This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3232342e302f32312d3234203d3e203131303134.roa
File:                     3139302e3131312e3232342e302f32312d3234203d3e203131303134.roa (raw, json)
Hash identifier:          8S4Azq6wnAFGaVJyx0sFIiwmOciPZoNI/blGVgqYy3o=
Subject key identifier:   24:52:61:44:0C:EF:68:8F:5F:45:B1:2A:E2:AB:23:3D:41:7D:2A:56
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       5C3EB606CE4BC09D09ACDF871074B1CAC89E6AFA
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3232342e302f32312d3234203d3e203131303134.roa
Signing time:             Tue 06 Jan 2026 19:20:17 +0000
ROA not before:           Tue 06 Jan 2026 19:15:17 +0000
ROA not after:            Tue 05 Jan 2027 19:20:17 +0000
asID:                     11014
IP address blocks:        190.111.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 17:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3e:b6:06:ce:4b:c0:9d:09:ac:df:87:10:74:b1:ca:c8:9e:6a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Jan  6 19:15:17 2026 GMT
            Not After : Jan  5 19:20:17 2027 GMT
        Subject: CN=245261440CEF688F5F45B12AE2AB233D417D2A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e2:af:28:c4:12:9b:80:f3:73:4f:3e:26:b4:
                    0f:e7:b2:1e:50:24:16:c1:d0:15:87:d9:46:1f:04:
                    18:f7:46:1c:b2:18:b4:f5:9c:45:5e:59:d2:cb:14:
                    aa:7b:ec:f9:90:00:b6:57:bb:83:80:ed:56:79:b5:
                    cc:12:04:e3:9b:ff:b3:d0:60:f9:f5:98:9e:2c:a6:
                    83:af:35:76:1c:2f:3f:8e:e8:43:27:f6:c2:b1:37:
                    76:62:98:45:e9:ab:1a:9c:ce:28:6b:0e:98:aa:83:
                    40:96:25:13:de:92:fb:5f:ba:e4:09:17:23:2c:2d:
                    b7:a1:33:e5:40:41:c4:78:a1:1e:76:c9:63:d3:42:
                    3a:0d:45:9d:ed:9e:88:be:51:bc:6b:0a:dc:9a:c0:
                    60:4c:9c:6b:67:1a:ec:20:3c:e6:58:6b:ba:88:51:
                    6c:fd:a8:01:00:aa:94:a4:17:2b:37:0e:d0:eb:9f:
                    dd:da:cb:ba:93:a1:75:c7:87:11:eb:b6:bd:f1:55:
                    df:aa:e0:3c:c4:a9:21:f8:4e:92:9f:69:a3:28:b0:
                    ef:fc:8b:a8:8b:b2:31:4e:58:a2:f5:70:a6:a6:a6:
                    5f:1c:55:92:d5:ab:7f:9b:64:07:52:ac:ac:3b:70:
                    05:1f:ee:ea:96:62:71:bc:e7:04:10:20:30:f2:a4:
                    b4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:52:61:44:0C:EF:68:8F:5F:45:B1:2A:E2:AB:23:3D:41:7D:2A:56
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3232342e302f32312d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:cc:87:a9:b1:b5:a3:ba:46:f7:95:c1:7b:a1:98:eb:25:
         f4:4d:41:08:12:df:33:d5:a4:a2:4a:ab:52:04:2e:0b:21:87:
         6a:e3:6a:56:8d:d9:0a:2d:b1:54:6a:8c:a1:6f:2a:ef:3d:ae:
         64:40:40:a9:f0:93:15:18:49:ca:cd:b1:62:7b:e0:b2:06:f9:
         40:c5:70:32:a4:2f:46:1f:9d:5a:0b:86:d0:52:f7:c9:b3:ec:
         7a:1a:7d:6f:6b:df:5f:0f:4b:86:a0:e6:da:aa:26:d8:15:ed:
         d4:c1:e6:9f:30:79:11:0d:a4:a6:b5:79:d9:eb:34:b8:43:6d:
         d9:7d:8a:ae:2e:9a:32:5e:b0:5c:d7:23:20:14:2b:04:27:40:
         bf:c8:d8:5f:d1:25:2f:93:75:ff:b6:4c:21:52:2b:7e:02:48:
         58:18:a2:6e:d3:de:7f:da:3b:07:8a:85:0a:cf:46:bc:33:fe:
         f6:9d:67:05:eb:6e:bb:14:ef:72:44:23:61:de:fa:6e:9b:62:
         dc:d2:d0:7e:46:45:24:36:95:77:83:ce:01:70:ef:33:ca:f0:
         0c:e7:d9:3c:f7:e7:80:42:19:59:88:df:0b:1c:4c:13:8b:a9:
         12:6d:7e:2a:bc:ec:17:d8:cf:a2:9a:b3:93:8e:a8:b8:df:f8:
         fc:44:da:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:34:34 2026 by rpki-client