This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/3139302e35372e3139322e302f31392d3234203d3e203139383839.roa
File:                     3139302e35372e3139322e302f31392d3234203d3e203139383839.roa (raw, json)
Hash identifier:          A+Jv6sDyR/P//7bUvXw5Yzssxfkq08XKgFYurQkUNjI=
Subject key identifier:   B4:17:CA:70:90:89:49:30:5A:F8:05:4D:F2:67:DD:86:69:52:BE:4F
Certificate issuer:       /CN=AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB
Certificate serial:       6E5D9C82839B3E32E37E0DFAE92B37C2D4E3A5DB
Authority key identifier: AB:6F:C2:B3:BE:D1:DA:F0:5E:7F:5D:F4:45:D0:88:BB:39:64:58:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/3139302e35372e3139322e302f31392d3234203d3e203139383839.roa
Signing time:             Tue 06 Jan 2026 20:57:03 +0000
ROA not before:           Tue 06 Jan 2026 20:52:03 +0000
ROA not after:            Tue 05 Jan 2027 20:57:03 +0000
asID:                     19889
IP address blocks:        190.57.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 03:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5d:9c:82:83:9b:3e:32:e3:7e:0d:fa:e9:2b:37:c2:d4:e3:a5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB
        Validity
            Not Before: Jan  6 20:52:03 2026 GMT
            Not After : Jan  5 20:57:03 2027 GMT
        Subject: CN=B417CA70908949305AF8054DF267DD866952BE4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:6f:68:c0:ea:d6:d1:ad:24:a0:1b:a2:af:
                    a9:8c:fe:f5:1c:0d:d7:26:7a:6c:c3:b4:e9:bc:a7:
                    08:e5:78:9c:7f:0e:39:45:f0:8a:db:d1:9f:5a:cd:
                    9f:c9:1b:9c:eb:12:cb:4d:5f:95:d2:eb:42:75:15:
                    17:dc:d7:a1:89:ee:4a:26:b8:be:b0:30:c0:df:ff:
                    f0:2d:2f:18:72:ac:92:19:7a:fd:7f:10:4c:9c:69:
                    4d:f7:0f:eb:eb:3c:e6:84:87:d2:ea:ca:e4:73:c5:
                    61:85:62:09:b1:1a:fc:f4:dd:f3:1b:f7:7e:28:dc:
                    6c:c7:0b:8b:63:2e:e1:7b:aa:2f:fe:a4:c6:46:08:
                    de:c0:e2:8f:93:d1:91:2d:73:4d:4e:b5:ed:77:2c:
                    48:59:7a:fd:94:20:ad:c8:bb:5a:0f:3f:b3:2f:d8:
                    d1:a5:a1:59:d5:4c:a9:8d:ce:71:45:80:c8:90:91:
                    d3:af:80:89:0e:a8:00:a4:7b:f7:2e:c7:40:d9:d1:
                    36:bc:4b:4d:0d:bd:df:f5:39:ee:98:7d:e2:08:d8:
                    ca:5c:02:50:40:42:5d:79:39:c5:51:06:07:84:fe:
                    14:de:2d:5a:c2:52:62:57:2d:47:6d:b4:5f:db:c2:
                    9d:21:e6:54:2e:b4:97:06:4f:fc:e2:47:e8:80:6d:
                    e2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:17:CA:70:90:89:49:30:5A:F8:05:4D:F2:67:DD:86:69:52:BE:4F
            X509v3 Authority Key Identifier:
                keyid:AB:6F:C2:B3:BE:D1:DA:F0:5E:7F:5D:F4:45:D0:88:BB:39:64:58:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/3139302e35372e3139322e302f31392d3234203d3e203139383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a3:25:97:e6:47:aa:96:ae:f8:04:d6:e1:df:a5:8e:ec:e3:c7:
         a9:b7:6d:11:d3:17:bb:04:ba:91:e2:fe:c9:e3:eb:45:2f:70:
         54:24:f9:79:15:54:d1:b4:78:22:27:f8:67:f2:3e:02:fe:27:
         3b:07:3c:d7:34:1a:e6:fc:4e:01:44:94:fd:cd:bc:18:5e:cc:
         07:00:66:aa:80:3d:ae:aa:cd:67:2c:32:a3:10:c3:80:80:25:
         d9:7c:15:b7:f0:0f:12:b7:af:89:90:0f:bb:d6:b7:88:0c:d7:
         ed:da:2a:33:21:db:2c:5e:90:c1:9f:a4:a2:4c:8c:47:23:c7:
         38:8b:e1:15:d8:96:a2:55:bd:a8:d1:b2:ac:98:56:f8:10:9f:
         a2:72:20:66:d9:1c:a5:77:4f:6d:27:35:c8:23:af:c8:3f:a5:
         6b:1c:99:e4:16:b9:e0:27:0a:e9:0d:bc:93:cc:00:ff:b3:b0:
         f5:6d:0d:c9:fa:e6:a1:21:18:dd:4e:9c:53:ab:ce:89:0d:ff:
         5c:52:48:7b:81:e7:62:e0:0e:eb:7f:f6:fc:cd:69:ce:1e:b5:
         da:cb:11:2b:89:f1:bc:16:d7:44:d1:a9:b4:05:cb:6c:6f:b4:
         07:8e:28:51:6b:7c:fd:2e:04:c9:aa:aa:af:98:71:8c:3e:b8:
         08:e2:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:28:32 2026 by rpki-client