This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203237393437.roa
File:                     3139322e3138382e35332e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          su+kfnZ1zPSSxTRiVkPqeW69iZEEyKltYbRFQoaU26E=
Subject key identifier:   EA:6F:AF:51:F2:E0:71:67:FB:19:2B:5F:C3:B4:08:21:4E:84:40:CB
Certificate issuer:       /CN=D73871448A193F4B351257D5A2A9AA22FCFECBB4
Certificate serial:       46F8938DBEC3EED992AA093A70161AD62E3A8F97
Authority key identifier: D7:38:71:44:8A:19:3F:4B:35:12:57:D5:A2:A9:AA:22:FC:FE:CB:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 06 Jan 2026 19:18:25 +0000
ROA not before:           Tue 06 Jan 2026 19:13:25 +0000
ROA not after:            Tue 05 Jan 2027 19:18:25 +0000
asID:                     27947
IP address blocks:        192.188.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 12:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f8:93:8d:be:c3:ee:d9:92:aa:09:3a:70:16:1a:d6:2e:3a:8f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73871448A193F4B351257D5A2A9AA22FCFECBB4
        Validity
            Not Before: Jan  6 19:13:25 2026 GMT
            Not After : Jan  5 19:18:25 2027 GMT
        Subject: CN=EA6FAF51F2E07167FB192B5FC3B408214E8440CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9e:f6:0e:f5:28:2c:c8:29:67:57:84:e1:31:
                    92:ea:82:92:91:dc:94:b4:85:00:76:de:ac:b9:92:
                    63:05:9e:9e:ce:3e:aa:aa:77:2e:cf:5b:ab:cb:7a:
                    36:ac:b4:a3:3e:a7:2c:fc:35:29:62:68:09:86:9e:
                    1e:0d:c5:3c:33:20:06:bb:69:fa:f2:c5:4f:cf:9e:
                    f7:87:32:b0:a3:16:2b:ce:16:a4:9a:3e:d8:56:e9:
                    6a:e8:83:ba:88:d2:fb:79:c5:4e:be:71:14:46:bd:
                    65:4c:46:8b:8c:10:3f:d4:97:6c:e3:e4:f0:9e:1d:
                    bb:4e:29:5a:59:30:40:da:b2:78:5c:a4:22:fe:65:
                    20:45:d8:3d:3d:dd:13:a3:2d:a8:5a:79:f0:2c:53:
                    72:91:a6:7c:74:f2:e0:9e:56:fb:11:e7:ce:63:62:
                    d7:b2:a0:a8:53:71:5c:ff:a7:bd:f9:3b:52:a3:a4:
                    ed:be:39:e4:26:70:79:f5:4d:80:3d:4b:4f:ef:24:
                    9e:22:8c:ea:28:70:71:42:b0:47:1a:e0:3c:39:ca:
                    72:73:27:12:4b:90:fa:d0:73:e0:35:8c:a8:8e:48:
                    8a:7e:62:75:7b:62:06:5e:e8:91:52:09:9b:ab:b5:
                    32:0c:e9:39:32:0f:a1:bd:c2:1e:8c:2c:e7:6e:15:
                    3d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6F:AF:51:F2:E0:71:67:FB:19:2B:5F:C3:B4:08:21:4E:84:40:CB
            X509v3 Authority Key Identifier:
                keyid:D7:38:71:44:8A:19:3F:4B:35:12:57:D5:A2:A9:AA:22:FC:FE:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:74:11:0b:84:ff:74:25:0d:f7:e5:3e:91:49:6f:51:78:6a:
