This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/3139302e39362e3130342e302f32312d3231203d3e20323632323132.roa
File:                     3139302e39362e3130342e302f32312d3231203d3e20323632323132.roa (raw, json)
Hash identifier:          iiMJmUZuQeA+kxvHvpxKl0rmzB4IoJmCEWhY09neORk=
Subject key identifier:   D7:5F:42:50:71:B9:49:10:5D:71:D0:D4:EC:8E:EE:0C:43:34:8A:35
Certificate issuer:       /CN=C74171B033E063E7EA4A449BA4F4401ED0F4FFBF
Certificate serial:       3287F3827DC45C42FBFA3EA9B14BAE09B08734BA
Authority key identifier: C7:41:71:B0:33:E0:63:E7:EA:4A:44:9B:A4:F4:40:1E:D0:F4:FF:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/3139302e39362e3130342e302f32312d3231203d3e20323632323132.roa
Signing time:             Tue 06 Jan 2026 19:25:41 +0000
ROA not before:           Tue 06 Jan 2026 19:20:41 +0000
ROA not after:            Tue 05 Jan 2027 19:25:41 +0000
asID:                     262212
IP address blocks:        190.96.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 15:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:87:f3:82:7d:c4:5c:42:fb:fa:3e:a9:b1:4b:ae:09:b0:87:34:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74171B033E063E7EA4A449BA4F4401ED0F4FFBF
        Validity
            Not Before: Jan  6 19:20:41 2026 GMT
            Not After : Jan  5 19:25:41 2027 GMT
        Subject: CN=D75F425071B949105D71D0D4EC8EEE0C43348A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:cb:65:ae:1a:bd:bd:48:47:69:6a:bb:d2:51:
                    5b:9c:82:9e:45:f7:2e:c0:2e:86:98:23:ea:35:63:
                    4f:44:2a:70:34:8a:49:66:d9:f3:03:07:06:a9:e9:
                    78:0d:df:da:42:01:84:7f:c0:1d:58:e3:07:52:0e:
                    81:32:45:4e:0a:9e:f6:b1:54:a8:65:70:98:5a:5d:
                    a4:fe:7d:3a:e9:a4:38:3c:31:1e:c9:57:ac:3e:be:
                    1e:87:13:e3:32:ec:71:5d:f1:02:4f:d6:d8:53:e6:
                    a6:1f:1e:40:25:0a:b6:37:0f:85:c0:fa:f7:da:1c:
                    50:d7:ed:74:92:a5:74:c0:5c:b0:7b:09:e3:7e:39:
                    7f:de:38:bf:8b:4b:08:dd:3b:4e:04:86:24:c3:66:
                    a1:cf:dc:65:94:81:b5:76:4e:a7:52:98:05:dd:a1:
                    b1:4b:c1:c1:a7:cb:87:48:04:66:27:87:74:53:43:
                    88:46:65:fb:b5:75:1b:81:76:bd:62:c1:f1:45:99:
                    d8:e8:a4:05:ee:ea:f4:a1:d5:b8:5c:fb:2f:cb:80:
                    5c:ec:b1:26:47:e9:90:69:89:2e:bb:77:e3:44:59:
                    7f:34:14:b3:a5:47:0c:4c:d9:fc:b5:83:49:b5:eb:
                    68:36:23:27:47:58:36:45:c7:a1:fe:ef:45:79:ee:
                    c4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5F:42:50:71:B9:49:10:5D:71:D0:D4:EC:8E:EE:0C:43:34:8A:35
            X509v3 Authority Key Identifier:
                keyid:C7:41:71:B0:33:E0:63:E7:EA:4A:44:9B:A4:F4:40:1E:D0:F4:FF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C74171B033E063E7EA4A449BA4F4401ED0F4FFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F24110CFB8EE0818D70EE66E175D28A6A71C2778464BC67C97214214BC0F41A/0/3139302e39362e3130342e302f32312d3231203d3e20323632323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:26:dd:c9:5e:b5:ba:74:94:da:e7:c3:be:68:e6:3f:51:b7:
