This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231342e302f32332d3234203d3e203630303232.roa
File:                     3139302e3132312e3231342e302f32332d3234203d3e203630303232.roa (raw, json)
Hash identifier:          7n5ALo0DiDyQEVuP+Wg0QcBgQ+lbnn0Y8LZyjUQoleQ=
Subject key identifier:   6A:05:1A:3D:20:50:7C:9E:E4:96:80:2D:20:CF:CF:12:03:BB:D5:3D
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       32767CE9A780A0BA2DD87EA765D0D25662AA6E4A
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231342e302f32332d3234203d3e203630303232.roa
Signing time:             Tue 06 Jan 2026 20:51:30 +0000
ROA not before:           Tue 06 Jan 2026 20:46:30 +0000
ROA not after:            Tue 05 Jan 2027 20:51:30 +0000
asID:                     60022
IP address blocks:        190.121.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 22:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:76:7c:e9:a7:80:a0:ba:2d:d8:7e:a7:65:d0:d2:56:62:aa:6e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Jan  6 20:46:30 2026 GMT
            Not After : Jan  5 20:51:30 2027 GMT
        Subject: CN=6A051A3D20507C9EE496802D20CFCF1203BBD53D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:aa:2f:30:c5:59:4e:f6:19:78:33:52:52:
                    6c:d8:7b:af:a3:a4:fc:90:02:b0:86:5a:03:66:c6:
                    1a:11:43:5b:13:68:f9:44:7f:68:d6:7f:f0:ed:d0:
                    44:18:52:7e:3a:c9:a6:b4:6b:df:24:73:bd:a8:1f:
                    12:aa:fb:33:47:49:ad:0d:a6:2c:e2:33:7c:62:16:
                    66:1f:22:25:02:bd:06:a8:5b:4b:41:53:8c:ea:b8:
                    b9:c5:cb:46:99:09:79:eb:9e:fe:e5:2d:2b:d4:ad:
                    38:4b:3b:40:9f:51:5b:10:ef:b8:e3:cd:5c:46:54:
                    48:34:f6:2b:60:1a:69:bc:6f:e9:61:3d:80:17:83:
                    59:28:e2:53:9e:a3:3c:41:47:5a:e2:74:d3:6f:3c:
                    30:9a:13:e8:20:8e:92:ab:78:89:0b:19:44:6f:cf:
                    82:5f:e7:80:20:86:de:be:2d:b5:e5:6d:6e:8a:44:
                    56:d9:a2:d0:a6:8b:88:0b:e3:4d:a3:98:05:0f:b5:
                    1e:62:83:9a:ee:3e:c3:80:8b:80:72:93:4a:c3:e7:
                    67:d7:e0:e4:34:33:f2:26:cb:dc:36:a7:2b:6c:9e:
                    76:c8:37:a1:d4:cf:eb:9e:b2:b2:ec:0a:f0:24:05:
                    09:6a:20:87:86:db:19:b1:15:3a:fe:6d:94:b2:eb:
                    97:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:05:1A:3D:20:50:7C:9E:E4:96:80:2D:20:CF:CF:12:03:BB:D5:3D
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231342e302f32332d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:58:26:46:99:06:81:b1:80:f1:5c:84:c1:c1:eb:cd:e2:f9:
         c2:a4:67:30:1f:d2:d5:c9:e5:95:33:33:eb:68:00:6a:3b:93:
         3e:44:b1:5e:a2:ee:7a:ee:11:9a:1a:44:0e:46:85:6e:cc:c0:
         70:e2:34:61:0c:a7:37:37:bc:c4:25:4e:9e:a7:ac:bf:ee:cf:
         44:96:b8:75:ee:c7:c2:a9:e3:e6:a1:0e:7c:25:3b:d6:73:d9:
         36:83:68:d1:63:45:3e:4e:0a:b0:9e:7a:4c:a0:a6:70:5c:03:
         35:d2:f3:0c:01:a1:7b:5d:d1:c7:dc:4f:7b:f9:73:d8:9d:18:
         7b:85:ad:16:9d:2a:32:f6:66:5b:c0:b2:4a:18:35:17:12:ad:
         2f:02:b2:ba:02:bd:6e:98:49:66:18:29:8a:59:1c:50:09:33:
         6e:74:84:4b:c3:b8:c0:76:64:a0:d6:fd:71:92:65:87:fd:69:
         77:a0:c3:99:e6:ba:88:39:0f:77:b2:50:57:71:d8:e9:4e:3a:
         3c:26:aa:01:9e:bb:97:69:77:ee:cc:52:dc:c4:bf:57:36:5f:
         e4:fd:c6:1a:c4:aa:50:16:ce:69:19:ef:de:e3:9e:fa:c8:05:
         e1:29:35:60:75:6c:78:9f:22:1d:6e:59:31:64:35:c7:0c:46:
         e5:91:42:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:41:21 2026 by rpki-client