This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3132382e302f31392d3234203d3e203237393531.roa
File:                     3139302e3132312e3132382e302f31392d3234203d3e203237393531.roa (raw, json)
Hash identifier:          TdGc3aeAOG121RM30WEr7aLpArNOUUkiPWbaPUaOBrY=
Subject key identifier:   C4:8A:41:0E:98:B2:7A:6F:3D:46:5F:AF:5F:31:A0:A6:2B:A5:9A:13
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       40EAC78AB19E1C3FBFF2EA576156E393450A3E65
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3132382e302f31392d3234203d3e203237393531.roa
Signing time:             Tue 06 Jan 2026 20:48:42 +0000
ROA not before:           Tue 06 Jan 2026 20:43:42 +0000
ROA not after:            Tue 05 Jan 2027 20:48:42 +0000
asID:                     27951
IP address blocks:        190.121.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 03:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ea:c7:8a:b1:9e:1c:3f:bf:f2:ea:57:61:56:e3:93:45:0a:3e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Jan  6 20:43:42 2026 GMT
            Not After : Jan  5 20:48:42 2027 GMT
        Subject: CN=C48A410E98B27A6F3D465FAF5F31A0A62BA59A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:95:24:ec:06:ed:70:c7:a3:0c:0f:03:95:
                    13:c1:2b:61:27:85:58:80:52:9c:a9:b9:01:14:94:
                    f9:f5:87:60:87:fb:4d:80:80:a6:ba:db:bb:b0:d3:
                    a8:8c:92:84:82:44:35:aa:53:08:86:aa:4e:ce:38:
                    18:96:0b:ba:dd:5d:f9:75:af:83:b8:3d:1b:f3:55:
                    96:ce:1c:c5:24:94:36:31:45:94:8c:68:cc:d9:08:
                    a0:03:61:b9:9f:a6:39:8d:62:ab:9d:1a:c7:bd:b2:
                    0b:46:97:29:b8:01:ba:3b:a7:a6:b7:22:e2:bb:ac:
                    dd:3e:9a:43:fa:9e:36:d8:d4:e9:85:0c:0a:67:05:
                    4f:37:4a:1b:3c:cf:01:bf:c7:e4:90:fb:ef:58:07:
                    d6:a3:9e:d3:97:97:5d:c3:9f:c1:b3:ed:a3:90:b6:
                    2a:00:e6:15:b9:6d:02:75:bf:8a:8a:41:e1:03:fb:
                    69:76:03:9c:86:cc:aa:b4:9c:4b:73:0e:0c:6c:57:
                    f1:bb:d2:26:fa:7b:cf:ed:68:65:12:f7:4e:68:9f:
                    0a:ec:d9:0e:a4:36:5a:db:29:88:6b:9a:0f:04:64:
                    21:50:2a:65:c7:2c:3e:c7:ff:c7:35:ef:d9:68:37:
                    32:36:66:6c:ed:f7:75:56:39:6f:d3:15:a1:e9:b1:
                    c1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8A:41:0E:98:B2:7A:6F:3D:46:5F:AF:5F:31:A0:A6:2B:A5:9A:13
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3132382e302f31392d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:f3:39:4e:65:bb:6d:fe:ec:42:8a:4a:e1:63:a9:44:3a:55:
         d7:46:87:6f:ff:36:3c:97:39:47:a8:de:ab:c3:0f:a0:3e:a2:
         96:07:11:99:da:9f:27:b6:cd:dd:6b:b4:da:57:44:10:6e:64:
         a0:9a:62:a4:aa:fb:a9:90:95:dc:b9:de:bd:7c:55:7f:32:e9:
         6f:55:73:a1:21:9d:ca:47:4b:f1:a3:e0:0d:41:d9:d8:5e:a8:
         28:20:b1:32:ae:f2:b2:0b:b9:6d:a7:85:ee:c4:d1:d2:1c:48:
         cf:20:d3:fc:b6:ee:2e:1b:5d:fc:7b:89:a3:ab:19:c6:bd:0c:
         90:3f:82:5f:e2:93:dc:39:6a:aa:18:5e:3e:84:aa:3a:b1:e5:
         bc:b6:fa:c4:fd:9b:b7:3f:d0:4e:28:45:4b:f1:ca:78:11:fc:
         f3:35:2a:24:a7:10:42:4b:dd:2b:ee:7c:34:a4:51:4d:81:2b:
         b7:5c:51:4d:a6:57:71:29:7e:16:f5:97:d9:27:b2:51:f7:8a:
         f3:4e:bb:cd:3b:7f:31:7f:d4:ae:cb:de:cd:6b:7f:16:b6:52:
         e9:cc:75:de:ca:7f:00:03:73:46:6d:ce:1a:89:0c:ea:d9:da:
         1b:d2:2f:5e:2d:0b:e3:a8:e2:7e:d3:7b:99:62:6f:43:f2:c0:
         94:85:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:50 2026 by rpki-client