This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/3139302e3131322e3133382e302f32342d3234203d3e20323639383937.roa
File:                     3139302e3131322e3133382e302f32342d3234203d3e20323639383937.roa (raw, json)
Hash identifier:          OIhdmb0cWg8+wWaek4zIrHCpsF0d7f5F1euk0JPweUo=
Subject key identifier:   A5:37:9B:DA:E8:14:74:A5:0C:DC:28:24:20:62:A8:05:E5:F8:F4:48
Certificate issuer:       /CN=FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4
Certificate serial:       769D809A6B47B6D9D913056A7DE4F620F60F92D9
Authority key identifier: FD:40:15:BF:5F:4C:07:4C:A4:D5:23:02:EB:FB:E3:92:C5:FF:E6:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/3139302e3131322e3133382e302f32342d3234203d3e20323639383937.roa
Signing time:             Tue 06 Jan 2026 01:57:20 +0000
ROA not before:           Tue 06 Jan 2026 01:52:20 +0000
ROA not after:            Tue 05 Jan 2027 01:57:20 +0000
asID:                     269897
IP address blocks:        190.112.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:9d:80:9a:6b:47:b6:d9:d9:13:05:6a:7d:e4:f6:20:f6:0f:92:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4
        Validity
            Not Before: Jan  6 01:52:20 2026 GMT
            Not After : Jan  5 01:57:20 2027 GMT
        Subject: CN=A5379BDAE81474A50CDC28242062A805E5F8F448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:07:3e:01:2d:8b:b1:77:75:07:52:ed:a6:
                    b5:37:3b:0a:a7:72:36:8c:43:27:75:9d:19:81:24:
                    a8:0c:c6:b0:d8:e6:5f:c8:0e:10:c1:32:32:48:68:
                    cd:c3:82:42:fd:63:85:9b:61:88:9a:31:e4:e4:fd:
                    28:b0:00:74:55:e3:11:b0:c3:15:d4:f9:90:e9:76:
                    4d:0f:e9:28:5c:5e:31:b8:31:69:81:1e:74:36:5e:
                    ed:b5:24:c5:8e:98:5a:15:fe:ce:32:41:26:3a:91:
                    64:5c:2a:cc:d2:f5:a5:b2:62:79:92:23:44:06:66:
                    be:19:2b:4d:53:8e:bb:27:cf:43:d3:9f:4e:4c:71:
                    6c:34:a7:cb:26:b7:5b:ed:9a:4d:30:29:ee:56:b0:
                    4a:06:ea:19:fc:49:52:13:8c:17:67:fd:6a:5f:e8:
                    d5:ee:67:8f:51:b6:7b:d1:11:9b:cd:98:60:03:07:
                    fd:7d:7f:c8:67:b4:a4:2d:45:88:24:1a:d9:9f:fd:
                    d8:fa:28:47:54:58:31:ef:3d:a2:bc:c3:71:56:95:
                    60:93:7e:56:a3:33:2d:42:f8:57:ab:95:3c:a0:a5:
                    87:20:8c:a1:43:90:8d:f3:f0:d2:14:92:4f:d5:08:
                    1a:4b:8c:59:f8:59:4d:f7:10:ea:90:75:bb:60:fa:
                    11:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:37:9B:DA:E8:14:74:A5:0C:DC:28:24:20:62:A8:05:E5:F8:F4:48
            X509v3 Authority Key Identifier:
                keyid:FD:40:15:BF:5F:4C:07:4C:A4:D5:23:02:EB:FB:E3:92:C5:FF:E6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/3139302e3131322e3133382e302f32342d3234203d3e20323639383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:99:33:04:be:7d:6d:e5:33:19:e2:6e:0e:68:e0:f1:d5:8a:
         6a:8f:d2:3b:ed:ef:99:ce:dd:d5:93:42:45:70:9e:07:4c:ac:
         60:8b:86:f0:1a:ec:d4:f7:e2:7d:a3:fa:db:05:f2:26:7a:cf:
         9a:c7:14:49:74:89:35:f2:96:9e:22:11:21:d5:96:21:bf:5a:
         66:50:0e:17:48:8a:20:07:33:33:98:69:25:9c:65:e3:c6:29:
         8c:be:2b:08:dc:7c:9a:a0:13:57:71:85:aa:96:59:f3:60:32:
         09:a3:04:1a:f7:2f:32:82:5f:c0:23:2e:27:58:50:9d:92:ef:
         7e:fb:b7:48:6e:1c:4a:28:37:20:24:7d:df:c9:70:2b:1d:28:
         bf:ef:80:52:ff:d1:92:5b:b8:98:b2:51:79:e4:64:7c:f9:48:
         a0:25:8a:ab:ec:26:0e:7d:10:80:22:ff:bf:c9:c6:ee:6f:69:
         69:b2:81:c2:c4:96:e7:d3:e8:a4:e1:60:33:9d:f5:51:a3:bc:
         65:7a:78:e6:48:fd:c7:88:69:70:f5:70:cc:90:b3:1c:ae:aa:
         9c:a5:d3:6d:c0:59:ba:63:a6:1b:c9:2d:c3:c7:54:ee:ae:4f:
         bf:35:fb:42:98:94:c9:5b:36:a6:4f:33:00:ca:5e:ba:8f:6b:
         cb:43:de:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 06:11:51 2026 by rpki-client