This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3232342e302f31392d3234203d3e203131303134.roa
File:                     3139302e3130342e3232342e302f31392d3234203d3e203131303134.roa (raw, json)
Hash identifier:          Zkb3zfJaeJ+WCMCwj694mvM5kA8fKWp7Ya4HxdVQTn8=
Subject key identifier:   A3:89:C9:15:4C:8A:0D:E3:E3:08:2A:23:65:56:58:49:47:60:15:14
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       76F36D3C45C0459B9F8C0168302D91AB6C747A2B
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3232342e302f31392d3234203d3e203131303134.roa
Signing time:             Tue 06 Jan 2026 19:20:14 +0000
ROA not before:           Tue 06 Jan 2026 19:15:14 +0000
ROA not after:            Tue 05 Jan 2027 19:20:14 +0000
asID:                     11014
IP address blocks:        190.104.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 17:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f3:6d:3c:45:c0:45:9b:9f:8c:01:68:30:2d:91:ab:6c:74:7a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Jan  6 19:15:14 2026 GMT
            Not After : Jan  5 19:20:14 2027 GMT
        Subject: CN=A389C9154C8A0DE3E3082A236556584947601514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:35:91:9a:ee:11:80:6e:23:3e:ce:9c:1f:be:
                    fb:d4:74:2d:91:b8:5a:a6:c8:b0:06:0d:97:67:b3:
                    78:1c:95:6e:20:b4:be:50:85:79:53:22:bc:ea:77:
                    f9:fc:26:ee:d2:7e:2f:7e:9b:dc:52:b7:f3:dc:2d:
                    2a:a7:05:c9:11:72:e4:a1:de:e4:0e:bf:34:b3:55:
                    9d:3e:a2:4b:61:bb:f2:2a:94:de:25:cb:1b:a5:9a:
                    4d:f3:df:04:89:97:35:b1:ce:77:60:eb:a9:46:28:
                    b3:e4:8b:fc:a9:9d:d3:5e:de:2d:91:40:75:6b:60:
                    1d:9f:7b:1e:e8:fe:32:5f:b5:ec:af:32:f2:1e:06:
                    9c:d2:42:70:ab:08:d5:3d:7c:82:94:b5:e3:ef:ad:
                    7d:f2:98:43:a8:c7:ae:89:5f:cb:66:f5:d9:91:62:
                    00:7c:07:b4:9b:46:ee:0a:a9:77:5a:3c:d0:a8:5a:
                    b7:dd:08:ae:48:9b:7c:77:67:aa:ab:00:e7:c8:d7:
                    d3:54:44:66:6d:dd:57:13:1b:f1:93:6d:af:59:f9:
                    ec:4e:f3:d6:37:f6:a4:d2:d6:0a:fd:ad:97:d6:03:
                    e2:2d:cd:95:b1:d5:16:30:5e:a3:65:5e:78:0c:00:
                    7c:55:85:2d:2f:77:dc:52:6b:b6:c3:86:da:42:06:
                    53:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:89:C9:15:4C:8A:0D:E3:E3:08:2A:23:65:56:58:49:47:60:15:14
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3232342e302f31392d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         78:b6:99:37:8e:86:ba:53:4d:aa:47:fa:a8:c7:f1:30:7f:34:
         42:03:81:f5:2b:03:7b:d8:a8:41:12:d8:2d:aa:f2:62:74:15:
         88:3e:d4:a4:3a:7f:84:65:f0:1c:ac:b0:45:55:7c:cb:b7:89:
         12:40:8a:44:02:1c:79:16:86:8a:89:e4:c1:dd:f6:07:79:42:
         12:a8:29:20:09:c3:9a:27:46:c3:c0:98:70:9a:bb:c4:25:d7:
         cb:94:60:88:6b:d5:3f:cc:7f:ff:61:5d:23:8c:03:d7:24:99:
         5f:9d:5d:68:31:7d:90:69:26:11:f0:62:74:10:69:c0:c6:63:
         21:42:2e:bb:0a:fe:1d:1c:69:c9:28:50:8b:b6:0b:7f:26:b4:
         b2:c4:e5:a7:26:1c:32:7f:22:bd:b1:a5:4d:98:14:43:64:2f:
         c3:78:88:78:66:cb:d0:8e:63:54:88:7d:f9:d9:62:d9:0d:78:
         53:9b:1e:c0:32:5c:2a:1c:8e:39:c5:72:3c:e9:71:86:72:b8:
         6c:85:11:e6:af:3f:a2:93:9f:ad:b9:7d:37:8d:ac:65:f9:64:
         35:86:8d:65:a0:21:43:fb:3a:1e:f6:1b:d0:a0:5b:f5:3f:21:
         75:17:88:8e:f5:00:77:29:68:a8:2a:f6:49:b8:b4:f3:30:c9:
         65:a8:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:33 2026 by rpki-client