This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3131322e3139362e302f32322d3234203d3e203532323638.roa
File:                     3139302e3131322e3139362e302f32322d3234203d3e203532323638.roa (raw, json)
Hash identifier:          FuFY7m5qovDLJTF25Ih5+3CD302gzoIhqALywnH7Zgc=
Subject key identifier:   A3:21:1B:F8:35:4E:78:59:C4:3D:A9:33:B7:1B:3A:81:A5:42:E5:88
Certificate issuer:       /CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Certificate serial:       3236FBCA69AECF2683E6016FC3672279A83D2CB9
Authority key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3131322e3139362e302f32322d3234203d3e203532323638.roa
Signing time:             Tue 06 Jan 2026 19:42:03 +0000
ROA not before:           Tue 06 Jan 2026 19:37:03 +0000
ROA not after:            Tue 05 Jan 2027 19:42:03 +0000
asID:                     52268
IP address blocks:        190.112.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 02:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:36:fb:ca:69:ae:cf:26:83:e6:01:6f:c3:67:22:79:a8:3d:2c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
        Validity
            Not Before: Jan  6 19:37:03 2026 GMT
            Not After : Jan  5 19:42:03 2027 GMT
        Subject: CN=A3211BF8354E7859C43DA933B71B3A81A542E588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:51:72:6b:f5:98:27:8f:22:53:fb:f2:fd:3a:
                    9e:cf:89:6e:1c:f6:d4:9a:98:14:3b:90:a5:a4:d7:
                    2a:6d:63:50:ae:65:ce:ef:d6:9a:e6:ad:60:fa:9b:
                    41:ab:f3:24:cb:77:29:93:cf:b6:ea:26:2d:6c:71:
                    51:37:2b:b3:36:5d:c6:d5:27:2a:9c:f0:7c:55:ac:
                    2d:6b:be:a3:00:fa:05:66:26:32:50:d7:a2:e2:df:
                    0b:18:c7:60:1e:bf:ed:ce:75:04:7e:ca:82:13:b0:
                    23:21:77:13:07:29:e8:b8:9e:c2:f4:18:67:f7:b7:
                    02:9e:52:52:65:5d:98:09:0a:6c:3b:c8:6d:e6:b0:
                    c6:d5:7c:c3:f8:21:a7:04:81:99:b9:e1:ea:8f:c9:
                    d1:a5:35:e3:42:ee:5f:09:c1:1c:b2:3e:96:5d:f0:
                    2c:c3:72:f2:70:bf:6d:3b:6e:07:cf:2a:71:2f:2d:
                    07:d6:8e:48:04:3e:4c:23:41:ac:dd:75:17:cd:ba:
                    c7:03:09:f9:92:92:14:c4:de:b2:ea:db:df:68:9a:
                    1a:b5:b4:36:de:d6:49:78:77:8f:56:b1:e8:bb:f4:
                    3b:13:da:fd:51:26:d0:9a:88:73:fc:c3:03:9e:54:
                    60:b3:f6:15:9c:da:97:52:48:dc:9c:07:c6:d8:e5:
                    db:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:21:1B:F8:35:4E:78:59:C4:3D:A9:33:B7:1B:3A:81:A5:42:E5:88
            X509v3 Authority Key Identifier:
                keyid:A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3139302e3131322e3139362e302f32322d3234203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:70:f5:d6:73:53:fa:1d:29:8c:bb:b0:ab:c9:46:47:22:b1:
