This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/3139302e39372e3232342e302f31392d3234203d3e20323633373033.roa
File:                     3139302e39372e3232342e302f31392d3234203d3e20323633373033.roa (raw, json)
Hash identifier:          9S9b26NnjcJ6wh9mEbLMpOk59e1EZfCASgPi8wXWVV8=
Subject key identifier:   A4:57:33:3F:29:CD:3A:98:4F:2C:0A:8A:73:E5:96:AF:27:CB:26:99
Certificate issuer:       /CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
Certificate serial:       3DA1F37A4ACAD5F156E32DE04FC692D0F8AD06D8
Authority key identifier: C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/3139302e39372e3232342e302f31392d3234203d3e20323633373033.roa
Signing time:             Tue 06 Jan 2026 19:21:23 +0000
ROA not before:           Tue 06 Jan 2026 19:16:23 +0000
ROA not after:            Tue 05 Jan 2027 19:21:23 +0000
asID:                     263703
IP address blocks:        190.97.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 13:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a1:f3:7a:4a:ca:d5:f1:56:e3:2d:e0:4f:c6:92:d0:f8:ad:06:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
        Validity
            Not Before: Jan  6 19:16:23 2026 GMT
            Not After : Jan  5 19:21:23 2027 GMT
        Subject: CN=A457333F29CD3A984F2C0A8A73E596AF27CB2699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:23:09:21:ac:4e:1e:36:6c:bc:7a:b1:a2:
                    c3:20:00:2f:4e:ba:f5:77:ce:19:50:7c:c5:9a:d6:
                    73:48:64:61:ad:81:3b:cb:d3:9c:b9:b2:2d:31:36:
                    22:af:4b:80:c5:82:b4:05:7d:9d:6c:4f:d0:8c:37:
                    e8:7f:de:41:3a:46:a5:51:ee:77:38:fa:b7:0d:d3:
                    52:d9:5e:d0:91:05:98:a5:fa:44:bf:d8:2e:d4:c7:
                    f9:be:d1:d5:9f:78:92:c9:51:1e:05:be:51:82:b3:
                    22:24:ab:5a:3b:d4:c9:94:ef:2f:91:74:69:4b:05:
                    aa:3d:f3:54:a7:75:36:5b:70:4d:c2:40:0b:ba:c9:
                    b2:b5:16:7c:0f:e7:ed:59:c3:49:36:a7:b3:c6:03:
                    a2:05:ba:0b:bf:6a:cc:46:2f:bf:13:50:7f:ed:75:
                    21:57:71:a2:be:db:57:f3:82:14:72:66:0e:14:cf:
                    71:6f:2f:f8:37:87:19:4c:2f:39:05:e1:15:8e:1c:
                    3c:47:72:27:02:e5:e3:8a:c9:40:80:cc:52:de:7c:
                    a6:e9:72:7a:2c:af:38:7a:d6:80:64:2d:62:71:6b:
                    72:ca:80:37:4a:d7:1c:aa:c8:06:b0:36:c3:58:72:
                    ca:2c:ce:fb:b4:5d:27:54:e6:2a:13:64:46:df:b0:
                    dc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:57:33:3F:29:CD:3A:98:4F:2C:0A:8A:73:E5:96:AF:27:CB:26:99
            X509v3 Authority Key Identifier:
                keyid:C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/3139302e39372e3232342e302f31392d3234203d3e20323633373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:f3:ad:5a:56:26:20:05:b0:d6:c2:3b:9a:95:31:3c:cf:75:
         ac:6a:58:4d:77:a5:35:88:9f:8e:a2:06:fc:d7:c4:0c:ab:76:
         dc:4d:56:1b:9b:33:49:bd:ae:cd:e4:d7:06:28:3d:a0:a8:67:
         b9:eb:26:7a:8a:bb:69:0c:bd:d1:61:12:7b:be:79:d9:69:24:
         41:ce:55:e3:ad:e0:e2:a1:2b:9a:65:06:12:7c:89:7b:9e:5a:
         d0:68:1a:d2:54:c6:8e:6f:ab:11:f1:7b:d6:e4:7f:de:01:b8:
         9c:89:c7:f2:b9:2a:17:70:50:17:60:d5:a6:fa:dd:db:1c:de:
         e3:1f:42:69:21:78:78:25:04:73:1e:5b:dd:04:d9:3f:2b:31:
         27:1e:12:b6:fe:e9:db:83:b0:8b:d4:91:a7:32:df:f2:e0:59:
         ca:07:64:8a:ff:45:84:11:a9:52:9b:38:81:cc:2a:08:58:08:
         3c:30:2a:4a:ad:a6:17:67:5c:54:80:b6:34:75:f4:08:a1:70:
         4c:02:10:df:8b:d1:c2:3f:0a:5d:36:3c:47:2f:63:62:72:14:
         99:06:d8:20:5c:0a:83:73:53:dc:ab:03:9d:10:d7:b9:dd:74:
         28:9d:e2:c8:68:38:54:80:00:bf:16:18:92:e6:c6:fa:20:1b:
         56:e0:f2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:25:15 2026 by rpki-client