This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/3139302e3132302e3234302e302f32322d3234203d3e20323632323532.roa
File:                     3139302e3132302e3234302e302f32322d3234203d3e20323632323532.roa (raw, json)
Hash identifier:          uzWUcWJ6S9abH2Y6AwdmpvmXkOwKVny+0Pa9OBNCw7c=
Subject key identifier:   B1:A9:66:73:96:2A:0C:BA:B3:F9:8A:5F:F2:C4:0F:49:49:2F:69:24
Certificate issuer:       /CN=63BA9E74A00603CC3A1DA22BC68F56A433368CCF
Certificate serial:       6C2DF3B6C54B3CE38A35B4286496A50AB18E5A28
Authority key identifier: 63:BA:9E:74:A0:06:03:CC:3A:1D:A2:2B:C6:8F:56:A4:33:36:8C:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/3139302e3132302e3234302e302f32322d3234203d3e20323632323532.roa
Signing time:             Tue 06 Jan 2026 19:38:38 +0000
ROA not before:           Tue 06 Jan 2026 19:33:38 +0000
ROA not after:            Tue 05 Jan 2027 19:38:38 +0000
asID:                     262252
IP address blocks:        190.120.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2d:f3:b6:c5:4b:3c:e3:8a:35:b4:28:64:96:a5:0a:b1:8e:5a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63BA9E74A00603CC3A1DA22BC68F56A433368CCF
        Validity
            Not Before: Jan  6 19:33:38 2026 GMT
            Not After : Jan  5 19:38:38 2027 GMT
        Subject: CN=B1A96673962A0CBAB3F98A5FF2C40F49492F6924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ae:2d:7b:67:54:ef:e5:a5:40:e6:1f:e9:7a:
                    ce:75:9f:6a:80:82:8b:af:17:69:46:c9:c6:fc:d2:
                    ad:a9:80:f3:02:72:d1:3b:90:59:1e:b6:de:6c:95:
                    37:a0:d3:49:75:bb:19:b7:24:ae:fe:69:0a:a2:9b:
                    e9:2b:39:1d:1e:3f:d4:3f:c7:c0:b5:42:22:13:f3:
                    6a:b4:74:c4:63:61:41:6d:fc:aa:0b:2d:90:f6:f1:
                    6b:c6:17:50:fe:31:33:77:5f:e6:c4:cd:dc:a1:e4:
                    96:e0:d9:16:a1:03:76:28:c3:56:34:1d:bb:85:ab:
                    e5:20:85:5c:f4:cb:05:6d:e3:31:97:44:42:9a:cf:
                    66:8f:2c:7e:55:ea:4f:f2:22:a5:93:62:b8:58:8f:
                    86:27:8a:5b:56:cc:14:7f:c2:66:47:62:fb:bc:cd:
                    52:0a:76:33:b7:3c:97:f2:82:f8:a1:f6:cd:0a:d3:
                    e0:89:9e:0a:5f:f6:38:b9:38:fd:71:b8:e5:3e:5c:
                    3f:70:3b:e6:c5:76:f2:b7:d8:35:03:43:06:5d:3d:
                    58:40:e2:6d:ad:67:e8:a4:19:7b:b8:87:e6:c8:dc:
                    ea:3e:3b:4f:a8:56:03:31:04:3a:a8:3f:46:66:70:
                    08:44:50:22:e1:f3:b9:35:6b:c4:3d:e1:17:bb:19:
                    32:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A9:66:73:96:2A:0C:BA:B3:F9:8A:5F:F2:C4:0F:49:49:2F:69:24
            X509v3 Authority Key Identifier:
                keyid:63:BA:9E:74:A0:06:03:CC:3A:1D:A2:2B:C6:8F:56:A4:33:36:8C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/3139302e3132302e3234302e302f32322d3234203d3e20323632323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:86:fd:4a:12:04:45:d9:e3:b2:53:e1:d1:29:75:39:7e:35:
         a7:23:aa:6a:7f:42:6c:58:c7:6c:70:48:29:38:a0:6e:90:ca:
         14:f0:49:f2:81:eb:95:d0:64:fd:c6:cd:93:a6:c3:fa:ce:68:
         22:64:5b:dd:b4:2a:c1:f3:97:1b:f7:82:4a:90:0b:49:8c:56:
         73:54:ad:77:13:1a:74:2d:8c:ae:fa:eb:31:be:ce:bc:a4:5a:
         b1:44:bc:0d:8a:e6:21:68:83:0b:99:94:fe:d4:89:ea:eb:a0:
         1c:96:ee:20:e0:32:b8:06:34:36:84:07:bb:ab:8d:bf:86:a3:
         3c:cd:8f:11:5f:d1:0f:20:2c:fd:18:23:5b:00:7a:02:f8:21:
         5f:31:8e:cb:61:91:70:07:a0:db:29:99:a7:a7:31:46:ff:96:
         73:60:c3:9f:23:06:b2:22:18:4e:bc:e3:4a:e2:b6:91:e6:e1:
         35:0b:af:ce:fe:4c:af:2f:37:37:6a:e4:4c:57:0d:6d:a5:d6:
         01:2c:1f:e8:c3:36:42:7f:34:77:81:bb:7b:50:99:90:40:b1:
         72:71:39:df:20:ce:be:b7:56:e7:66:7c:1d:9a:80:64:df:7e:
         8a:bf:74:3e:cd:46:26:49:f0:c7:10:01:f2:6c:96:af:bd:c0:
         4e:b0:29:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:52:58 2026 by rpki-client