This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139302e3131332e3132382e302f31382d3234203d3e203238303735.roa
File:                     3139302e3131332e3132382e302f31382d3234203d3e203238303735.roa (raw, json)
Hash identifier:          jXXBB7H3xmEEt3Gzq201REJmDBfLlyWTO/qQ1OXZYEw=
Subject key identifier:   0E:2D:59:72:34:31:6A:8B:81:AF:B0:F4:7F:A3:D4:C8:2F:DD:0A:E9
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       49CCCEA7553061C77F83B29ACF2418F4C5CE8DB5
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139302e3131332e3132382e302f31382d3234203d3e203238303735.roa
Signing time:             Tue 06 Jan 2026 20:50:33 +0000
ROA not before:           Tue 06 Jan 2026 20:45:33 +0000
ROA not after:            Tue 05 Jan 2027 20:50:33 +0000
asID:                     28075
IP address blocks:        190.113.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 16:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cc:ce:a7:55:30:61:c7:7f:83:b2:9a:cf:24:18:f4:c5:ce:8d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Jan  6 20:45:33 2026 GMT
            Not After : Jan  5 20:50:33 2027 GMT
        Subject: CN=0E2D597234316A8B81AFB0F47FA3D4C82FDD0AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:29:56:03:52:a3:1b:cf:1e:21:20:a5:e1:35:
                    3e:b3:53:06:15:50:da:02:ef:f6:64:6d:05:73:f2:
                    52:34:1c:35:39:1b:19:b3:7e:de:77:d6:42:a7:53:
                    50:17:e0:20:98:46:cd:ec:27:36:ba:f9:5a:ce:6d:
                    b8:99:09:9c:49:a0:e4:73:9a:2d:c1:4e:d8:bf:34:
                    ba:b9:cd:8d:a9:c5:f1:f6:72:21:dd:8d:b6:7a:ee:
                    44:1b:80:7f:31:f0:ef:01:4a:d0:ec:d0:6d:11:8f:
                    9a:54:29:86:42:c8:36:37:e2:ef:48:b1:ec:c9:79:
                    be:66:3d:9c:c2:2d:7d:19:a8:16:b8:44:50:4a:8f:
                    2e:36:25:d3:ae:ba:0c:ac:09:cb:77:5d:7a:1e:c6:
                    8b:0f:a8:59:11:82:ec:d6:22:51:a0:af:df:6a:4f:
                    ca:e2:3f:89:9a:fb:8c:54:d8:41:a5:98:9d:96:03:
                    06:7f:af:ac:d1:60:da:0f:d5:f4:1a:8e:91:4e:22:
                    dd:af:13:f0:70:71:29:5d:64:03:4e:1a:bc:33:3b:
                    52:13:16:26:15:4c:19:a9:18:2e:fd:1d:0b:4e:a4:
                    4f:d9:c0:67:8b:45:01:b8:34:64:3d:c3:57:e5:55:
                    85:ca:25:a5:70:da:03:81:d1:33:97:fe:10:33:1e:
                    31:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2D:59:72:34:31:6A:8B:81:AF:B0:F4:7F:A3:D4:C8:2F:DD:0A:E9
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139302e3131332e3132382e302f31382d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a2:fd:d5:f8:bb:67:c2:69:d5:e3:b3:08:8f:6c:55:71:5b:d7:
         56:50:4b:30:84:14:3d:d1:01:f7:b5:42:2a:b7:13:5a:bc:d1:
         d8:a1:34:93:78:97:c7:54:2c:d1:f8:32:86:b0:69:78:7d:bc:
         b4:54:9b:56:93:52:e7:56:da:fb:cc:a4:4a:ba:16:c1:48:79:
         70:2f:c0:43:22:09:91:b1:be:c9:ba:0d:43:3d:9f:56:c7:75:
         a8:a4:c6:f0:10:31:75:25:bf:b6:08:3b:41:41:ac:e4:74:9f:
         47:fd:0a:2c:f8:1c:b7:53:c4:f7:37:ae:a0:a3:1e:4f:e3:4c:
         28:66:27:c3:34:90:86:10:68:71:a1:90:4d:fe:af:6e:f8:4f:
         14:db:09:06:5e:c9:01:88:e0:77:44:25:3f:c5:15:7c:ff:09:
         ce:00:83:ca:3d:66:d2:19:b3:18:69:00:93:9b:2f:1a:d6:fd:
         91:eb:a8:14:ae:e2:b8:72:22:17:55:80:7f:38:e6:9b:8e:8a:
         86:e4:2e:d5:b2:a4:57:7a:0f:e3:1a:aa:5e:fc:cf:8e:36:22:
         77:3d:89:93:56:e8:c5:51:cf:96:ca:fa:31:af:39:fe:f7:88:
         ec:fb:a4:4d:d6:35:68:b9:20:5c:d3:64:ff:c4:a6:72:ee:50:
         6c:30:f5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:55:26 2026 by rpki-client