This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132342e302f32342d3234203d3e203532333932.roa
File:                     3139302e39392e3132342e302f32342d3234203d3e203532333932.roa (raw, json)
Hash identifier:          ukPXAGNWSpURzz/hrN+ns9GCKJpzVfH/cb85q54C06M=
Subject key identifier:   DA:B8:24:A3:A9:59:BB:F7:BE:56:6C:E1:75:C9:CA:78:DA:72:29:3E
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       103CEB8C67C72EDDBAEB65ED78481C0B7CA2AB40
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132342e302f32342d3234203d3e203532333932.roa
Signing time:             Tue 06 Jan 2026 19:17:11 +0000
ROA not before:           Tue 06 Jan 2026 19:12:11 +0000
ROA not after:            Tue 05 Jan 2027 19:17:11 +0000
asID:                     52392
IP address blocks:        190.99.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3c:eb:8c:67:c7:2e:dd:ba:eb:65:ed:78:48:1c:0b:7c:a2:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Jan  6 19:12:11 2026 GMT
            Not After : Jan  5 19:17:11 2027 GMT
        Subject: CN=DAB824A3A959BBF7BE566CE175C9CA78DA72293E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:7b:45:5f:f2:5d:7b:c6:f1:4b:fb:59:cb:
                    63:0d:04:6a:54:ee:e6:00:19:65:6b:b5:24:2d:b5:
                    01:b6:ec:f7:42:06:1f:1e:8f:bc:9a:8f:6f:72:51:
                    75:ba:8f:a0:dc:96:8b:ed:c9:b6:a5:d6:06:3a:1c:
                    8e:0e:42:51:73:bc:15:0b:47:b5:dc:c5:f6:39:a0:
                    df:28:9a:2b:c9:1a:ee:c1:e4:37:38:42:60:68:cb:
                    92:92:f8:4a:99:1a:a7:df:55:e9:54:66:84:f7:91:
                    03:bf:a7:7f:b3:f7:7f:8c:fd:79:62:4c:71:c6:3c:
                    fc:ef:05:7a:69:3f:2e:8e:8a:b3:b9:7a:a6:0d:6b:
                    db:f3:86:0d:32:f7:33:03:62:34:a9:95:70:cd:e8:
                    07:f3:e3:7e:ef:99:3f:d5:87:3b:5b:aa:60:ff:18:
                    17:89:75:0d:86:ce:8c:36:7f:9f:70:c4:8a:63:e8:
                    60:f0:f5:18:3e:9c:40:ce:a8:5a:00:2f:0d:92:0c:
                    55:c3:7e:dd:bd:d2:79:25:e9:51:6d:f2:d7:68:7f:
                    88:f4:0b:d2:c6:2b:19:3b:10:83:2a:6a:fa:0c:a9:
                    8e:27:cb:c1:a5:e0:c0:70:80:f9:b5:c9:8b:34:88:
                    18:ea:20:ad:2a:78:46:96:30:e2:a8:12:bd:f6:a2:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B8:24:A3:A9:59:BB:F7:BE:56:6C:E1:75:C9:CA:78:DA:72:29:3E
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132342e302f32342d3234203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:74:8f:93:26:4f:7e:c2:bb:fe:62:9d:78:1c:86:e1:9c:6c:
         5e:64:b4:1a:d0:32:10:c8:b5:88:7b:21:b7:63:85:5a:0f:aa:
