This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132352e302f32342d3234203d3e203532333932.roa
File:                     3139302e39392e3132352e302f32342d3234203d3e203532333932.roa (raw, json)
Hash identifier:          y+ZazcmhySxhUAJFo/EQBFTrfVPJS3K0pnt7GzuriXk=
Subject key identifier:   6E:69:93:ED:5E:61:59:77:95:4A:23:5C:80:E5:5F:7D:EC:41:C9:33
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       29C903DEC4E3D6EBF95A52D8CC030261300F7745
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132352e302f32342d3234203d3e203532333932.roa
Signing time:             Tue 06 Jan 2026 19:17:10 +0000
ROA not before:           Tue 06 Jan 2026 19:12:10 +0000
ROA not after:            Tue 05 Jan 2027 19:17:10 +0000
asID:                     52392
IP address blocks:        190.99.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c9:03:de:c4:e3:d6:eb:f9:5a:52:d8:cc:03:02:61:30:0f:77:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Jan  6 19:12:10 2026 GMT
            Not After : Jan  5 19:17:10 2027 GMT
        Subject: CN=6E6993ED5E615977954A235C80E55F7DEC41C933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ef:4f:b3:9d:9b:3d:fc:0c:b5:b1:27:98:c5:
                    7b:56:87:a3:62:59:e6:f7:5b:03:91:33:de:d1:7f:
                    1e:9b:36:17:b7:3d:4e:5e:98:18:2c:2a:6d:43:a3:
                    0f:71:7f:0a:83:62:78:10:1f:e8:6b:99:ff:ca:02:
                    e3:e2:f7:29:e7:75:88:9b:93:be:de:31:d3:c5:b0:
                    d0:47:be:74:86:95:18:c3:3f:4c:86:7a:5c:b2:5e:
                    8b:01:e9:33:bc:61:bb:2a:57:c7:f0:9c:51:d8:92:
                    17:88:75:48:8b:f7:9b:a4:54:3e:ea:a7:d5:ab:ff:
                    0b:00:6e:c2:e4:71:97:70:69:7f:fd:c0:4f:63:a1:
                    2b:02:f5:a5:2e:25:87:13:b2:cb:c9:ba:d1:88:d8:
                    73:2b:13:df:d7:c7:ac:d7:e1:b1:67:a2:e0:51:44:
                    57:65:3d:b7:56:a5:88:bb:cc:88:dd:bc:e9:ce:b4:
                    73:7e:e4:53:30:dd:3a:53:ac:be:de:3b:6f:2a:50:
                    4d:15:fb:02:17:b8:29:42:5b:d5:49:c6:76:21:21:
                    28:be:81:32:6b:8e:b7:a8:cb:dc:ad:c0:89:a3:16:
                    b1:0a:10:73:26:1d:58:34:1f:2d:2b:f4:bd:cf:e9:
                    c5:0e:4a:ed:5e:c5:3a:68:09:54:ed:99:2b:28:65:
                    31:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:69:93:ED:5E:61:59:77:95:4A:23:5C:80:E5:5F:7D:EC:41:C9:33
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132352e302f32342d3234203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:dc:41:9e:f9:95:1b:56:97:31:f2:26:4d:f1:81:3d:a8:e7:
         da:ce:de:96:dc:4e:5f:a9:4c:b8:bf:ab:ca:78:57:4d:25:2d:
         70:bf:30:0b:ab:56:70:02:9f:e8:8d:87:55:ea:d2:1d:9a:55:
         6c:f0:b1:3d:e7:21:14:21:38:35:e1:28:29:ee:c3:76:08:74:
         09:e2:45:30:e2:6a:ae:fd:0d:b9:1f:b8:81:38:25:34:76:f7:
         e1:20:fb:b9:b4:74:34:b2:b9:58:58:a2:3f:35:6d:5c:f3:36:
         86:d0:21:41:4f:57:e6:51:2b:95:5a:07:f8:9a:59:65:58:ec:
         48:24:22:96:26:dc:87:ed:e9:94:4e:c5:78:d0:eb:04:51:8e:
         cd:e1:8d:d6:42:ce:0a:c9:67:7b:e6:ad:1e:3b:1e:9e:f0:fc:
         76:de:64:9f:d9:a4:d8:6e:40:23:af:94:ba:13:f5:e0:2f:41:
         f0:de:7e:ab:17:e5:e2:d7:ec:fc:f6:6f:b4:20:4b:4e:3b:2d:
         83:59:a0:17:7a:52:7a:19:42:1d:e6:26:a6:b2:a9:34:e5:e7:
         aa:cc:47:19:c6:0e:f3:f2:3d:93:97:2a:98:97:a0:21:23:17:
         93:a0:b9:30:74:10:a2:a4:58:13:71:ef:5e:72:c0:33:35:d7:
         c8:55:88:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:05:33 2026 by rpki-client