         4c:fe:a9:5a:fa:9d:03:be:54:f9:9a:84:e7:d0:29:d3:11:8c:
         fa:ab:10:b3:d7:b3:c9:c2:9e:d6:e6:66:45:17:51:18:e2:e7:
         14:23:ad:70:88:a3:23:a9:f7:00:c8:89:ea:36:d2:fc:7a:10:
         b2:dc:7b:d1:04:f1:57:d9:da:10:1a:92:d3:26:d8:48:81:80:
         6a:d4:fa:f2:69:f1:7d:c4:25:7a:3e:8d:54:d2:b0:82:59:92:
         5d:9d:6e:1b:2b:b2:90:18:fe:0e:c8:76:12:09:9f:6f:27:64:
         d1:4b:f2:9a:07:78:67:eb:da:82:7b:cb:84:46:a9:8e:09:fd:
         e1:c9:26:21:64:b6:9b:28:de:ad:8b:8c:a6:d1:a2:dc:ba:44:
         f8:ba:47:c4:ad:fc:7b:e7:bb:b8:de:14:ba:1b:95:db:eb:69:
         36:13:46:38:0f:09:9a:f0:fe:67:47:6e:9b:58:34:09:b9:95:
         a3:70:a2:bd:3b:fe:2e:0f:a0:04:e1:72:7e:26:96:8f:80:a2:
         96:2e:29:99:44:a0:a7:9f:53:51:34:74:b1:34:ff:6d:e3:27:
         e3:68:d8:8b:32:d2:a1:ca:45:a3:f8:93:40:9e:6c:ec:e9:9a:
         3f:a8:ad:7b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIURviTjb7D7tmSqgk6cBYa1i46j5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDczODcxNDQ4QTE5M0Y0QjM1MTI1N0Q1QTJBOUFBMjJG
Q0ZFQ0JCNDAeFw0yNjAxMDYxOTEzMjVaFw0yNzAxMDUxOTE4MjVaMDMxMTAvBgNV
BAMTKEVBNkZBRjUxRjJFMDcxNjdGQjE5MkI1RkMzQjQwODIxNEU4NDQwQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSnvYO9SgsyClnV4ThMZLqgpKR
3JS0hQB23qy5kmMFnp7OPqqqdy7PW6vLejastKM+pyz8NSliaAmGnh4NxTwzIAa7
afryxU/PnveHMrCjFivOFqSaPthW6Wrog7qI0vt5xU6+cRRGvWVMRouMED/Ul2zj
5PCeHbtOKVpZMEDasnhcpCL+ZSBF2D093ROjLahaefAsU3KRpnx08uCeVvsR585j
YteyoKhTcVz/p735O1KjpO2+OeQmcHn1TYA9S0/vJJ4ijOoocHFCsEca4Dw5ynJz
JxJLkPrQc+A1jKiOSIp+YnV7YgZe6JFSCZurtTIM6TkyD6G9wh6MLOduFT0TAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU6m+vUfLgcWf7GStfw7QIIU6EQMswHwYDVR0j
BBgwFoAU1zhxRIoZP0s1ElfVoqmqIvz+y7QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CREVBNjNDOTYwQjJGQ0E4MzFENDg0MzIyNThBMTRDNUVG
MkI0QUQ2NDZFRTk0NTJENjM1N0Y0QzdCQkYwRDU0LzAvRDczODcxNDQ4QTE5M0Y0
QjM1MTI1N0Q1QTJBOUFBMjJGQ0ZFQ0JCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENzM4NzE0NDhBMTkzRjRCMzUx
MjU3RDVBMkE5QUEyMkZDRkVDQkI0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkRFQTYzQzk2MEIyRkNBODMxRDQ4NDMyMjU4QTE0QzVFRjJCNEFENjQ2
RUU5NDUyRDYzNTdGNEM3QkJGMEQ1NC8wLzMxMzkzMjJlMzEzODM4MmUzNTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMC8NTAN
BgkqhkiG9w0BAQsFAAOCAQEAYXQRC4T/dCUN9+U+kUlvUXhqTP6pWvqdA75U+ZqE
59Ap0xGM+qsQs9ezycKe1uZmRRdRGOLnFCOtcIijI6n3AMiJ6jbS/HoQstx70QTx
V9naEBqS0ybYSIGAatT68mnxfcQlej6NVNKwglmSXZ1uGyuykBj+Dsh2Egmfbydk
0Uvymgd4Z+vagnvLhEapjgn94ckmIWS2myjerYuMptGi3LpE+LpHxK38e+e7uN4U
uhuV2+tpNhNGOA8JmvD+Z0dum1g0CbmVo3CivTv+Lg+gBOFyfiaWj4Cili4pmUSg
p59TUTR0sTT/beMn42jYizLSocpFo/iTQJ5s7OmaP6itew==
-----END CERTIFICATE-----
Generated at Sun Jan 11 14:41:11 2026 by rpki-client