This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e35332e34382e302f32302d3234203d3e203230323939.roa
File:                     3139302e35332e34382e302f32302d3234203d3e203230323939.roa (raw, json)
Hash identifier:          gECDDEhAfeusYQwbHZv0pCtC6mkm2HgGRJol7F/CTYk=
Subject key identifier:   AF:9F:DC:31:61:BD:AC:5A:31:9C:A1:6E:F3:90:AD:1A:87:27:AE:81
Certificate issuer:       /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial:       2D00843F45594ADB175E750CB101759BF2418C12
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e35332e34382e302f32302d3234203d3e203230323939.roa
Signing time:             Tue 06 Jan 2026 19:41:36 +0000
ROA not before:           Tue 06 Jan 2026 19:36:36 +0000
ROA not after:            Tue 05 Jan 2027 19:41:36 +0000
asID:                     20299
IP address blocks:        190.53.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 07:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:00:84:3f:45:59:4a:db:17:5e:75:0c:b1:01:75:9b:f2:41:8c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
        Validity
            Not Before: Jan  6 19:36:36 2026 GMT
            Not After : Jan  5 19:41:36 2027 GMT
        Subject: CN=AF9FDC3161BDAC5A319CA16EF390AD1A8727AE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:e9:53:b0:99:bd:12:55:f6:50:9b:81:a4:
                    4b:47:0a:09:9d:10:a2:c3:7e:63:ee:5a:35:63:3c:
                    13:13:cc:f3:d4:1d:aa:d8:31:cf:d6:da:a3:c6:ab:
                    53:f6:35:1e:77:29:c8:b4:2e:87:3f:ba:e0:53:95:
                    18:e6:9a:02:30:6b:51:0b:f9:e5:3d:e3:67:e1:21:
                    a4:a1:87:54:20:cc:48:06:2d:2c:d3:f0:95:54:8e:
                    4f:86:c6:cf:c9:96:2c:e1:70:14:b5:2f:78:29:d2:
                    dc:72:2a:12:5c:7f:80:5c:16:82:80:a7:16:84:5d:
                    8a:2e:3b:94:a6:7c:b1:72:99:f3:fd:33:05:c0:71:
                    66:23:ab:b9:ac:89:a0:31:56:fe:1d:a1:bb:10:19:
                    38:5a:eb:91:10:c6:37:76:97:80:54:fb:17:c4:88:
                    73:21:45:05:10:bd:44:5d:fc:51:2c:49:ba:05:02:
                    25:74:24:4e:fb:c7:a6:29:97:5a:42:ca:b1:56:54:
                    76:08:92:2f:08:6e:74:d5:8a:ef:0f:1c:85:d1:ba:
                    c4:6d:ab:8c:76:9a:af:04:dd:21:d8:bc:19:aa:57:
                    2b:35:8d:f0:18:bf:be:24:6a:2a:f1:c5:a8:b7:8c:
                    29:72:9f:2e:0d:c4:bd:8a:72:d9:f1:31:61:be:32:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9F:DC:31:61:BD:AC:5A:31:9C:A1:6E:F3:90:AD:1A:87:27:AE:81
            X509v3 Authority Key Identifier:
                keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e35332e34382e302f32302d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:04:a8:c2:ff:43:fe:5d:4d:4f:9b:72:49:52:c4:ed:11:de:
         8f:85:ed:73:78:8a:ae:07:85:9c:38:89:67:0c:33:3e:b1:b3:
         60:f9:3b:5c:98:96:35:d5:3f:e1:92:81:8f:fd:e4:2e:38:f0:
         3f:ea:96:6d:c5:3d:1e:4f:12:9e:3f:f3:ae:5d:fc:c5:5d:ee:
         8d:51:9e:09:46:a6:55:f7:74:b1:7a:71:c5:33:14:84:ce:88:
         16:d7:61:57:c6:dd:e4:a6:d4:77:1a:3c:47:c2:42:bd:0c:54:
         9a:92:a8:10:2d:c3:02:b0:d3:29:38:b9:ab:34:d9:74:4f:82:
         5e:08:16:f5:9a:8e:23:b2:69:e7:d3:a0:4d:4f:80:8d:04:a9:
         8c:23:00:f5:3d:ba:96:b7:fe:ab:b5:5e:30:f8:14:98:e1:26:
         08:32:fe:12:b2:80:6b:8d:bc:5d:bc:f0:02:39:21:48:d7:5f:
         de:27:55:da:1a:02:e5:5d:3e:ae:c2:0b:1c:51:6d:53:43:68:
         b6:c7:1e:21:c7:df:2b:8d:c3:aa:51:40:ed:45:b0:ff:86:d6:
         fd:b9:ee:46:36:5c:82:39:99:16:56:fb:58:0d:60:39:b2:8c:
         d0:6f:e4:2f:c2:5d:cc:73:76:25:1a:4d:e7:b8:1a:52:1c:5d:
         1e:08:e3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:13:23 2026 by rpki-client