This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3139302e3130332e3139312e302f32342d3234203d3e203631343638.roa
File:                     3139302e3130332e3139312e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          hLYZjcuBlGxu4DUCowDe8Y706D3Hsr0kLY/eD8oTZMk=
Subject key identifier:   86:D7:30:4C:1B:91:D1:47:46:C4:EA:BF:A6:57:D5:5A:BF:DA:8D:1A
Certificate issuer:       /CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
Certificate serial:       27B65F1A83AAEF226DD9BA4666AA131C478C2773
Authority key identifier: 32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3139302e3130332e3139312e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 06 Jan 2026 19:07:48 +0000
ROA not before:           Tue 06 Jan 2026 19:02:48 +0000
ROA not after:            Tue 05 Jan 2027 19:07:48 +0000
asID:                     61468
IP address blocks:        190.103.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 01:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b6:5f:1a:83:aa:ef:22:6d:d9:ba:46:66:aa:13:1c:47:8c:27:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3249F9F2D0369FF06E9B2651663EFA2423E42AFC
        Validity
            Not Before: Jan  6 19:02:48 2026 GMT
            Not After : Jan  5 19:07:48 2027 GMT
        Subject: CN=86D7304C1B91D14746C4EABFA657D55ABFDA8D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:f0:b6:9f:ea:e0:5b:ae:6c:d0:c7:4e:78:
                    75:9a:76:05:0f:4f:b4:09:85:8e:d9:81:3f:67:cf:
                    ac:e5:92:41:44:17:43:95:4b:95:8c:e0:74:0e:95:
                    43:54:c9:02:43:d7:f3:16:56:08:89:0d:69:f0:04:
                    59:bb:b5:8e:05:cc:22:f3:2c:43:47:6f:74:61:9e:
                    06:e1:7c:1b:9b:14:37:1b:95:f5:dd:9a:7b:35:8b:
                    d5:c4:cf:d4:72:bf:d7:a0:bb:83:2e:d6:05:c8:d5:
                    10:32:31:c6:26:89:46:1f:37:ae:6c:f1:22:f6:af:
                    0f:9e:ff:15:5d:da:80:3f:c3:3f:89:a7:25:f2:90:
                    0f:7e:e5:9d:6d:d0:15:ef:fa:34:5a:df:23:04:e4:
                    84:6f:f9:6c:65:2f:11:2d:13:c5:cc:5c:b0:5a:d4:
                    62:f4:72:8c:e3:26:0b:c0:1e:2b:64:74:a9:53:65:
                    f4:9e:1d:50:be:a5:50:3c:ad:4a:84:bb:b1:89:24:
                    f8:bb:e4:77:22:e4:ae:d9:1a:c4:b6:da:9b:a4:a6:
                    52:6a:14:1f:9d:16:37:c8:44:e9:a6:0a:6f:51:7d:
                    e4:c8:27:68:c5:b9:59:46:16:c5:dd:09:d0:7c:c9:
                    53:bd:27:a1:4b:0b:9b:25:c1:95:37:35:53:83:bc:
                    d7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D7:30:4C:1B:91:D1:47:46:C4:EA:BF:A6:57:D5:5A:BF:DA:8D:1A
            X509v3 Authority Key Identifier:
                keyid:32:49:F9:F2:D0:36:9F:F0:6E:9B:26:51:66:3E:FA:24:23:E4:2A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3249F9F2D0369FF06E9B2651663EFA2423E42AFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/712CE0FF8C33D2ACD0453B429414594ADCB4F79743EA72EC74406261A800D0FA/0/3139302e3130332e3139312e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:25:a4:59:5b:03:5c:ae:76:91:15:9a:2f:ed:f0:7e:8e:c2:
