This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3139302e352e36342e302f31382d3234203d3e203237363936.roa
File:                     3139302e352e36342e302f31382d3234203d3e203237363936.roa (raw, json)
Hash identifier:          5cbJC+H0TSOAt478sNxK1UWe3LeY/WwosCRNngcx3Ho=
Subject key identifier:   C9:3D:80:D9:B0:32:E6:4B:32:6D:A9:A8:9E:B2:65:95:D6:BC:16:74
Certificate issuer:       /CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Certificate serial:       616655130DCD8C8B7EDCD44C46E5A450B186AD13
Authority key identifier: 99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3139302e352e36342e302f31382d3234203d3e203237363936.roa
Signing time:             Tue 06 Jan 2026 19:24:11 +0000
ROA not before:           Tue 06 Jan 2026 19:19:11 +0000
ROA not after:            Tue 05 Jan 2027 19:24:11 +0000
asID:                     27696
IP address blocks:        190.5.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:66:55:13:0d:cd:8c:8b:7e:dc:d4:4c:46:e5:a4:50:b1:86:ad:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
        Validity
            Not Before: Jan  6 19:19:11 2026 GMT
            Not After : Jan  5 19:24:11 2027 GMT
        Subject: CN=C93D80D9B032E64B326DA9A89EB26595D6BC1674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:49:22:c9:aa:1f:7f:79:b4:5c:16:01:4b:
                    e4:d3:78:e0:9a:cd:26:f1:39:9f:2c:5b:e0:49:4c:
                    e9:75:06:59:b0:fc:47:2b:e9:71:f9:e0:da:0a:5c:
                    49:2d:bf:9f:e3:2e:60:64:43:82:b1:fa:11:f9:63:
                    29:bd:58:04:37:16:4d:da:0c:7a:56:70:55:7c:3b:
                    d4:ac:5b:21:13:d9:f3:6f:89:e3:89:f5:d3:b8:a7:
                    2d:5d:79:ce:a8:26:3f:a9:db:bb:ba:0c:11:66:7e:
                    4c:a3:23:fc:75:cf:f8:ee:ae:7a:0a:6b:9c:a3:9a:
                    fa:57:1c:72:90:15:cd:fb:24:51:2f:2c:36:50:29:
                    7f:65:da:e1:75:13:fc:aa:15:b4:c9:14:c9:52:dd:
                    7a:4f:25:70:68:7a:09:64:f2:46:da:2f:81:0a:82:
                    88:da:31:fa:11:0f:b3:a8:59:69:d1:03:eb:ee:2d:
                    7a:aa:8e:10:9b:7a:73:f3:0a:df:ed:e9:76:d7:2b:
                    5f:6e:d8:98:c5:a9:de:b4:1e:e3:76:da:7a:a4:c9:
                    ab:f2:06:60:9a:17:0e:fb:d8:d9:85:0f:c6:0c:00:
                    8a:7c:c3:58:4f:28:9d:7a:c0:bf:47:bc:4c:27:28:
                    15:fc:99:ac:18:7a:46:88:23:fb:d2:c3:dc:e4:35:
                    e3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3D:80:D9:B0:32:E6:4B:32:6D:A9:A8:9E:B2:65:95:D6:BC:16:74
            X509v3 Authority Key Identifier:
                keyid:99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3139302e352e36342e302f31382d3234203d3e203237363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8c:4c:8b:6b:8c:a4:fc:83:66:8a:23:af:b1:54:5c:81:b9:2e:
         07:40:0e:5c:c4:7a:88:76:a5:e4:df:fd:d1:93:9d:d4:c3:21:
         4b:d9:b2:83:f7:34:75:61:3d:1d:9e:87:13:64:e1:f5:5e:b6:
         c1:d8:af:1e:8a:99:09:41:44:a6:b1:d6:18:d4:27:4a:7d:93:
         20:99:54:c8:8c:f4:f5:d9:a3:eb:63:bb:81:55:5c:9d:79:bd:
         75:2b:10:fb:71:d4:d9:de:01:df:a1:05:cf:e2:42:a3:42:ca:
         99:6d:84:52:5d:d8:af:e5:58:27:92:e5:b9:af:ea:5a:b2:17:
         c7:11:ad:f9:33:cd:b0:68:9c:2f:fd:86:51:1f:b9:84:0d:6c:
         a7:fa:86:ae:57:a3:5b:de:5e:7a:69:88:cc:82:d4:d5:a6:8d:
         18:f2:1e:b7:2b:b2:17:a1:4f:54:2b:42:d0:b8:1e:05:85:0e:
         34:1e:32:1c:63:80:47:f4:9e:26:53:56:4f:97:c4:c1:16:da:
         39:61:11:66:8e:89:1e:b9:4c:b1:b4:01:f6:3f:09:9e:de:72:
         ea:2a:b6:97:4b:5f:3e:a3:6a:60:df:72:18:d3:45:6c:1a:7d:
         1f:60:dc:a7:fb:e2:cc:55:78:8f:aa:12:60:d2:e5:45:73:9f:
         a6:12:d5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:00:38 2026 by rpki-client