This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e39392e302e302f32302d3230203d3e203230323939.roa
File:                     3139302e39392e302e302f32302d3230203d3e203230323939.roa (raw, json)
Hash identifier:          uFnieV8QNtS/oG7P7zV4yVr7eNTfjeuFjEi3dbRAvMk=
Subject key identifier:   57:5B:A8:9B:59:35:EB:37:71:2E:73:86:BA:01:14:5E:27:0F:A7:74
Certificate issuer:       /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial:       7A6FDD5570198E265A1994932B0A75674491D574
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e39392e302e302f32302d3230203d3e203230323939.roa
Signing time:             Tue 06 Jan 2026 19:41:35 +0000
ROA not before:           Tue 06 Jan 2026 19:36:35 +0000
ROA not after:            Tue 05 Jan 2027 19:41:35 +0000
asID:                     20299
IP address blocks:        190.99.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 07:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6f:dd:55:70:19:8e:26:5a:19:94:93:2b:0a:75:67:44:91:d5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
        Validity
            Not Before: Jan  6 19:36:35 2026 GMT
            Not After : Jan  5 19:41:35 2027 GMT
        Subject: CN=575BA89B5935EB37712E7386BA01145E270FA774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:45:62:3b:c6:03:d7:ef:a7:1c:a0:50:7c:
                    8f:1e:44:57:a5:b9:ee:f1:69:09:47:90:c2:28:50:
                    ec:4b:4e:e9:8b:5a:b4:fb:16:a8:82:37:0f:4d:80:
                    a7:a0:2d:87:35:4c:76:a2:27:e0:89:af:23:cd:11:
                    f6:76:38:c6:ad:75:95:7a:5c:c3:00:3f:4d:e8:32:
                    98:66:85:c0:50:9f:c1:e9:fe:52:ee:2f:0d:90:26:
                    fd:ba:d4:e8:4a:61:67:16:df:77:8a:a1:38:36:82:
                    11:d1:34:e7:3f:cc:75:93:df:93:32:47:75:a0:e7:
                    57:d7:4e:8c:9b:94:2e:70:19:45:e1:3a:22:1f:33:
                    64:05:37:e4:88:c2:2c:86:ce:16:9b:20:e2:1c:a5:
                    10:b3:e6:52:c9:7e:21:5a:81:66:27:be:d6:c5:5b:
                    34:7f:03:67:be:06:85:ac:bb:a7:5e:6e:f1:4b:6b:
                    05:cc:63:77:c6:d4:3b:3f:30:fb:79:de:3d:cb:c3:
                    9b:9c:60:72:3d:1e:66:e9:02:52:46:78:3c:0f:85:
                    8f:4d:99:d6:64:fb:72:b5:90:3a:44:e4:cb:f3:c8:
                    f4:4f:dd:57:c7:9a:c5:8f:fa:80:28:22:a8:a7:a1:
                    e0:87:ae:53:84:a5:51:0f:d3:9b:04:cd:1e:6c:f5:
                    0f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5B:A8:9B:59:35:EB:37:71:2E:73:86:BA:01:14:5E:27:0F:A7:74
            X509v3 Authority Key Identifier:
                keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e39392e302e302f32302d3230203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:cf:f1:35:13:62:12:93:70:ab:62:7e:f3:29:27:9c:91:c8:
         9e:ed:60:5b:df:69:27:f4:a7:a2:51:19:a4:bb:17:a0:2b:8a:
         08:12:b3:29:0f:73:76:1c:12:f7:a1:a0:f2:84:4f:e7:44:07:
         f4:2f:f4:81:6f:cb:67:8b:d4:e2:73:9e:67:32:1d:89:2c:a9:
         da:d8:a1:a8:89:9d:d7:e0:cd:c8:73:c5:1b:69:19:ab:8c:a6:
         ee:ce:04:60:5d:2d:53:5e:d1:16:e1:5e:8d:cd:23:00:1d:c2:
         1b:85:e9:c4:f4:ea:0c:9b:39:82:86:e0:34:26:e1:1b:02:30:
         18:48:3c:ef:1d:93:e6:26:0f:58:af:1f:36:a2:a5:db:3e:0e:
         d9:d8:ae:b4:b8:b2:3c:b5:0c:c4:cb:79:d5:3a:57:15:cc:1e:
         0c:20:ee:07:8f:dc:b0:d3:df:79:32:0a:32:dd:44:33:56:c9:
         33:c0:b0:a7:b9:45:1b:26:24:83:92:db:46:9d:45:2a:d9:e4:
         64:bb:c5:1b:ec:05:c4:07:e8:ce:aa:f0:b8:e5:30:a6:28:ac:
         0a:e1:4d:98:8b:bd:18:31:85:f7:27:3d:35:49:19:90:ab:20:
         48:86:15:b5:73:11:73:29:fa:6f:5b:ca:43:26:af:f5:8a:92:
         29:02:e3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:02:02 2026 by rpki-client