:fc:f2:62:33:cf:95:72:71:e5:20:7e:c9:b7:cd:c4:68:
         30:f2:8c:6c:c3:41:e3:0a:7c:2e:37:d8:d1:b0:1b:ae:19:b4:
         fd:5f:51:5a:78:0d:da:05:75:56:76:8d:31:63:a4:10:fb:c8:
         79:ad:60:92
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNyM8P7U5OK6QsdUTUvNR8DlyN90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEzNzE0Mjc1NERFRDkxNUQzMzQxNjI4RTc0QThCOTFB
RjBDQjc2QTAeFw0yNjAxMDYxOTA2MzVaFw0yNzAxMDUxOTExMzVaMDMxMTAvBgNV
BAMTKDA1NkM3N0ZCNDAwNjExNTMwMEFEREU3QTA4QjA5MERDMzg3NTZFOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQqkkbKvhiZz7IdsQrriPvrFWh
FcPCjoehRJfNIjoc0farMlQ8PIcJf50TxAlszqg9/iZpIY/lgQjHHPv4+xGu3fi/
fisVGCt0SOn/qTXEYPdUXNRAMZOOCZSjp86QYpYT93aJzYXVYl56GYMlsjaRTuE5
J1PUf3ShZC1r2pDUNi1oQeC5w13FodBqY588eNjXd9pkTVuzjWCEmDsFqL2CHNob
4hVDAIU6dlovQXFtNvrjy1EWdroEDG5gm4QMyVyBs6MKqdGeJr5G+jLYurIdw9E+
xW1GiQpxkKpdtuR0lIXOKNE0qbkGogmH8Fgvx2hVMiI7yHluW0v3ThDRdKzHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBWx3+0AGEVMArd56CLCQ3Dh1bp0wHwYDVR0j
BBgwFoAUsTcUJ1Te2RXTNBYo50qLka8Mt2owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRTdCNjQzMDk3MjdGNDQ2N0I2OEE3NkQ5MEQzMDVCRkUz
Q0NGQzkxNTE4NTM1QkQ4NzVFRTU1MDM4MUExREZDLzAvQjEzNzE0Mjc1NERFRDkx
NUQzMzQxNjI4RTc0QThCOTFBRjBDQjc2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTM3MTQyNzU0REVEOTE1RDMz
NDE2MjhFNzRBOEI5MUFGMENCNzZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkU3QjY0MzA5NzI3RjQ0NjdCNjhBNzZEOTBEMzA1QkZFM0NDRkM5MTUx
ODUzNUJEODc1RUU1NTAzODFBMURGQy8wLzMxMzkzMDJlMzEzMjM0MmUzMjM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM0MzYzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr58HDAN
BgkqhkiG9w0BAQsFAAOCAQEAwmd/V5258EjOpEw4MdYuQhCKzagqql48Xe4RlSCR
Uc1ifi143r5SO+5XPiSaSh3aG9FR04FgWaRM+hRbV+lnyP0NzQa3LQd60vREPi0A
Yjhg+Qd/JYJFQZ0HMVX0p1oWdnBWC8YT43SkHn0VvT9adfUHSxY1aF3N/Jwnl70k
/rkFLeKRV6YvTeUUY4xTKkyKqsyq9f3VTXUbb8IK1iRRQ8tgFhIysLtEC6xzEA7s
yv2DjtLwfMqbl9mgjRSIMZQdwIa2MU7OnP/88mIzz5VyceUgfsm3zcRoMPKMbMNB
4wp8LjfY0bAbrhm0/V9RWngN2gV1VnaNMWOkEPvIea1gkg==
-----END CERTIFICATE-----
Generated at Tue Jan 13 11:50:30 2026 by rpki-client