         ea:53:1f:e9:fa:29:83:2f:3c:97:6c:70:3e:99:6a:a9:a9:db:
         2b:38:1d:08:98:e2:1a:6a:48:ae:8d:60:e2:e3:39:1a:6d:8d:
         3a:e7:6a:9d:13:d9:e4:bb:87:82:44:9e:02:9d:15:84:61:c7:
         aa:10:4d:9d:bd:68:6d:66:e8:48:a0:d2:93:77:77:dd:5e:ce:
         af:ed:f2:cf:28:fe:65:7c:6e:0e:f6:9a:db:1a:1a:53:ac:02:
         1f:05:0d:ea:86:49:28:a1:65:04:17:fe:a5:b1:55:c4:fa:ad:
         3f:f6:27:14:37:95:92:86:9a:ef:43:dd:7c:36:93:93:f6:01:
         ef:f8:90:96:bb:f9:20:5f:5d:2b:db:46:65:71:6c:f6:9f:87:
         fd:16:79:d0:7c:80:a8:1f:8c:bf:2b:5d:09:38:f9:9e:a3:37:
         75:22:a7:03:33:73:d6:de:26:83:e5:a5:b7:6b:fd:6a:47:8f:
         c5:ab:ae:44:a1:36:4e:4b:8e:e6:32:22:d4:30:25:d4:ee:10:
         76:a2:19:86:b5:68:4a:79:e6:bb:24:5f:c4:4f:dc:26:76:c1:
         3a:e4:9b:7f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEDzrjGfHLt2662XteEgcC3yiq0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY1NTQ1OUM1MzgyNUIwMjY5MUUxNjFEMEFERTcyMzVC
NzE1RTE1ODAeFw0yNjAxMDYxOTEyMTFaFw0yNzAxMDUxOTE3MTFaMDMxMTAvBgNV
BAMTKERBQjgyNEEzQTk1OUJCRjdCRTU2NkNFMTc1QzlDQTc4REE3MjI5M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1BHtFX/Jde8bxS/tZy2MNBGpU
7uYAGWVrtSQttQG27PdCBh8ej7yaj29yUXW6j6Dclovtybal1gY6HI4OQlFzvBUL
R7XcxfY5oN8omivJGu7B5Dc4QmBoy5KS+EqZGqffVelUZoT3kQO/p3+z93+M/Xli
THHGPPzvBXppPy6OirO5eqYNa9vzhg0y9zMDYjSplXDN6Afz437vmT/VhztbqmD/
GBeJdQ2Gzow2f59wxIpj6GDw9Rg+nEDOqFoALw2SDFXDft290nkl6VFt8tdof4j0
C9LGKxk7EIMqavoMqY4ny8Gl4MBwgPm1yYs0iBjqIK0qeEaWMOKoEr32orY/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU2rgko6lZu/e+VmzhdcnKeNpyKT4wHwYDVR0j
BBgwFoAUn1VFnFOCWwJpHhYdCt5yNbcV4VgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NTAyMzg5MTMwOENCRkY3QUQzNDBGODE5NEYwNUQyNzI3
RjVFQzU4QTU3RDhDRTFEQkREN0YyODBBMUEwNTlGLzAvOUY1NTQ1OUM1MzgyNUIw
MjY5MUUxNjFEMEFERTcyMzVCNzE1RTE1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjU1NDU5QzUzODI1QjAyNjkx
RTE2MUQwQURFNzIzNUI3MTVFMTU4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTUwMjM4OTEzMDhDQkZGN0FEMzQwRjgxOTRGMDVEMjcyN0Y1RUM1OEE1
N0Q4Q0UxREJERDdGMjgwQTFBMDU5Ri8wLzMxMzkzMDJlMzkzOTJlMzEzMjM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzkzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5jfDAN
BgkqhkiG9w0BAQsFAAOCAQEA0HSPkyZPfsK7/mKdeByG4ZxsXmS0GtAyEMi1iHsh
t2OFWg+q6lMf6fopgy88l2xwPplqqanbKzgdCJjiGmpIro1g4uM5Gm2NOudqnRPZ
5LuHgkSeAp0VhGHHqhBNnb1obWboSKDSk3d33V7Or+3yzyj+ZXxuDvaa2xoaU6wC
HwUN6oZJKKFlBBf+pbFVxPqtP/YnFDeVkoaa70PdfDaTk/YB7/iQlrv5IF9dK9tG
ZXFs9p+H/RZ50HyAqB+MvytdCTj5nqM3dSKnAzNz1t4mg+Wlt2v9akePxauuRKE2
TkuO5jIi1DAl1O4QdqIZhrVoSnnmuyRfxE/cJnbBOuSbfw==
-----END CERTIFICATE-----
Generated at Tue Jan 13 07:56:14 2026 by rpki-client