         ed:bd:ad:ba:42:a6:04:b6:82:ce:98:5c:04:f8:04:a9:ba:8f:
         a6:89:e6:67:df:70:a1:da:c5:e7:c6:65:f9:09:e1:6f:98:09:
         ff:97:71:db:7d:bc:a4:d8:b5:c8:35:db:8a:65:83:ec:1f:c9:
         06:d0:6e:2e:c9:91:00:07:c1:7b:c0:e2:42:0c:7e:15:cc:2f:
         6d:6c:c3:83:10:09:12:ec:bc:18:d6:bc:24:b5:90:f8:6e:79:
         26:2f:67:cc:a5:4a:d6:4e:6d:ed:3d:ab:4d:4a:52:41:9a:71:
         8d:6a:af:55:1e:08:8c:2c:9f:e7:08:71:4a:dd:3a:27:15:0b:
         7b:0a:6f:5c:a8:cb:b6:2d:25:79:41:41:21:2a:65:e7:48:c2:
         7b:f3:de:3f:a0:5a:f3:89:80:42:ec:d2:73:06:5e:94:20:2d:
         14:ce:e7:1f:53:0e:f7:1e:5c:ec:7b:ae:0f:3e:ef:0f:e1:8b:
         cd:c9:d8:16:93:88:87:7a:18:fd:01:63:12:06:28:1a:bc:74:
         4d:e5:95:f6:d0:e7:9c:ba:77:9b:63:f4:7f:cf:6f:06:b8:f7:
         a8:a2:b0:28:2d:6a:28:2e:fa:03:49:05:86:80:d8:46:37:6f:
         d5:81:61:e9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMofzgn3EXEL7+j6psUuuCbCHNLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc0MTcxQjAzM0UwNjNFN0VBNEE0NDlCQTRGNDQwMUVE
MEY0RkZCRjAeFw0yNjAxMDYxOTIwNDFaFw0yNzAxMDUxOTI1NDFaMDMxMTAvBgNV
BAMTKEQ3NUY0MjUwNzFCOTQ5MTA1RDcxRDBENEVDOEVFRTBDNDMzNDhBMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzy2WuGr29SEdparvSUVucgp5F
9y7ALoaYI+o1Y09EKnA0iklm2fMDBwap6XgN39pCAYR/wB1Y4wdSDoEyRU4Knvax
VKhlcJhaXaT+fTrppDg8MR7JV6w+vh6HE+My7HFd8QJP1thT5qYfHkAlCrY3D4XA
+vfaHFDX7XSSpXTAXLB7CeN+OX/eOL+LSwjdO04EhiTDZqHP3GWUgbV2TqdSmAXd
obFLwcGny4dIBGYnh3RTQ4hGZfu1dRuBdr1iwfFFmdjopAXu6vSh1bhc+y/LgFzs
sSZH6ZBpiS67d+NEWX80FLOlRwxM2fy1g0m162g2IydHWDZFx6H+70V57sSDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU119CUHG5SRBdcdDU7I7uDEM0ijUwHwYDVR0j
BBgwFoAUx0FxsDPgY+fqSkSbpPRAHtD0/78wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RjI0MTEwQ0ZCOEVFMDgxOEQ3MEVFNjZFMTc1RDI4QTZB
NzFDMjc3ODQ2NEJDNjdDOTcyMTQyMTRCQzBGNDFBLzAvQzc0MTcxQjAzM0UwNjNF
N0VBNEE0NDlCQTRGNDQwMUVEMEY0RkZCRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNzQxNzFCMDMzRTA2M0U3RUE0
QTQ0OUJBNEY0NDAxRUQwRjRGRkJGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEYyNDExMENGQjhFRTA4MThENzBFRTY2RTE3NUQyOEE2QTcxQzI3Nzg0
NjRCQzY3Qzk3MjE0MjE0QkMwRjQxQS8wLzMxMzkzMDJlMzkzNjJlMzEzMDM0MmUz
MDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMyMzIzMTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvmBo
MA0GCSqGSIb3DQEBCwUAA4IBAQBJJt3JXrW6dJTa58O+aOY/Ubftva26QqYEtoLO
mFwE+ASpuo+mieZn33Ch2sXnxmX5CeFvmAn/l3Hbfbyk2LXINduKZYPsH8kG0G4u
yZEAB8F7wOJCDH4VzC9tbMODEAkS7LwY1rwktZD4bnkmL2fMpUrWTm3tPatNSlJB
mnGNaq9VHgiMLJ/nCHFK3TonFQt7Cm9cqMu2LSV5QUEhKmXnSMJ7894/oFrziYBC
7NJzBl6UIC0UzucfUw73Hlzse64PPu8P4YvNydgWk4iHehj9AWMSBigavHRN5ZX2
0OecunebY/R/z28GuPeoorAoLWooLvoDSQWGgNhGN2/VgWHp
-----END CERTIFICATE-----
Generated at Tue Jan 13 11:52:59 2026 by rpki-client