This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3134302e3132382f32372d3237203d3e203336303430.roa
File:                     3139302e3231302e3134302e3132382f32372d3237203d3e203336303430.roa (raw, json)
Hash identifier:          VUxrZCc+gJUEbwxiE4lv1NEsTRP4kKHSjsv/LG2cdE0=
Subject key identifier:   EE:20:52:73:BC:00:EE:4F:63:A8:C3:4C:6A:58:FF:9D:92:91:A9:0A
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       3AF21543BE6808515B700E6B068CEDEB3974BBDA
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3134302e3132382f32372d3237203d3e203336303430.roa
Signing time:             Tue 06 Jan 2026 20:55:07 +0000
ROA not before:           Tue 06 Jan 2026 20:50:07 +0000
ROA not after:            Tue 05 Jan 2027 20:55:07 +0000
asID:                     36040
IP address blocks:        190.210.140.128/27 maxlen: 27
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 15:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f2:15:43:be:68:08:51:5b:70:0e:6b:06:8c:ed:eb:39:74:bb:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Jan  6 20:50:07 2026 GMT
            Not After : Jan  5 20:55:07 2027 GMT
        Subject: CN=EE205273BC00EE4F63A8C34C6A58FF9D9291A90A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c7:eb:9f:f4:9c:d4:fe:19:bf:28:14:0e:79:
                    73:8a:f8:36:4a:76:1d:ed:f8:b8:62:eb:17:82:ed:
                    6c:13:58:a0:27:61:87:c2:3a:fa:f1:55:ab:61:6c:
                    9b:4a:b3:2b:a1:b1:b6:e9:dd:13:81:d4:d5:48:b3:
                    9a:df:9f:68:4a:c8:93:13:99:5d:97:57:6c:43:a3:
                    2d:6d:35:d4:db:7b:f9:15:65:d0:dc:24:d2:52:1d:
                    01:4c:06:d1:8c:e5:b3:4a:44:5f:8f:9f:dc:04:a6:
                    dc:a9:60:6d:84:f3:39:ca:fa:38:4b:ce:15:a3:dc:
                    5d:b4:e6:f4:5d:bd:4d:78:98:de:bb:44:1a:2c:54:
                    21:2c:03:eb:db:c3:05:19:d6:15:53:45:55:4f:0c:
                    db:eb:fe:cd:ba:6e:ba:87:70:bd:b2:56:3f:94:59:
                    09:dc:ad:3f:2d:13:4d:6e:16:6a:fa:95:36:ec:56:
                    2d:a5:84:f8:4a:a6:43:80:fe:05:65:6b:a4:c9:c6:
                    43:5b:26:25:a9:ad:c8:cb:5d:0f:d5:c9:64:de:0a:
                    10:b2:6e:f6:fd:a0:bb:90:ca:96:eb:fb:30:d7:0d:
                    27:eb:32:0f:de:ca:16:34:b0:2f:e6:37:b0:46:e1:
                    7f:7d:bb:20:83:0a:0d:28:59:39:f9:38:1a:48:31:
                    05:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:20:52:73:BC:00:EE:4F:63:A8:C3:4C:6A:58:FF:9D:92:91:A9:0A
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3134302e3132382f32372d3237203d3e203336303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.140.128/27

    Signature Algorithm: sha256WithRSAEncryption
         91:97:53:ff:5d:29:ec:49:73:7e:83:89:07:53:3d:99:66:fb:
         9b:2c:0f:4d:10:f1:b4:b1:b5:07:ed:68:f8:b1:f0:50:90:43:
         8f:3f:dc:2a:24:e5:42:ff:c9:d2:aa:16:f3:63:e4:38:18:3f:
         7d:ca:3e:3b:b0:b4:ee:93:b1:3d:23:07:40:b7:9f:d2:93:1c:
         56:4f:96:25:a1:b5:cd:ca:86:a6:96:af:e2:c7:43:cb:41:47:
         c6:ad:dd:71:0a:aa:8e:1a:24:53:7b:5f:88:5a:1b:b2:37:da:
         c8:21:c2:74:f7:e9:b3:c6:cc:59:78:75:f0:13:61:79:c9:6e:
         e9:b1:c1:ef:a3:43:74:f5:ef:12:b0:7b:54:16:3f:e4:e0:d8:
         50:2a:60:f8:2d:6f:e0:df:e5:06:c1:6a:15:54:35:ab:9d:7c:
         41:82:5e:a7:92:0e:9a:b5:89:ca:8d:f9:c4:cb:02:87:fe:21:
         2d:02:15:37:56:81:61:fb:6e:d6:dc:8f:2c:a4:5f:af:b4:12:
         d9:67:b8:fe:0a:6d:99:6d:b2:1a:71:28:57:1c:8c:30:0a:ac:
         b8:ea:54:84:4d:2f:f5:69:e1:a4:c7:31:8a:2c:39:21:43:63:
         1f:02:e3:f9:5d:c8:c7:42:8e:9f:b4:d5:e9:50:84:56:fc:dd:
         76:d7:7e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:34:39 2026 by rpki-client