This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3139302e31312e33322e302f31392d3234203d3e203131383135.roa
File:                     3139302e31312e33322e302f31392d3234203d3e203131383135.roa (raw, json)
Hash identifier:          seu9TSOgmbIzCxe2Vzfhfw3ZSJ0ILjEQnCSMQnHMIQc=
Subject key identifier:   E3:00:5F:5C:8C:62:8C:A4:7D:2D:7C:46:95:FA:2E:F5:A4:BB:77:99
Certificate issuer:       /CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
Certificate serial:       1C1B78C17D34BC7955AC425D04311D79E9DCCF56
Authority key identifier: D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3139302e31312e33322e302f31392d3234203d3e203131383135.roa
Signing time:             Tue 06 Jan 2026 19:28:42 +0000
ROA not before:           Tue 06 Jan 2026 19:23:42 +0000
ROA not after:            Tue 05 Jan 2027 19:28:42 +0000
asID:                     11815
IP address blocks:        190.11.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1b:78:c1:7d:34:bc:79:55:ac:42:5d:04:31:1d:79:e9:dc:cf:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
        Validity
            Not Before: Jan  6 19:23:42 2026 GMT
            Not After : Jan  5 19:28:42 2027 GMT
        Subject: CN=E3005F5C8C628CA47D2D7C4695FA2EF5A4BB7799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:b2:b2:b9:12:c4:31:ff:71:2d:b2:62:bb:
                    ed:d7:c9:05:ef:fb:68:8f:81:c3:0c:fb:12:c9:40:
                    57:9b:8e:df:f7:d5:dc:ac:07:c7:4a:1e:e0:d4:e5:
                    15:52:fc:f8:8e:8e:b4:83:4b:44:9c:e0:62:cf:2e:
                    ca:b9:4e:0a:76:da:3e:24:b7:bb:a0:55:01:07:f2:
                    49:56:54:a5:9e:ff:df:0a:d0:1a:29:c7:da:dc:4b:
                    e6:70:2d:56:65:b2:84:89:dd:4d:cc:50:87:dd:b3:
                    11:fc:ca:43:20:90:14:7c:8c:50:5d:fe:e4:14:0e:
                    41:64:8c:2e:53:1b:3a:49:fa:3f:16:42:6f:bd:b6:
                    fd:fd:98:79:ba:4b:90:21:96:d4:02:a8:fa:f3:b7:
                    0c:f0:43:30:0f:9b:d7:ee:fe:6e:1a:fd:a4:9d:7e:
                    50:8a:33:42:ba:54:94:61:82:b3:0a:e2:18:dd:58:
                    37:c1:fe:5c:3e:d5:0d:95:2a:97:94:98:01:d2:64:
                    f9:46:a4:7c:a2:38:0f:c6:a3:eb:fb:ce:e0:61:e9:
                    51:48:e6:41:a1:9d:a6:04:1f:14:13:74:f8:5f:bc:
                    e7:15:62:6e:27:75:ec:a1:8d:d6:f0:3b:ae:67:99:
                    93:fc:6a:a8:77:0b:0d:4a:f5:09:48:4d:7d:b5:b5:
                    5c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:00:5F:5C:8C:62:8C:A4:7D:2D:7C:46:95:FA:2E:F5:A4:BB:77:99
            X509v3 Authority Key Identifier:
                keyid:D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3139302e31312e33322e302f31392d3234203d3e203131383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         94:2f:e8:21:6d:6b:d4:6d:57:78:d9:b2:9c:3e:b7:97:06:c7:
         20:bf:7c:90:14:c8:40:a9:8f:9e:a6:b4:8e:9b:cc:54:b2:81:
         e9:dd:b7:25:8a:7e:94:23:c5:a0:ef:c5:0a:a1:0d:11:22:eb:
         06:6e:02:74:ec:a8:a1:4e:16:63:7b:e0:98:97:8e:44:20:94:
         13:ec:74:42:82:c9:bf:c7:10:ee:55:6d:c3:08:3b:d5:d9:e9:
         04:5d:48:ff:c9:8a:ad:ca:eb:7b:8c:8e:f1:15:23:73:cd:08:
         98:cf:5b:41:33:52:e5:50:22:e2:da:ae:f6:8a:cb:dc:19:0c:
         4d:21:58:9b:5a:58:8a:7a:10:96:d9:1b:e8:64:c4:66:fc:e1:
         59:e3:f3:51:4c:d4:46:35:67:c4:07:a4:fc:84:93:ac:31:75:
         b3:f3:3d:12:ec:c2:d3:cc:60:e0:5a:0e:a0:df:8e:bd:a0:27:
         80:c5:02:3c:e2:86:e4:64:4c:77:15:99:a7:3a:df:59:6e:ec:
         84:e4:73:de:2c:d3:85:64:69:4a:0f:b8:b8:74:ae:95:ff:16:
         7f:1f:ee:1b:ca:9b:ab:6b:1d:b4:28:e8:e9:fe:0d:9b:e7:5a:
         91:11:83:00:c7:43:32:97:b0:9b:be:07:58:82:83:f7:ca:b5:
         6e:01:6b:44
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUHBt4wX00vHlVrEJdBDEdeencz1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJGNTE0MTk5MEEwMjUyQzM3RDYzMTEyRkI2RUNBNURC
QzU2ODZCNjAeFw0yNjAxMDYxOTIzNDJaFw0yNzAxMDUxOTI4NDJaMDMxMTAvBgNV
BAMTKEUzMDA1RjVDOEM2MjhDQTQ3RDJEN0M0Njk1RkEyRUY1QTRCQjc3OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaLKyuRLEMf9xLbJiu+3XyQXv
+2iPgcMM+xLJQFebjt/31dysB8dKHuDU5RVS/PiOjrSDS0Sc4GLPLsq5Tgp22j4k
t7ugVQEH8klWVKWe/98K0Bopx9rcS+ZwLVZlsoSJ3U3MUIfdsxH8ykMgkBR8jFBd
/uQUDkFkjC5TGzpJ+j8WQm+9tv39mHm6S5AhltQCqPrztwzwQzAPm9fu/m4a/aSd
flCKM0K6VJRhgrMK4hjdWDfB/lw+1Q2VKpeUmAHSZPlGpHyiOA/Go+v7zuBh6VFI
5kGhnaYEHxQTdPhfvOcVYm4ndeyhjdbwO65nmZP8aqh3Cw1K9QlITX21tVzHAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU4wBfXIxijKR9LXxGlfou9aS7d5kwHwYDVR0j
BBgwFoAU0vUUGZCgJSw31jES+27KXbxWhrYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMkZGRENBMzBDMTVDRDU5OTcwQTdFN0FGQUVDM0E5MUFG
NDMwMUFDOTAwOEIwRkZDM0I4Rjk3NzVGNTZGMkZELzAvRDJGNTE0MTk5MEEwMjUy
QzM3RDYzMTEyRkI2RUNBNURCQzU2ODZCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkY1MTQxOTkwQTAyNTJDMzdE
NjMxMTJGQjZFQ0E1REJDNTY4NkI2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjJGRkRDQTMwQzE1Q0Q1OTk3MEE3RTdBRkFFQzNBOTFBRjQzMDFBQzkw
MDhCMEZGQzNCOEY5Nzc1RjU2RjJGRC8wLzMxMzkzMDJlMzEzMTJlMzMzMjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzEzODMxMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+CyAwDQYJ
KoZIhvcNAQELBQADggEBAJQv6CFta9RtV3jZspw+t5cGxyC/fJAUyECpj56mtI6b
zFSygendtyWKfpQjxaDvxQqhDREi6wZuAnTsqKFOFmN74JiXjkQglBPsdEKCyb/H
EO5VbcMIO9XZ6QRdSP/Jiq3K63uMjvEVI3PNCJjPW0EzUuVQIuLarvaKy9wZDE0h
WJtaWIp6EJbZG+hkxGb84Vnj81FM1EY1Z8QHpPyEk6wxdbPzPRLswtPMYOBaDqDf
jr2gJ4DFAjzihuRkTHcVmac631lu7ITkc94s04VkaUoPuLh0rpX/Fn8f7hvKm6tr
HbQo6On+DZvnWpERgwDHQzKXsJu+B1iCg/fKtW4Ba0Q=
-----END CERTIFICATE-----
Generated at Mon Jan 12 02:35:31 2026 by rpki-client