This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132312e302f32342d3234203d3e203532333932.roa
File:                     3139302e39392e3132312e302f32342d3234203d3e203532333932.roa (raw, json)
Hash identifier:          Q/O0V0jw6cRqaHYpkosG4ukdQRTTKZhhtti7L+WFgkA=
Subject key identifier:   FD:4A:C9:72:03:AF:F7:AA:4E:40:71:9A:D1:F8:AC:C0:2C:F7:CC:2E
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       45FB58EA13D1F7DAF3F4BBA9E4BE07E534944C2D
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132312e302f32342d3234203d3e203532333932.roa
Signing time:             Tue 06 Jan 2026 19:17:11 +0000
ROA not before:           Tue 06 Jan 2026 19:12:11 +0000
ROA not after:            Tue 05 Jan 2027 19:17:11 +0000
asID:                     52392
IP address blocks:        190.99.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 17:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fb:58:ea:13:d1:f7:da:f3:f4:bb:a9:e4:be:07:e5:34:94:4c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Jan  6 19:12:11 2026 GMT
            Not After : Jan  5 19:17:11 2027 GMT
        Subject: CN=FD4AC97203AFF7AA4E40719AD1F8ACC02CF7CC2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:83:3c:05:f0:48:9c:f0:02:f9:cc:9d:58:26:
                    9a:70:70:a7:88:0c:ab:f7:d5:33:ff:8e:72:50:cc:
                    06:b6:1b:b0:d4:49:2b:52:6f:33:f2:97:b9:bc:62:
                    c0:ad:7c:d1:6d:52:7d:08:ee:0d:10:9f:74:02:f4:
                    0a:ba:cb:be:bd:13:71:cf:8b:36:60:e0:fa:17:f5:
                    22:f2:f5:a5:26:10:54:53:f6:67:c8:20:f7:2e:4f:
                    1c:71:40:f0:d1:40:97:33:f0:00:21:33:f0:85:6f:
                    21:d5:f6:f4:a8:95:ca:4b:1a:9e:bc:5e:4d:62:c5:
                    0f:28:78:ea:e2:c5:a9:b4:b7:63:d7:89:e0:3f:8a:
                    50:6c:50:1f:84:ec:f9:3c:a6:a5:18:cd:a6:bd:55:
                    5d:41:e2:eb:bb:ae:0c:79:38:24:f1:a0:5c:5c:20:
                    d5:24:de:2d:f4:f8:a2:73:11:23:dd:a0:95:e2:39:
                    c2:4f:df:c9:ba:d9:da:df:d9:08:fe:8f:78:f6:43:
                    84:d8:e5:18:62:09:43:0a:c1:2f:05:06:0c:79:4e:
                    8e:3f:d2:6d:5e:97:25:6b:bd:92:e6:df:b5:e7:93:
                    30:90:33:08:bc:2e:51:8d:30:3b:ce:cc:3e:43:be:
                    bb:85:bf:67:99:af:1c:b8:59:2e:37:15:62:15:c5:
                    aa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4A:C9:72:03:AF:F7:AA:4E:40:71:9A:D1:F8:AC:C0:2C:F7:CC:2E
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132312e302f32342d3234203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:7b:06:e2:35:0e:29:de:c7:1e:4e:2c:b3:91:24:cf:5c:06:
         15:c6:7b:dc:f0:40:23:2d:cc:bb:46:1e:50:d6:79:2a:27:c9:
         d0:a6:a9:8e:45:bb:36:fc:a9:19:c6:ce:57:ce:68:27:3b:73:
         14:d8:f5:f6:bd:21:d2:e7:ad:09:68:02:6a:a7:a8:2d:39:0e:
         5e:51:be:41:d4:7b:80:1f:b0:68:c5:e8:64:61:6c:66:a8:4e:
         d5:08:eb:1e:44:d7:0d:64:30:4c:33:da:9f:90:bb:08:fa:e7:
         9c:ac:be:d1:8f:ce:73:68:81:ce:55:18:9f:22:93:87:9f:c0:
         8c:02:c1:ef:7e:e2:09:4b:3d:b5:dc:b0:87:e5:2b:96:6d:b5:
         22:bf:e2:5d:62:ae:93:7f:84:0d:2f:23:67:10:0e:a2:47:e8:
         93:61:8b:1f:88:ad:cc:4f:20:d6:09:be:87:a4:f8:14:64:ef:
         19:07:e3:d3:b4:96:29:44:45:5e:32:2d:27:3c:c6:2c:3a:97:
         9f:38:f9:c3:2e:c7:aa:5f:3a:fa:63:c8:15:c8:1b:26:ed:e5:
         13:4f:6d:89:61:b3:52:e6:ed:41:4d:d8:af:38:4a:97:28:63:
         09:07:92:95:86:27:d4:75:77:cc:17:57:f3:ae:f8:f0:dd:46:
         61:17:bf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:52:58 2026 by rpki-client