This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3131392e302f32342d3234203d3e203131303134.roa
File:                     3139302e31322e3131392e302f32342d3234203d3e203131303134.roa (raw, json)
Hash identifier:          jzCKZmfar/M3rxuhcIWrTN7eNDQVfkJNk7T2DayC1zg=
Subject key identifier:   F6:07:95:2F:CB:68:26:FB:3E:0A:47:8C:54:8E:4A:A6:1E:8A:CE:05
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       7E7CD06F6F7C75D5A693E1FBBBD3D94A1FB9FBE1
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3131392e302f32342d3234203d3e203131303134.roa
Signing time:             Tue 06 Jan 2026 19:20:18 +0000
ROA not before:           Tue 06 Jan 2026 19:15:18 +0000
ROA not after:            Tue 05 Jan 2027 19:20:18 +0000
asID:                     11014
IP address blocks:        190.12.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7c:d0:6f:6f:7c:75:d5:a6:93:e1:fb:bb:d3:d9:4a:1f:b9:fb:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Jan  6 19:15:18 2026 GMT
            Not After : Jan  5 19:20:18 2027 GMT
        Subject: CN=F607952FCB6826FB3E0A478C548E4AA61E8ACE05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:de:21:c0:74:5e:06:eb:95:94:9b:85:76:fb:
                    ad:ac:cd:36:9f:60:1a:60:92:da:bf:51:61:3a:74:
                    ad:e5:25:ae:1c:d1:09:ab:b0:c8:ef:2f:03:e2:f4:
                    29:6e:67:70:30:1c:56:5c:58:bc:c8:33:29:e6:4e:
                    22:ce:59:e1:05:57:fe:b4:1b:d3:fd:f5:5f:6f:23:
                    f4:91:c9:8d:48:e3:a8:a7:b1:b3:a5:f8:db:95:b4:
                    7e:2f:a2:6c:71:c3:33:a8:72:94:9b:79:e5:55:80:
                    ad:1b:16:d2:6d:be:4e:1c:67:e0:7f:c0:fa:7a:d3:
                    db:04:b9:1b:cc:0f:15:92:4f:ba:76:6f:67:45:ba:
                    7c:b5:9e:d5:4a:81:43:3c:4e:bc:e0:ad:f1:c9:23:
                    03:04:e0:5c:f9:50:3d:fe:50:ff:b6:7b:a9:54:8b:
                    e0:04:77:80:e5:1a:79:2f:a8:5b:65:bf:cc:76:6c:
                    9d:8a:db:22:5c:72:14:48:31:9a:37:35:7f:b3:04:
                    31:48:22:91:73:a6:86:50:dd:ba:ee:69:28:f1:41:
                    7f:83:5b:2a:82:6a:23:fb:1f:c2:f2:5f:96:22:f5:
                    48:50:b9:c0:14:30:61:2d:80:6c:90:61:19:09:0a:
                    a9:11:85:05:85:d3:e8:e5:f9:e6:9b:eb:86:78:89:
                    95:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:07:95:2F:CB:68:26:FB:3E:0A:47:8C:54:8E:4A:A6:1E:8A:CE:05
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e31322e3131392e302f32342d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:e7:85:56:39:9d:bd:1b:04:80:7b:6e:2b:c0:28:00:4f:bb:
         30:78:17:b8:f2:e0:54:87:5a:07:42:4b:aa:2f:5d:f3:8d:29:
         2a:49:54:e0:0f:ab:7d:2d:07:c2:08:bb:15:75:7a:26:5a:6a:
         5b:e9:41:92:06:d3:1b:71:65:20:20:5c:7e:4c:10:bb:a2:f4:
         67:07:27:81:37:1f:9d:04:0e:bc:8d:92:28:8f:14:91:f6:e9:
         7a:03:e6:08:51:81:65:32:52:9f:33:ca:5d:4f:3f:e4:39:7e:
         0c:51:80:dc:f5:5a:b9:9b:c2:e6:6a:e8:a7:ec:d4:47:80:39:
         19:75:d7:e9:1c:e3:3c:2b:ac:cc:39:9b:1d:a5:93:5f:4f:f4:
         b9:b5:2d:50:48:f2:14:e7:59:cb:b7:0a:6b:d3:c8:4c:ff:79:
         d9:f2:37:fc:81:c8:28:8d:be:54:e3:f4:87:65:2e:dd:60:4d:
         90:3e:69:45:d8:00:8e:89:bc:d7:ba:d2:38:5d:06:9d:56:e8:
         74:f3:16:3d:17:da:86:57:f7:45:9d:e4:8b:dc:d9:89:d0:be:
         5b:b1:2c:c6:c9:a3:d7:60:a6:a6:7f:8c:6c:64:1b:ef:bd:9c:
         66:68:fc:8d:cb:1b:7f:df:6f:bb:73:07:de:7f:78:7e:54:9e:
         c9:c6:c4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:51:45 2026 by rpki-client