This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/3139302e3131322e3133362e302f32342d3234203d3e20323639383937.roa
File:                     3139302e3131322e3133362e302f32342d3234203d3e20323639383937.roa (raw, json)
Hash identifier:          B4arNUM1U2Ev22XQu9DYGBJLd025cZfXPffcewk3Brw=
Subject key identifier:   D7:C5:4B:58:95:CA:B2:78:E4:CB:C3:27:9E:99:28:51:4E:01:6E:C2
Certificate issuer:       /CN=FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4
Certificate serial:       0E94063ED97909DA605FC87EE586EA6EDB85FF04
Authority key identifier: FD:40:15:BF:5F:4C:07:4C:A4:D5:23:02:EB:FB:E3:92:C5:FF:E6:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/3139302e3131322e3133362e302f32342d3234203d3e20323639383937.roa
Signing time:             Tue 06 Jan 2026 01:57:20 +0000
ROA not before:           Tue 06 Jan 2026 01:52:20 +0000
ROA not after:            Tue 05 Jan 2027 01:57:20 +0000
asID:                     269897
IP address blocks:        190.112.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:94:06:3e:d9:79:09:da:60:5f:c8:7e:e5:86:ea:6e:db:85:ff:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4
        Validity
            Not Before: Jan  6 01:52:20 2026 GMT
            Not After : Jan  5 01:57:20 2027 GMT
        Subject: CN=D7C54B5895CAB278E4CBC3279E9928514E016EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:56:cc:e9:7a:63:07:a2:b7:6a:43:78:01:66:
                    54:7b:da:19:b5:88:e5:41:ae:7c:66:a6:d4:26:ca:
                    a2:03:e0:80:b5:70:47:d2:04:94:ca:c4:51:99:ef:
                    bb:a9:17:6d:2b:1c:50:85:85:64:f9:ec:70:c2:6e:
                    22:f0:cb:e9:b3:5b:75:e9:64:c4:61:06:cd:c5:c3:
                    28:89:00:cc:78:c2:fc:30:e9:d5:d8:0e:48:68:8a:
                    8b:d1:69:03:b8:ef:dd:12:ed:00:e2:f1:c1:fd:8a:
                    36:08:f0:e2:fd:c8:16:e6:27:60:b0:61:c6:71:c1:
                    f1:22:d0:8f:91:f1:4d:41:dd:fb:d6:fa:62:d6:e8:
                    90:64:52:cd:93:b3:a5:24:7c:c4:d5:64:d9:1a:f1:
                    8a:f3:93:3d:06:1c:7f:c9:b7:76:8c:10:3e:80:25:
                    fb:69:a2:0c:b9:88:f8:42:ba:ff:01:73:d8:4e:72:
                    93:a2:ad:8f:ec:37:1c:3b:ba:c9:6a:ce:55:a8:14:
                    c8:12:1d:9a:86:1d:45:a4:a2:f6:49:ea:eb:61:5e:
                    77:5a:fa:f7:42:cf:93:29:8b:b3:85:66:7b:3e:36:
                    f2:7c:11:c0:ae:08:3d:f7:88:1e:d2:07:c5:72:f1:
                    21:c6:cc:cd:e1:c0:ea:18:0c:3c:c9:19:23:ea:b3:
                    58:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C5:4B:58:95:CA:B2:78:E4:CB:C3:27:9E:99:28:51:4E:01:6E:C2
            X509v3 Authority Key Identifier:
                keyid:FD:40:15:BF:5F:4C:07:4C:A4:D5:23:02:EB:FB:E3:92:C5:FF:E6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/3139302e3131322e3133362e302f32342d3234203d3e20323639383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:fd:d2:4e:57:ff:82:2b:6c:70:d2:c5:d7:42:5a:08:de:20:
         38:8e:17:d0:03:75:93:fd:60:2b:54:23:b1:13:5d:a1:f5:bd:
         44:d8:63:5c:16:6c:6c:39:a4:70:fa:c2:e6:e3:15:1f:b7:7f:
         e0:00:c1:43:bd:4b:04:fc:fc:72:df:64:ed:99:77:a3:1a:55:
         24:60:a4:fb:5a:86:52:b4:fa:2b:85:8c:32:53:5e:2e:21:09:
         34:43:81:9f:8d:63:2d:88:42:5c:72:29:e0:d2:5b:d2:55:ee:
         f4:62:05:0d:68:31:4d:78:d9:56:4b:b0:1d:18:72:93:ae:e9:
         07:4d:41:0f:88:a7:7e:fa:d0:57:c5:7d:75:3e:3e:9b:43:be:
         24:bb:70:38:43:b5:87:ba:84:cf:53:e6:50:55:43:7f:7a:de:
         98:13:ab:26:7d:8c:df:89:86:23:46:39:f7:ee:63:78:64:4a:
         f2:ac:9d:d8:95:03:a9:c6:86:32:71:1c:1e:81:4a:9b:3a:ff:
         18:9c:8d:a6:aa:13:67:33:5c:95:d0:b2:6e:d7:ea:1a:de:e3:
         52:bf:ec:22:85:df:09:05:ca:cc:d1:b9:cd:42:2a:20:8a:a5:
         8d:0d:17:cf:2d:bc:5d:3f:ad:f7:2a:06:ff:0c:68:4b:3f:bb:
         87:c3:57:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 06:13:22 2026 by rpki-client