This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e39322e36342e302f31392d3234203d3e203237383834.roa
File:                     3139302e39322e36342e302f31392d3234203d3e203237383834.roa (raw, json)
Hash identifier:          NoHe6ofFfzDknN4P045UDnf+RomjEh10MXdZYKzVY8s=
Subject key identifier:   41:23:52:78:80:0F:60:E9:82:B9:F1:99:A0:11:79:61:19:FD:F4:24
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       768375118EBAA1D91B05F97F0F63612F2CBE571C
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e39322e36342e302f31392d3234203d3e203237383834.roa
Signing time:             Tue 06 Jan 2026 20:52:33 +0000
ROA not before:           Tue 06 Jan 2026 20:47:33 +0000
ROA not after:            Tue 05 Jan 2027 20:52:33 +0000
asID:                     27884
IP address blocks:        190.92.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 09:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:83:75:11:8e:ba:a1:d9:1b:05:f9:7f:0f:63:61:2f:2c:be:57:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Jan  6 20:47:33 2026 GMT
            Not After : Jan  5 20:52:33 2027 GMT
        Subject: CN=41235278800F60E982B9F199A011796119FDF424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:b9:48:5b:de:53:5e:be:57:00:b1:53:4f:
                    ef:07:53:14:ea:69:f2:a0:4d:7c:e7:8c:23:e9:53:
                    99:dd:09:12:9e:1e:ac:1e:fa:d3:8b:2f:03:5f:2a:
                    5d:5b:f2:84:7c:14:69:9d:57:5a:f0:dc:13:19:99:
                    56:7e:b2:26:14:bc:a4:f0:45:6f:3b:9d:f3:9c:88:
                    a6:b5:a0:ce:77:b6:16:dd:94:ef:1b:c3:1a:b4:b2:
                    d6:ec:fe:42:da:90:cb:35:1b:8a:26:45:f6:e5:b4:
                    4b:66:25:aa:9e:25:d4:f0:59:63:8e:db:7d:59:27:
                    2d:3d:cc:4f:7f:bd:f9:f0:ef:9f:ca:8a:e3:e7:a0:
                    00:3d:cb:7c:cc:bd:26:8f:80:6e:c9:f9:9e:28:00:
                    3e:48:c0:93:16:a5:9f:93:e5:de:10:06:93:62:a5:
                    6c:3a:41:67:18:cb:7e:bb:30:78:54:fd:41:c2:83:
                    40:2e:a5:c3:a8:8a:ef:54:a6:a8:fe:1b:db:ce:53:
                    26:dc:71:e4:88:eb:06:0b:76:83:88:00:75:9d:2d:
                    6f:51:b0:93:8e:3f:8f:7b:61:22:85:5f:b5:1c:b0:
                    5c:91:74:b0:9a:cf:0e:19:8d:61:a1:87:1e:46:d6:
                    84:4a:7c:9c:6c:bd:b8:c8:b0:e8:d2:e1:1b:52:dd:
                    48:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:23:52:78:80:0F:60:E9:82:B9:F1:99:A0:11:79:61:19:FD:F4:24
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e39322e36342e302f31392d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:c5:4f:93:7f:68:e2:34:56:bc:f0:fa:58:48:1e:a9:c0:3e:
         cb:f5:c7:c5:f4:b5:4b:73:18:0e:ae:44:4f:74:bf:9e:28:a5:
         66:08:cb:87:24:41:e8:5d:ae:9b:6f:ff:75:68:d7:61:76:59:
         f8:90:70:2c:2b:27:f6:3d:b0:06:00:3f:68:0b:a7:ae:c4:b6:
         8b:0f:10:6f:fd:4a:e5:ff:6d:60:7f:d5:f9:ba:f7:bf:c0:b2:
         23:b8:4d:6a:60:7e:ec:4a:cc:77:0f:74:98:17:6a:76:5b:04:
         f5:50:0e:a3:44:2e:cf:ab:5a:64:45:c7:0b:aa:df:45:b7:92:
         a7:97:6b:4a:c4:da:fe:e5:03:e8:e8:68:8c:fa:23:37:b5:bc:
         ed:2f:97:d8:48:a1:c2:21:1a:8d:b9:68:99:63:8b:d7:0f:6a:
         9c:de:93:97:a9:17:95:44:3e:0e:8f:e4:e1:42:de:ef:09:b7:
         fe:15:f6:df:26:2c:65:44:6b:e3:7d:38:1a:ee:b0:5c:d5:5e:
         b9:5c:78:0b:f2:96:27:89:17:7f:f8:96:84:75:4a:9c:76:a6:
         69:f2:5c:2b:df:d8:4d:22:01:d5:f1:da:9a:3d:dd:3d:9b:85:
         0f:22:85:f8:5a:79:63:e6:61:c9:a7:36:dd:43:d2:6a:4a:73:
         e7:6e:34:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:17:45 2026 by rpki-client