         6c:80:c9:77:ce:ca:6f:f6:95:52:29:fa:3f:ef:6e:1f:54:d5:
         72:67:3d:7a:a9:c8:aa:73:08:df:68:9d:85:e7:76:4a:ca:d9:
         2f:ea:00:5c:99:b8:e8:d2:d8:74:73:f2:04:c3:5c:b0:b5:97:
         e7:40:11:b1:0e:53:5e:5a:ef:af:49:f3:34:ac:42:0c:11:8f:
         8c:44:cd:fb:f3:b0:7f:03:27:da:f6:2e:ec:bc:c5:d2:ec:59:
         1a:fe:a3:78:17:e0:cb:d2:63:6e:43:47:1e:2d:7e:94:70:ae:
         ce:eb:3c:fb:d4:8b:82:13:03:74:ce:d9:fb:56:3d:9f:db:3b:
         60:7c:de:74:9a:a7:4c:e9:a9:b5:f4:d5:48:9e:52:54:79:4b:
         0e:71:6f:72:30:e9:09:e7:15:17:a9:7f:3b:fc:23:77:b6:98:
         22:23:0e:36:cc:cb:38:a0:2d:24:c8:75:96:d0:07:94:8b:69:
         f2:77:16:2d:10:c6:cd:39:cf:a2:4a:a1:1e:3c:4b:09:89:19:
         9b:d7:40:bf:2a:8a:21:a8:63:8f:c0:53:51:c2:4a:83:58:ce:
         55:50:ad:e7:40:28:dc:79:5f:55:9a:42:df:1e:6b:ad:c8:84:
         e7:0a:0a:a9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMjb7ymmuzyaD5gFvw2cieag9LLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc5OTc5NTQ5Mjk4QzEwN0IyNUM2QzdFN0ZDMkM3REJC
Mjk1RkMwMjAeFw0yNjAxMDYxOTM3MDNaFw0yNzAxMDUxOTQyMDNaMDMxMTAvBgNV
BAMTKEEzMjExQkY4MzU0RTc4NTlDNDNEQTkzM0I3MUIzQTgxQTU0MkU1ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7UXJr9ZgnjyJT+/L9Op7PiW4c
9tSamBQ7kKWk1yptY1CuZc7v1prmrWD6m0Gr8yTLdymTz7bqJi1scVE3K7M2XcbV
Jyqc8HxVrC1rvqMA+gVmJjJQ16Li3wsYx2Aev+3OdQR+yoITsCMhdxMHKei4nsL0
GGf3twKeUlJlXZgJCmw7yG3msMbVfMP4IacEgZm54eqPydGlNeNC7l8JwRyyPpZd
8CzDcvJwv207bgfPKnEvLQfWjkgEPkwjQazddRfNuscDCfmSkhTE3rLq299omhq1
tDbe1kl4d49Wsei79DsT2v1RJtCaiHP8wwOeVGCz9hWc2pdSSNycB8bY5dtnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUoyEb+DVOeFnEPakztxs6gaVC5YgwHwYDVR0j
BBgwFoAUp5l5VJKYwQeyXGx+f8LH27KV/AIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Rjc1QzVERDQyRjYxOERFMzA4NzZFREZFQ0EyRDM5MTBD
RUY4RDFBRjIyQUY0RUM0NjAyOTA1MTVGMUE4ODg3LzAvQTc5OTc5NTQ5Mjk4QzEw
N0IyNUM2QzdFN0ZDMkM3REJCMjk1RkMwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNzk5Nzk1NDkyOThDMTA3QjI1
QzZDN0U3RkMyQzdEQkIyOTVGQzAyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEY3NUM1REQ0MkY2MThERTMwODc2RURGRUNBMkQzOTEwQ0VGOEQxQUYy
MkFGNEVDNDYwMjkwNTE1RjFBODg4Ny8wLzMxMzkzMDJlMzEzMTMyMmUzMTM5MzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzIzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvnDE
MA0GCSqGSIb3DQEBCwUAA4IBAQB5cPXWc1P6HSmMu7CryUZHIrFsgMl3zspv9pVS
Kfo/724fVNVyZz16qciqcwjfaJ2F53ZKytkv6gBcmbjo0th0c/IEw1ywtZfnQBGx
DlNeWu+vSfM0rEIMEY+MRM3787B/Ayfa9i7svMXS7Fka/qN4F+DL0mNuQ0ceLX6U
cK7O6zz71IuCEwN0ztn7Vj2f2ztgfN50mqdM6am19NVInlJUeUsOcW9yMOkJ5xUX
qX87/CN3tpgiIw42zMs4oC0kyHWW0AeUi2nydxYtEMbNOc+iSqEePEsJiRmb10C/
KoohqGOPwFNRwkqDWM5VUK3nQCjceV9VmkLfHmutyITnCgqp
-----END CERTIFICATE-----
Generated at Tue Jan 13 04:02:22 2026 by rpki-client