This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e31342e3138312e302f32342d3234203d3e203532323638.roa
File:                     3139302e31342e3138312e302f32342d3234203d3e203532323638.roa (raw, json)
Hash identifier:          9dudrVzzYM9QY/lTstmEcYt0LxzQby8g3ne1YY0/93Q=
Subject key identifier:   88:CF:1F:C2:96:D0:24:B6:5A:86:FB:BD:CD:41:A0:80:D5:27:15:A9
Certificate issuer:       /CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
Certificate serial:       055F7513E005BE4F62E235C519BE5235E1BE1FFF
Authority key identifier: 51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e31342e3138312e302f32342d3234203d3e203532323638.roa
Signing time:             Fri 12 Dec 2025 13:54:46 +0000
ROA not before:           Fri 12 Dec 2025 13:49:46 +0000
ROA not after:            Fri 11 Dec 2026 13:54:46 +0000
asID:                     52268
IP address blocks:        190.14.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 Jan 2026 21:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5f:75:13:e0:05:be:4f:62:e2:35:c5:19:be:52:35:e1:be:1f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
        Validity
            Not Before: Dec 12 13:49:46 2025 GMT
            Not After : Dec 11 13:54:46 2026 GMT
        Subject: CN=88CF1FC296D024B65A86FBBDCD41A080D52715A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:9c:46:19:57:c5:03:58:1f:38:cf:92:11:
                    48:a3:c2:09:31:bd:7a:c1:55:7c:9e:64:94:f5:99:
                    3e:66:c1:10:53:2f:66:d5:6a:cb:c8:b4:60:df:70:
                    d2:40:e7:05:5f:a9:f8:44:f9:4c:2a:f4:61:2e:66:
                    67:7b:94:ba:88:86:8f:f1:32:fb:8f:a3:78:a2:7d:
                    23:ad:2b:5e:82:9b:47:6b:d9:b3:5a:55:3d:bb:cf:
                    b6:35:0b:0f:4d:f5:53:cd:e5:fe:96:4c:74:ed:44:
                    23:4f:b4:07:86:4f:91:7b:68:08:dc:3b:60:ce:5e:
                    b1:16:98:89:11:d5:fd:c3:ac:6c:39:19:6b:70:3f:
                    70:22:bb:c3:58:77:91:44:6d:1f:0b:df:5d:d3:9d:
                    5e:40:41:03:a8:7b:83:de:a6:42:48:0b:d4:7b:54:
                    2b:9e:39:e0:f8:98:8f:6d:e1:74:4c:6c:a1:99:74:
                    b5:ca:a7:a3:82:45:d6:5f:85:29:c0:03:c0:d8:b0:
                    bb:b8:cc:bd:68:be:2c:11:2b:f3:e8:a3:3f:25:75:
                    f9:14:8b:9b:f2:23:c8:10:ee:e6:71:bb:2b:7f:af:
                    30:5c:f0:8c:41:2e:83:b4:20:9c:eb:db:00:0c:8a:
                    02:9c:e9:cd:95:79:27:47:df:28:ca:4e:94:d0:e8:
                    9a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CF:1F:C2:96:D0:24:B6:5A:86:FB:BD:CD:41:A0:80:D5:27:15:A9
            X509v3 Authority Key Identifier:
                keyid:51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e31342e3138312e302f32342d3234203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:56:7a:cf:04:c7:f6:d5:93:79:b5:35:e3:7f:04:6d:bf:e6:
         82:59:af:b5:e9:63:d7:ba:b9:cf:e1:12:50:f9:b9:63:9a:0c:
         57:d9:37:6a:de:0a:cc:76:9f:8e:80:7e:86:d1:62:42:be:94:
         73:41:93:57:88:f4:09:89:23:5b:bc:cf:81:28:8d:58:b5:ed:
         49:1a:bf:e3:f4:87:4b:0b:1d:c8:3a:bf:d4:36:0c:19:46:11:
         90:e1:6f:f2:7d:24:60:96:22:20:66:00:64:d4:50:1a:24:a6:
         15:a1:f4:5e:ee:92:55:f6:f5:d3:d3:47:f5:dd:87:f2:f7:42:
         e1:70:af:61:05:cd:1c:9d:6c:20:3f:37:13:69:96:d0:83:a3:
         9f:e0:e2:74:8f:ce:47:13:df:31:6a:1a:23:b4:63:02:3b:f4:
         90:b8:5e:21:24:90:4f:71:b1:34:40:fa:04:f2:79:af:6d:52:
         d8:b1:03:34:c4:2e:c7:39:79:80:c0:11:7b:c6:a9:b3:77:9d:
         77:c5:04:92:4d:21:79:82:db:94:6c:d5:fd:78:da:e6:c5:d9:
         42:b6:af:b0:ab:02:9f:93:8f:ea:49:bd:a9:90:a9:d3:d4:7b:
         43:d8:69:82:c8:dc:51:5d:e0:a4:b2:d6:ff:4b:9f:01:22:e6:
         24:14:73:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 12:19:03 2026 by rpki-client