This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234302e302f32322d3232203d3e203532323738.roa
File:                     3139302e3130352e3234302e302f32322d3232203d3e203532323738.roa (raw, json)
Hash identifier:          fxcR64EPstpGiLu8g/q6vRzIKM9rKw9HtG+CGUg2WJ0=
Subject key identifier:   B1:A5:B9:42:73:10:1E:4D:9F:97:43:0C:87:DC:0C:57:54:93:B8:A2
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       54F1792ECA2203A9F6F0D1211BA61B2E00339712
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234302e302f32322d3232203d3e203532323738.roa
Signing time:             Tue 06 Jan 2026 19:30:13 +0000
ROA not before:           Tue 06 Jan 2026 19:25:13 +0000
ROA not after:            Tue 05 Jan 2027 19:30:13 +0000
asID:                     52278
IP address blocks:        190.105.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 14:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f1:79:2e:ca:22:03:a9:f6:f0:d1:21:1b:a6:1b:2e:00:33:97:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Jan  6 19:25:13 2026 GMT
            Not After : Jan  5 19:30:13 2027 GMT
        Subject: CN=B1A5B94273101E4D9F97430C87DC0C575493B8A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:88:cc:1b:07:82:5c:54:75:8b:c0:64:50:
                    5d:0f:11:73:13:94:94:93:bf:9d:e0:e9:56:75:f1:
                    84:db:95:a0:c5:7b:8a:64:09:d0:22:43:08:98:3e:
                    58:34:08:bb:53:f9:b6:85:15:2c:52:23:32:85:fb:
                    97:d9:8e:c0:2e:67:00:13:8e:86:79:87:e1:00:d7:
                    f2:77:e4:52:fd:9b:21:45:7f:65:ab:33:99:cc:c6:
                    08:1f:01:25:29:09:7c:29:07:9a:ea:ea:36:40:88:
                    a0:45:67:c4:cc:95:a4:34:d7:bf:8f:b3:68:db:54:
                    e2:1e:57:d9:4f:95:f3:d1:8d:94:e0:ed:b3:f7:93:
                    83:24:6f:b5:ec:6f:0c:6c:23:ce:c1:cf:9b:5b:18:
                    8a:42:04:0e:8e:2f:37:9a:27:28:65:9d:56:57:5b:
                    31:b4:fa:44:f8:99:9d:01:69:3b:0a:5e:f3:71:7e:
                    16:7a:25:5c:72:76:74:75:1d:37:27:d5:2c:c0:99:
                    08:11:31:25:72:f2:6f:85:36:81:67:70:98:7d:9f:
                    f5:3b:a5:b8:42:cd:9d:8c:53:9f:1c:70:d3:19:9c:
                    63:63:24:7e:7b:a1:0e:dc:ec:ce:0d:1f:5a:61:bf:
                    d2:14:df:48:c2:de:57:c4:e6:74:06:42:5f:78:cf:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A5:B9:42:73:10:1E:4D:9F:97:43:0C:87:DC:0C:57:54:93:B8:A2
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234302e302f32322d3232203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:9c:7b:5d:c5:35:11:0e:b4:15:3f:c7:09:ca:80:9b:0a:91:
         c0:f1:f6:1e:6f:82:1f:93:2f:27:b8:7b:d6:fa:91:96:4f:ee:
         4a:be:46:ef:e5:c4:e9:3a:ef:43:22:55:9c:06:4c:20:ac:96:
         5d:b2:58:ae:3d:be:c1:b2:84:96:f5:2d:7f:e9:49:94:00:79:
         f0:b4:18:60:72:51:00:d9:13:f0:94:9c:02:83:90:14:70:ea:
         3f:0d:68:1c:59:a9:d3:23:e6:ea:eb:c0:a0:64:b7:9a:d7:d4:
         ea:e3:a0:d9:21:ab:6f:24:33:09:f5:bc:47:84:c4:7b:3e:b6:
         f2:2b:33:88:2c:fa:b2:d9:7a:7a:be:b3:34:34:67:5b:58:59:
         67:e3:5b:e2:37:29:5f:43:1b:3f:4b:0b:99:25:83:19:45:27:
         0d:f0:b7:be:5c:13:ca:3f:30:51:e5:89:3c:ef:8f:ef:44:69:
         28:07:13:97:87:fc:4d:35:a4:a3:37:6b:ec:ce:48:e4:f1:58:
         61:9e:bc:eb:c0:7b:0f:86:d1:a8:10:26:72:47:7e:af:5a:ce:
         02:34:1b:2e:86:92:e1:cd:8c:e1:f7:81:6d:4b:ef:8b:c9:0c:
         37:72:c0:86:37:ff:3e:f9:33:2c:56:29:f6:e6:8c:b5:7e:86:
         c2:09:50:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:53 2026 by rpki-client