This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3139302e3231322e3132382e302f31372d3234203d3e203134373534.roa
File:                     3139302e3231322e3132382e302f31372d3234203d3e203134373534.roa (raw, json)
Hash identifier:          i1S0rIAPgLA/bUtF/+AY/MpX5ahAY1IcfpjNZ0URLrg=
Subject key identifier:   1B:F7:4D:7E:51:4F:E8:1E:39:18:63:4B:6B:7A:14:1A:B5:E2:6E:2C
Certificate issuer:       /CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
Certificate serial:       0DDE95D04D06F693FF613D6103172E86FDD72BDA
Authority key identifier: 51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3139302e3231322e3132382e302f31372d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:11:20 +0000
ROA not before:           Tue 06 Jan 2026 19:06:20 +0000
ROA not after:            Tue 05 Jan 2027 19:11:20 +0000
asID:                     14754
IP address blocks:        190.212.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 04:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:de:95:d0:4d:06:f6:93:ff:61:3d:61:03:17:2e:86:fd:d7:2b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512FC9A3066D2E0C294F0E001A94F2F0AED7270C
        Validity
            Not Before: Jan  6 19:06:20 2026 GMT
            Not After : Jan  5 19:11:20 2027 GMT
        Subject: CN=1BF74D7E514FE81E3918634B6B7A141AB5E26E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:0a:85:85:96:11:ad:c4:9a:70:97:1e:64:
                    a4:b5:b4:a4:31:5f:1d:4c:5f:1f:9b:b7:b4:9e:74:
                    f8:8a:af:0b:8f:cb:f9:cf:bc:4c:9c:78:67:d0:33:
                    35:e1:00:6e:38:61:8a:6f:74:7e:fb:ea:aa:a2:72:
                    72:05:e1:30:92:a8:53:ad:70:dd:cd:91:c9:6e:5f:
                    0e:1e:fa:9a:da:8b:0d:01:46:86:90:0a:c7:2e:08:
                    29:4e:90:36:05:56:10:7b:5f:f4:1d:85:1d:5d:9d:
                    3a:c4:fc:43:b5:e5:e9:27:3e:26:2f:8c:3d:c1:cd:
                    63:15:92:37:70:e4:7e:93:b5:71:5b:01:27:e0:5a:
                    61:0f:a8:2f:27:b1:af:d5:71:e5:1c:86:4c:3b:79:
                    16:91:43:62:ae:ff:70:59:2b:9c:bc:b0:2c:b5:70:
                    4f:d8:17:3a:4a:58:fc:fc:5f:5f:1c:e8:39:10:cd:
                    30:68:f7:5f:68:0f:d0:09:2c:5e:93:64:b3:36:16:
                    ed:72:10:06:8e:67:62:e0:cd:1d:60:da:a2:2c:09:
                    ab:f9:38:ec:f4:8a:b1:68:95:6d:49:80:ba:c2:d2:
                    1b:4b:c5:65:46:9b:91:60:9e:4d:69:fe:be:64:58:
                    11:4e:de:49:b5:9e:f4:be:c8:ff:02:d0:35:30:1e:
                    03:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F7:4D:7E:51:4F:E8:1E:39:18:63:4B:6B:7A:14:1A:B5:E2:6E:2C
            X509v3 Authority Key Identifier:
                keyid:51:2F:C9:A3:06:6D:2E:0C:29:4F:0E:00:1A:94:F2:F0:AE:D7:27:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/512FC9A3066D2E0C294F0E001A94F2F0AED7270C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6CB5131E6E9F62855DC0EC50655CD810DD985ABBBFFBF4F0C653795F214ED99/0/3139302e3231322e3132382e302f31372d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.212.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         87:cd:86:e2:35:61:d5:ce:14:9e:72:0f:d8:e5:bc:41:ae:36:
         65:68:22:2c:9d:3f:dc:7b:22:18:bc:56:4a:05:03:e3:4d:41:
         21:ff:72:4b:f8:97:0e:2e:92:d2:fd:47:ce:4d:9a:ca:50:d3:
         ee:9c:cd:bb:47:d0:d4:81:51:07:5b:a4:2c:26:75:96:8c:a5:
         d6:17:9f:84:6a:5c:5c:c3:fe:36:02:8f:f3:71:0b:05:86:f3:
         1f:be:84:9b:0b:4a:1f:c4:bf:db:cf:28:c4:8c:b5:56:88:72:
         83:9c:4f:3f:b3:6c:2b:95:14:43:46:24:2c:0b:e0:e5:6f:b5:
         4d:b1:25:8d:b3:d8:35:12:2d:85:8c:81:36:cf:2c:2c:e4:bc:
         39:a2:0d:2e:77:ee:70:b4:6b:69:de:32:43:5e:1e:e2:bd:86:
         44:84:57:3f:4d:4f:d4:35:6b:68:5b:a3:36:65:09:88:32:20:
         0f:75:c9:c3:4a:4c:6c:98:82:3d:91:75:ad:f0:db:06:f3:43:
         01:98:a0:61:37:2b:9a:3d:7e:fc:78:79:b9:56:a4:26:f9:46:
         64:f4:13:f3:b5:6a:0e:07:b3:43:1d:e6:59:64:87:94:ee:00:
         ed:f2:80:54:a9:18:94:ba:0b:28:8c:bc:96:e4:d2:ec:8b:f0:
         3a:26:69:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:24:05 2026 by rpki-client