This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136302e302e302f31342d3234203d3e203232303437.roa
File:                     3139302e3136302e302e302f31342d3234203d3e203232303437.roa (raw, json)
Hash identifier:          KdeJfq374xcjLdTVHLsTHjz7P7M6g77ipHOQB0CXX3M=
Subject key identifier:   37:51:66:7B:77:07:36:3D:BD:61:D3:DC:F6:2A:9C:97:CA:A5:38:9A
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       053FB50E406D08B42CE198772D5CE07F50281A03
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136302e302e302f31342d3234203d3e203232303437.roa
Signing time:             Tue 06 Jan 2026 19:15:13 +0000
ROA not before:           Tue 06 Jan 2026 19:10:13 +0000
ROA not after:            Tue 05 Jan 2027 19:15:13 +0000
asID:                     22047
IP address blocks:        190.160.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 19:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3f:b5:0e:40:6d:08:b4:2c:e1:98:77:2d:5c:e0:7f:50:28:1a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Jan  6 19:10:13 2026 GMT
            Not After : Jan  5 19:15:13 2027 GMT
        Subject: CN=3751667B7707363DBD61D3DCF62A9C97CAA5389A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:1b:80:df:0d:4b:e8:97:80:7e:1d:ce:5d:
                    2b:9e:19:cd:1b:5c:ea:3e:d5:c2:94:60:36:ec:7e:
                    06:ed:ea:6e:76:2a:63:a5:f4:05:bc:ec:1b:f4:92:
                    30:0f:d9:e8:6c:71:a8:e9:68:18:b9:12:4a:a2:f3:
                    47:49:0a:33:01:5a:ba:f5:29:de:96:d9:f6:8a:6b:
                    4b:71:39:3b:db:5a:41:ab:97:68:f5:e7:bd:17:2e:
                    7c:29:9e:66:78:bc:0b:9b:46:95:70:bf:ad:88:c0:
                    93:c0:65:cb:fb:07:c3:93:e0:b0:32:79:b9:01:bf:
                    ef:a7:c0:bb:d1:6c:ef:90:34:c6:08:54:f6:79:86:
                    3b:49:9e:17:cb:07:5a:18:9f:49:2c:0e:8c:43:fe:
                    fd:52:8a:d9:32:e6:4a:3b:50:ae:1d:8d:17:95:be:
                    97:4a:15:c8:6d:9f:8d:0b:7d:b3:86:60:e5:4b:99:
                    ae:7f:7a:aa:76:71:ae:ad:4b:c7:f9:b6:0b:19:5b:
                    92:00:5d:39:cb:68:b1:af:9f:69:6b:37:42:01:62:
                    73:f1:0d:a8:b6:57:de:22:05:6b:05:91:8f:72:e6:
                    87:a7:b0:80:9b:47:a7:20:fb:3c:62:90:3b:a4:50:
                    2a:ac:dd:17:3b:3e:80:ab:ea:51:6e:8e:37:73:2e:
                    13:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:51:66:7B:77:07:36:3D:BD:61:D3:DC:F6:2A:9C:97:CA:A5:38:9A
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136302e302e302f31342d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.160.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         6c:1a:39:01:e4:29:a7:77:1c:c2:57:e0:6b:38:db:7c:f9:51:
         7d:c1:aa:30:88:cb:db:5a:1b:b8:8e:15:e6:0b:a9:de:91:2a:
         ee:88:9f:ec:47:a0:9a:52:45:f4:10:10:bb:b6:a3:95:80:e7:
         be:df:eb:61:d5:35:0e:f3:f5:2d:29:8c:58:7e:bf:9c:f7:ee:
         f6:8d:18:aa:48:15:30:ec:55:05:6d:46:31:a5:a6:9d:44:8b:
         31:f8:67:8d:3b:54:6f:a6:bf:d9:59:2b:a0:a9:3a:3d:e3:08:
         48:f1:e8:24:c0:2b:69:58:c1:a3:c2:23:8d:91:d8:2f:16:bf:
         24:f1:dd:43:42:84:53:c8:16:f5:81:9b:77:87:4e:06:ea:27:
         3b:e9:b1:5e:1a:83:b5:1e:d4:f3:18:0d:58:5f:21:8a:0e:5e:
         a5:cc:67:99:97:18:47:bb:68:e1:13:8e:8a:6e:41:9a:f5:30:
         d5:3f:38:48:2e:ca:78:2d:92:23:14:33:8d:44:a6:94:d3:9f:
         0a:86:ea:e1:7d:ee:dd:8b:fe:cb:66:b2:28:f7:31:22:ee:db:
         da:c2:50:65:5e:79:d9:4c:1b:4a:11:e6:ab:6b:b1:c1:59:cb:
         0c:09:05:61:30:2a:44:6a:fd:c8:ef:ab:94:91:8d:c9:65:96:
         0d:c4:65:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:32:14 2026 by rpki-client