This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3139302e352e3132382e302f31392d3234203d3e203136353932.roa
File:                     3139302e352e3132382e302f31392d3234203d3e203136353932.roa (raw, json)
Hash identifier:          WdDpONiRTfBNWA38mlSePkud8W44FHtJSlen4qPQxBA=
Subject key identifier:   5D:AA:2B:FC:70:42:33:BB:1F:3C:1C:99:52:9D:5C:13:E6:FD:55:8C
Certificate issuer:       /CN=3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C
Certificate serial:       61D4BFCFC96C25BB5B48C392174F085BBAD7CC54
Authority key identifier: 31:22:D3:2E:B1:7F:7A:44:AF:15:7A:CD:3F:E6:23:4C:B2:DF:D0:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3139302e352e3132382e302f31392d3234203d3e203136353932.roa
Signing time:             Tue 06 Jan 2026 19:00:20 +0000
ROA not before:           Tue 06 Jan 2026 18:55:20 +0000
ROA not after:            Tue 05 Jan 2027 19:00:20 +0000
asID:                     16592
IP address blocks:        190.5.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 14:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d4:bf:cf:c9:6c:25:bb:5b:48:c3:92:17:4f:08:5b:ba:d7:cc:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C
        Validity
            Not Before: Jan  6 18:55:20 2026 GMT
            Not After : Jan  5 19:00:20 2027 GMT
        Subject: CN=5DAA2BFC704233BB1F3C1C99529D5C13E6FD558C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:45:6d:40:e2:6c:b5:a9:11:e4:14:23:04:
                    57:cb:b6:6a:88:ac:9d:f6:19:13:5d:72:33:75:82:
                    02:04:bf:33:8c:24:63:d7:85:21:22:25:16:07:29:
                    a9:79:31:bf:ee:0f:f3:74:28:d5:5f:06:ac:99:d4:
                    25:bf:1a:86:5a:95:88:f9:08:32:87:8e:29:2b:82:
                    5e:31:88:b8:df:42:42:93:63:55:4d:e9:e4:29:84:
                    02:e1:08:b3:44:94:66:0e:52:fe:0b:84:2d:32:49:
                    37:9c:85:62:ec:7c:e6:b3:f9:b5:69:ca:b3:ac:67:
                    2e:65:df:b0:5b:f5:7e:c0:00:14:0d:0d:4e:57:c3:
                    7f:54:68:41:18:32:89:49:c7:c0:f0:35:00:a3:17:
                    ba:5c:71:ec:76:3a:be:bb:f7:e6:56:6f:48:19:80:
                    17:d1:4a:dd:6c:b0:61:cc:b5:ed:83:e8:00:f4:44:
                    53:4c:75:e5:00:60:a1:ce:6c:c5:a1:3b:c6:95:77:
                    c5:c9:5c:bc:bd:19:10:e8:82:9a:ac:a9:a2:eb:a9:
                    35:b7:be:cf:24:b7:39:ae:df:d7:0b:15:dc:0d:9f:
                    f7:5f:76:73:cf:4d:9f:88:91:87:23:c2:0c:27:c9:
                    f4:84:21:e9:f1:dc:8c:05:91:f3:2f:fc:74:02:37:
                    8e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AA:2B:FC:70:42:33:BB:1F:3C:1C:99:52:9D:5C:13:E6:FD:55:8C
            X509v3 Authority Key Identifier:
                keyid:31:22:D3:2E:B1:7F:7A:44:AF:15:7A:CD:3F:E6:23:4C:B2:DF:D0:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3139302e352e3132382e302f31392d3234203d3e203136353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2c:f6:f2:71:fd:d9:f1:2e:24:a5:2f:55:90:be:16:46:32:a8:
