This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/3139302e3137312e38302e302f32322d3234203d3e203532343638.roa
File:                     3139302e3137312e38302e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          6W3yYGamS9jN/oCFxlXwgolO9MAmcfItbvAwg6Iz+VY=
Subject key identifier:   6D:8E:10:80:53:D0:42:9C:03:55:80:BA:39:FB:A3:00:09:BB:3F:79
Certificate issuer:       /CN=A8BD34F2B469A2D97364857900B9F36A1297D50E
Certificate serial:       5CB9E5251017733ABCAB5F90D267A8E43626D3DC
Authority key identifier: A8:BD:34:F2:B4:69:A2:D9:73:64:85:79:00:B9:F3:6A:12:97:D5:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/3139302e3137312e38302e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:00:41 +0000
ROA not before:           Tue 06 Jan 2026 18:55:41 +0000
ROA not after:            Tue 05 Jan 2027 19:00:41 +0000
asID:                     52468
IP address blocks:        190.171.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b9:e5:25:10:17:73:3a:bc:ab:5f:90:d2:67:a8:e4:36:26:d3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8BD34F2B469A2D97364857900B9F36A1297D50E
        Validity
            Not Before: Jan  6 18:55:41 2026 GMT
            Not After : Jan  5 19:00:41 2027 GMT
        Subject: CN=6D8E108053D0429C035580BA39FBA30009BB3F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:e0:d0:e2:59:bc:78:40:8c:d1:a1:31:9a:
                    bd:83:c5:8f:82:12:89:da:1e:54:2b:7e:aa:68:60:
                    af:89:9d:d5:e9:26:4f:f8:27:dc:cd:a4:df:32:c1:
                    f6:6c:19:a7:88:bd:32:17:15:3f:7a:bf:f0:21:ed:
                    67:fa:6e:11:20:d4:2e:84:1f:16:ed:3a:44:89:ef:
                    b9:cf:b0:e4:bb:38:c4:cb:79:06:8e:5d:bd:ac:30:
                    b8:27:d7:a0:72:4a:60:ca:64:73:8b:ac:18:c2:b6:
                    fb:72:ad:aa:f2:37:f7:4a:4c:16:22:df:25:e1:53:
                    f7:af:8a:62:6e:73:e8:e5:6a:0f:7a:83:69:f2:84:
                    80:f2:f5:b2:bc:17:0c:65:59:19:43:5d:52:e0:dd:
                    e5:00:c6:e2:8e:31:9f:13:47:06:fb:c0:51:af:1b:
                    ea:b8:83:6d:1c:de:c5:ff:b7:17:3a:97:8f:ff:ad:
                    ff:3e:fd:a4:45:84:b8:e4:08:8d:04:ab:ef:af:d5:
                    b8:30:51:20:3a:15:b7:f3:03:ff:42:b4:6e:2b:f9:
                    a0:45:96:23:17:8a:a0:25:3f:8d:91:29:8c:0e:fc:
                    d5:17:df:fe:d5:0b:d9:a7:f0:aa:94:8b:f5:5d:a7:
                    de:29:f6:55:f1:0d:9f:e3:a4:37:5b:bd:5d:74:6d:
                    f0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8E:10:80:53:D0:42:9C:03:55:80:BA:39:FB:A3:00:09:BB:3F:79
            X509v3 Authority Key Identifier:
                keyid:A8:BD:34:F2:B4:69:A2:D9:73:64:85:79:00:B9:F3:6A:12:97:D5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/3139302e3137312e38302e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:c8:f0:00:dd:2d:b7:d4:f8:6d:ef:aa:ef:f2:cd:af:72:ba:
         aa:e7:26:fb:b2:1b:45:b8:91:c2:3f:42:e2:3c:f3:f1:f7:7c:
         a3:9c:f2:e6:5f:69:60:29:f6:07:53:4c:49:ea:f4:75:2c:11:
         12:6e:a7:e1:4f:7c:e3:74:b3:03:92:08:39:15:a9:01:63:2d:
         6d:86:9c:b6:d7:c6:b5:23:ca:2b:be:93:4b:8e:14:c2:4d:b0:
         0e:ef:d4:ab:0b:96:0b:50:35:8d:41:bc:4b:7a:d7:b3:33:52:
         2a:12:94:6e:4f:b8:68:d7:b6:4d:d2:97:45:9c:dc:7a:3b:b3:
         a6:f0:bb:1c:1d:e6:3b:b9:92:88:c1:58:70:4b:63:8e:14:59:
         2c:a9:eb:05:fb:79:84:8c:ba:d0:9b:1b:5e:6b:3f:79:e4:c5:
         8d:b8:e8:27:e4:6d:1b:2e:4d:66:4f:da:36:83:12:4c:2b:99:
         90:93:07:ae:cb:a8:43:51:86:58:37:37:fa:6b:ef:67:a8:f0:
         11:6c:e8:6c:32:10:dc:89:bb:5f:57:18:cd:84:76:99:0f:d8:
         00:7e:45:05:48:cd:fd:a1:fa:cf:50:8c:3a:bc:87:12:bb:81:
         4c:eb:f2:1f:9b:ae:26:cf:c1:d4:a9:b4:16:e8:47:8b:bb:be:
         65:75:97:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:39:26 2026 by rpki-client