         10:6f:e1:45:47:ae:80:7a:cb:2b:45:25:53:98:99:13:d5:f9:
         f0:3b:ec:0b:c8:5d:f5:76:34:ca:c3:95:3d:f7:a1:a3:fa:c4:
         18:11:86:a8:af:79:00:3e:4b:d4:2b:a4:00:a1:ac:2b:83:ef:
         e0:b5:cc:dc:8b:47:dd:2d:12:03:f5:3c:5c:f1:e2:eb:4c:f4:
         83:ae:7c:81:86:21:82:22:e0:9e:24:bf:fa:a2:0b:ef:12:9e:
         ba:c9:1e:e0:2a:a1:66:39:7a:e3:72:d7:7e:31:c1:b6:ed:00:
         d9:0e:42:88:51:5d:a9:6f:c4:8d:c2:0b:30:d8:46:1e:12:21:
         21:d2:94:b2:f4:71:2b:71:8c:67:d4:5b:2a:66:2e:52:77:b0:
         95:8e:ef:3f:4b:61:63:38:99:c0:eb:7c:96:dc:c7:de:87:06:
         39:f9:2f:d9:8c:5b:4a:26:f0:f6:58:db:39:10:45:6e:f6:74:
         84:a0:a1:02:45:f6:9a:47:24:08:97:41:37:b0:7a:be:d4:0f:
         6e:c3:e0:90:0f:37:45:64:e0:0a:22:0b:82:c9:20:d9:0e:01:
         3c:b8:eb:76:2f:70:4a:72:da:34:e1:d2:b3:95:48:1b:8c:e8:
         f2:4d:56:44
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJ7ZfGoOq7yJt2bpGZqoTHEeMJ3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI0OUY5RjJEMDM2OUZGMDZFOUIyNjUxNjYzRUZBMjQy
M0U0MkFGQzAeFw0yNjAxMDYxOTAyNDhaFw0yNzAxMDUxOTA3NDhaMDMxMTAvBgNV
BAMTKDg2RDczMDRDMUI5MUQxNDc0NkM0RUFCRkE2NTdENTVBQkZEQThEMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdPC2n+rgW65s0MdOeHWadgUP
T7QJhY7ZgT9nz6zlkkFEF0OVS5WM4HQOlUNUyQJD1/MWVgiJDWnwBFm7tY4FzCLz
LENHb3RhngbhfBubFDcblfXdmns1i9XEz9Ryv9egu4Mu1gXI1RAyMcYmiUYfN65s
8SL2rw+e/xVd2oA/wz+JpyXykA9+5Z1t0BXv+jRa3yME5IRv+WxlLxEtE8XMXLBa
1GL0cozjJgvAHitkdKlTZfSeHVC+pVA8rUqEu7GJJPi75Hci5K7ZGsS22pukplJq
FB+dFjfIROmmCm9RfeTIJ2jFuVlGFsXdCdB8yVO9J6FLC5slwZU3NVODvNf5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUhtcwTBuR0UdGxOq/plfVWr/ajRowHwYDVR0j
BBgwFoAUMkn58tA2n/BumyZRZj76JCPkKvwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MTJDRTBGRjhDMzNEMkFDRDA0NTNCNDI5NDE0NTk0QURD
QjRGNzk3NDNFQTcyRUM3NDQwNjI2MUE4MDBEMEZBLzAvMzI0OUY5RjJEMDM2OUZG
MDZFOUIyNjUxNjYzRUZBMjQyM0U0MkFGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjQ5RjlGMkQwMzY5RkYwNkU5
QjI2NTE2NjNFRkEyNDIzRTQyQUZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzEyQ0UwRkY4QzMzRDJBQ0QwNDUzQjQyOTQxNDU5NEFEQ0I0Rjc5NzQz
RUE3MkVDNzQ0MDYyNjFBODAwRDBGQS8wLzMxMzkzMDJlMzEzMDMzMmUzMTM5MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzQzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvme/
MA0GCSqGSIb3DQEBCwUAA4IBAQCnJaRZWwNcrnaRFZov7fB+jsIQb+FFR66Aessr
RSVTmJkT1fnwO+wLyF31djTKw5U996Gj+sQYEYaor3kAPkvUK6QAoawrg+/gtczc
i0fdLRID9Txc8eLrTPSDrnyBhiGCIuCeJL/6ogvvEp66yR7gKqFmOXrjctd+McG2
7QDZDkKIUV2pb8SNwgsw2EYeEiEh0pSy9HErcYxn1FsqZi5Sd7CVju8/S2FjOJnA
63yW3MfehwY5+S/ZjFtKJvD2WNs5EEVu9nSEoKECRfaaRyQIl0E3sHq+1A9uw+CQ
DzdFZOAKIguCySDZDgE8uOt2L3BKcto04dKzlUgbjOjyTVZE
-----END CERTIFICATE-----
Generated at Tue Jan 13 05:35:03 2026 by rpki-client