         90:c9:52:f2:75:bb:48:23:dd:e9:1a:73:00:1d:2e:c9:13:49:
         07:c3:61:1f:a4:3d:70:76:d3:ba:81:ad:19:c3:e0:99:66:3e:
         c6:84:6b:9e:ac:f2:ef:da:5b:dc:66:41:49:bc:08:66:6a:9e:
         6e:5b:43:e1:77:2f:af:3e:7c:06:c2:0b:28:9b:d3:54:00:3f:
         70:5f:30:fa:b1:97:8d:f0:32:85:51:dc:d9:85:a0:d4:09:25:
         ea:39:08:f9:7a:6f:c9:9e:71:51:4b:0c:ff:0b:b1:15:c9:df:
         71:84:5d:28:94:7e:b7:20:8e:03:b7:1f:d1:7a:04:be:20:4d:
         0e:32:c7:b1:c6:e7:f5:a9:00:c8:10:f6:68:74:2f:bc:82:0c:
         07:f6:9e:5c:f6:e4:96:b4:91:b9:76:76:9e:98:ae:ba:5a:0f:
         07:59:d9:c1:21:21:99:e7:fe:f7:32:88:2a:04:29:8a:53:c0:
         b9:a0:93:bf:b8:25:d4:e5:44:85:25:9a:6a:4e:0d:d4:04:c5:
         0c:a2:8b:d9:f7:37:fa:91:27:b4:f0:e6:69:c6:a3:d8:3f:41:
         c3:9d:2f:f9:aa:41:74:0f:2b:fe:84:ff:b0:f4:02:a3:76:ae:
         07:19:29:ef
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUYdS/z8lsJbtbSMOSF08IW7rXzFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEyMkQzMkVCMTdGN0E0NEFGMTU3QUNEM0ZFNjIzNENC
MkRGRDAxQzAeFw0yNjAxMDYxODU1MjBaFw0yNzAxMDUxOTAwMjBaMDMxMTAvBgNV
BAMTKDVEQUEyQkZDNzA0MjMzQkIxRjNDMUM5OTUyOUQ1QzEzRTZGRDU1OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM/kVtQOJstakR5BQjBFfLtmqI
rJ32GRNdcjN1ggIEvzOMJGPXhSEiJRYHKal5Mb/uD/N0KNVfBqyZ1CW/GoZalYj5
CDKHjikrgl4xiLjfQkKTY1VN6eQphALhCLNElGYOUv4LhC0ySTechWLsfOaz+bVp
yrOsZy5l37Bb9X7AABQNDU5Xw39UaEEYMolJx8DwNQCjF7pccex2Or679+ZWb0gZ
gBfRSt1ssGHMte2D6AD0RFNMdeUAYKHObMWhO8aVd8XJXLy9GRDogpqsqaLrqTW3
vs8ktzmu39cLFdwNn/dfdnPPTZ+IkYcjwgwnyfSEIenx3IwFkfMv/HQCN471AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUXaor/HBCM7sfPByZUp1cE+b9VYwwHwYDVR0j
BBgwFoAUMSLTLrF/ekSvFXrNP+YjTLLf0BwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMkEzQjJEM0Q2MURCNEQ5NEE0OUJGMUNDRUUxRjgzNzg5
RUJERUJGQ0UyQ0VFRjhGNjY5QTBBMEFCNDRCODM5LzAvMzEyMkQzMkVCMTdGN0E0
NEFGMTU3QUNEM0ZFNjIzNENCMkRGRDAxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMTIyRDMyRUIxN0Y3QTQ0QUYx
NTdBQ0QzRkU2MjM0Q0IyREZEMDFDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjJBM0IyRDNENjFEQjREOTRBNDlCRjFDQ0VFMUY4Mzc4OUVCREVCRkNF
MkNFRUY4RjY2OUEwQTBBQjQ0QjgzOS8wLzMxMzkzMDJlMzUyZTMxMzIzODJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzYzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+BYAwDQYJ
KoZIhvcNAQELBQADggEBACz28nH92fEuJKUvVZC+FkYyqJDJUvJ1u0gj3ekacwAd
LskTSQfDYR+kPXB207qBrRnD4JlmPsaEa56s8u/aW9xmQUm8CGZqnm5bQ+F3L68+
fAbCCyib01QAP3BfMPqxl43wMoVR3NmFoNQJJeo5CPl6b8mecVFLDP8LsRXJ33GE
XSiUfrcgjgO3H9F6BL4gTQ4yx7HG5/WpAMgQ9mh0L7yCDAf2nlz25Ja0kbl2dp6Y
rrpaDwdZ2cEhIZnn/vcyiCoEKYpTwLmgk7+4JdTlRIUlmmpODdQExQyii9n3N/qR
J7Tw5mnGo9g/QcOdL/mqQXQPK/6E/7D0AqN2rgcZKe8=
-----END CERTIFICATE-----
Generated at Thu Jan 8 23:57:34 2026 by rpki-client