This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136342e302e302f31362d3234203d3e203232303437.roa
File:                     3139302e3136342e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier:          mED7PNlKFfxYdY1Lx3mSw7ExWfy5tZsBLZXoYxL+hRM=
Subject key identifier:   3B:1F:47:75:8D:BD:B4:3B:48:55:63:91:5D:A8:3A:76:6B:49:BE:45
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       63686F463E48707AC35E27EC49687BB4AF708229
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136342e302e302f31362d3234203d3e203232303437.roa
Signing time:             Tue 06 Jan 2026 19:15:12 +0000
ROA not before:           Tue 06 Jan 2026 19:10:12 +0000
ROA not after:            Tue 05 Jan 2027 19:15:12 +0000
asID:                     22047
IP address blocks:        190.164.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 19:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:68:6f:46:3e:48:70:7a:c3:5e:27:ec:49:68:7b:b4:af:70:82:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Jan  6 19:10:12 2026 GMT
            Not After : Jan  5 19:15:12 2027 GMT
        Subject: CN=3B1F47758DBDB43B485563915DA83A766B49BE45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:cb:59:e8:3f:48:e8:87:7c:6b:a2:4f:92:
                    05:2a:c8:1a:fd:c1:af:a6:d1:e2:6f:b6:c4:2d:53:
                    ee:ed:11:fa:01:01:39:c4:5c:45:69:e8:e7:c7:14:
                    69:a3:6d:b8:93:6e:17:d1:7d:ad:7e:0f:10:c8:98:
                    70:bb:42:11:01:e8:cd:f1:fc:1e:14:20:f8:8b:91:
                    c5:d7:48:9c:da:c1:de:e5:f7:34:e2:55:97:70:39:
                    c8:48:47:c5:b6:ec:34:25:e5:c8:d6:3b:db:9e:e8:
                    44:61:b7:98:50:5a:bc:eb:01:95:02:32:e7:a1:30:
                    9c:5a:4f:71:89:99:e4:46:34:d1:9a:90:eb:6a:18:
                    b8:f4:2c:99:73:dc:43:e4:f0:87:88:49:e5:40:16:
                    17:31:07:eb:77:d6:8a:a8:72:c8:6a:b0:34:26:0c:
                    94:53:35:8c:74:30:a2:04:d8:68:a5:61:f8:f1:c6:
                    f7:ff:37:c9:35:76:98:db:21:4c:97:d5:cd:cd:3f:
                    a1:ed:d6:eb:79:c0:31:da:f6:be:d3:08:cf:32:bb:
                    46:3b:45:7f:64:5f:aa:d9:62:01:f9:02:bf:3c:46:
                    dd:af:e6:a2:ed:0a:73:4e:9d:5b:a3:ad:9a:18:24:
                    17:72:b2:04:45:6d:72:ee:b5:f8:d0:8d:33:ea:cc:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1F:47:75:8D:BD:B4:3B:48:55:63:91:5D:A8:3A:76:6B:49:BE:45
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136342e302e302f31362d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.164.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:ac:e8:58:3b:ce:e5:62:eb:ca:49:35:71:7c:8d:fe:d3:6b:
         41:ad:ca:64:17:34:51:d3:1d:0e:38:a3:a3:5a:9e:6b:75:e3:
         79:f0:d6:e2:aa:4d:e2:24:00:d1:4e:3d:4a:17:a2:75:03:2c:
         e4:0b:6e:65:b8:6d:3e:8a:13:ac:e3:ac:d1:31:8b:91:aa:a5:
         af:70:3e:45:85:db:32:0a:21:6f:be:01:3c:f8:41:ec:b7:b4:
         06:81:ae:ba:d0:6b:13:69:4a:b5:40:0a:6c:40:c2:15:43:ac:
         3e:52:86:75:ab:30:61:ae:2f:de:3e:c9:5f:bb:9f:9c:ea:5a:
         7c:09:35:bf:32:99:b0:99:b5:71:50:9f:f0:a7:6a:dc:25:ae:
         ac:da:e0:35:9f:d6:e8:b1:6f:d2:66:b9:55:0b:10:13:42:77:
         1b:07:0f:dc:81:c4:6e:48:18:bb:57:fa:20:fd:bd:b9:c6:36:
         83:6e:c5:29:10:9d:4f:d0:b1:7f:26:11:59:97:1f:47:89:e7:
         04:2a:05:ec:72:86:d5:07:44:a3:63:13:81:58:6d:ec:38:89:
         2e:36:c2:5c:13:a9:0d:9c:10:ed:c4:07:b9:20:7a:44:24:a0:
         69:a8:58:e0:02:9f:4d:e9:1d:a6:0b:4b:cc:20:58:88:de:6d:
         0d:25:11:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:28:34 2026 by rpki-client