This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/3139322e3134302e39322e302f32322d3234203d3e20323635373131.roa
File:                     3139322e3134302e39322e302f32322d3234203d3e20323635373131.roa (raw, json)
Hash identifier:          lRIf9yM+eHFbFoBmbsYVJrW8zMghLOhTTb7POefliPk=
Subject key identifier:   D6:3A:96:8B:7B:69:C5:61:7B:27:8E:3E:68:A6:AC:AF:9B:B2:45:3C
Certificate issuer:       /CN=12A120543D4989758BFB0561CAF5C57A23A55B08
Certificate serial:       7C0DA6D3698F696FF49FB6A71AA19EA7C0F1C2C5
Authority key identifier: 12:A1:20:54:3D:49:89:75:8B:FB:05:61:CA:F5:C5:7A:23:A5:5B:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A120543D4989758BFB0561CAF5C57A23A55B08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/3139322e3134302e39322e302f32322d3234203d3e20323635373131.roa
Signing time:             Tue 06 Jan 2026 19:45:22 +0000
ROA not before:           Tue 06 Jan 2026 19:40:22 +0000
ROA not after:            Tue 05 Jan 2027 19:45:22 +0000
asID:                     265711
IP address blocks:        192.140.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/12A120543D4989758BFB0561CAF5C57A23A55B08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/12A120543D4989758BFB0561CAF5C57A23A55B08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A120543D4989758BFB0561CAF5C57A23A55B08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0d:a6:d3:69:8f:69:6f:f4:9f:b6:a7:1a:a1:9e:a7:c0:f1:c2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12A120543D4989758BFB0561CAF5C57A23A55B08
        Validity
            Not Before: Jan  6 19:40:22 2026 GMT
            Not After : Jan  5 19:45:22 2027 GMT
        Subject: CN=D63A968B7B69C5617B278E3E68A6ACAF9BB2453C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:8c:c7:35:65:d1:9b:9f:99:35:a2:01:6e:
                    1f:ce:42:0d:ad:9e:60:ee:98:1d:28:57:39:6a:45:
                    b1:63:f4:30:a2:27:0e:66:b8:99:2a:e4:3b:49:1a:
                    fa:2e:5a:03:5a:f8:a9:7f:60:f5:94:5a:00:f5:00:
                    a9:3d:a9:5d:a7:50:31:e2:a7:13:f8:19:96:a5:bd:
                    52:3d:73:ad:80:18:b5:e5:74:ad:32:3f:65:3e:ff:
                    fa:64:82:64:b8:90:11:30:a9:db:90:14:09:36:0b:
                    91:32:88:57:18:88:83:94:97:c9:66:bc:b4:e1:22:
                    dd:3d:25:cd:44:83:45:56:2b:da:74:3d:fa:b6:7e:
                    32:32:13:7f:47:75:56:bf:f2:a9:3e:22:ae:74:f5:
                    f8:37:02:28:58:16:2a:13:46:d7:31:36:86:04:62:
                    fa:2a:61:5d:d4:8e:1a:a2:cf:ff:be:14:23:6f:12:
                    8e:a9:ab:fc:3c:69:bb:bf:8d:58:6c:b0:a7:87:83:
                    87:1a:ac:ae:aa:03:64:ec:ab:79:89:92:6e:3e:b9:
                    91:48:fc:28:d1:82:d1:c8:b5:ae:96:a9:b9:43:a5:
                    0b:74:81:77:75:14:e2:b6:00:3e:58:51:82:73:8e:
                    0d:69:c2:b4:49:2b:c0:5d:16:64:bf:ff:7f:22:33:
                    6f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3A:96:8B:7B:69:C5:61:7B:27:8E:3E:68:A6:AC:AF:9B:B2:45:3C
            X509v3 Authority Key Identifier:
                keyid:12:A1:20:54:3D:49:89:75:8B:FB:05:61:CA:F5:C5:7A:23:A5:5B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/12A120543D4989758BFB0561CAF5C57A23A55B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A120543D4989758BFB0561CAF5C57A23A55B08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/3139322e3134302e39322e302f32322d3234203d3e20323635373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:ff:3a:7a:12:36:2a:0c:31:e7:11:ab:a6:90:06:3e:55:82:
         f3:28:d0:a1:41:ab:53:fb:21:dc:fe:84:02:6b:d8:c6:f6:78:
         36:21:8a:d5:af:b6:2c:00:59:da:ae:47:02:c9:9c:7f:68:72:
         df:50:32:02:39:4a:cc:14:07:c3:b4:70:54:5f:2b:04:65:f8:
         61:c3:00:f2:7f:30:ff:f8:4a:ad:b5:6f:98:85:e3:2f:73:6e:
         9f:02:98:47:28:8b:b5:33:aa:b7:2b:07:ae:77:74:2a:73:25:
         11:70:96:8a:ac:a7:0c:5e:45:ab:cb:43:8b:06:2c:9d:97:ac:
         37:45:18:1c:9a:8a:be:0e:1f:7e:b2:69:9f:3b:0f:4e:18:fa:
         4a:c8:d7:d9:c5:78:d3:1c:6e:0a:75:73:89:b5:5a:63:0f:57:
         6b:38:33:fb:46:51:0b:92:38:64:d0:06:7f:56:28:04:f6:a1:
         be:a8:e5:0c:f2:6c:ea:c0:03:28:5c:4c:b3:05:1c:db:0e:88:
         b9:0d:b7:b6:73:76:6c:70:3a:c3:52:5b:d6:a4:53:f4:13:10:
         2c:c1:35:92:31:6f:90:71:56:7c:7c:c3:37:98:80:e9:22:cf:
         76:2d:20:48:77:1a:f6:f5:89:57:ea:7d:9b:42:34:07:f0:67:
         55:ed:26:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:50 2026 by rpki-client