This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3234203d3e203532323733.roa
File:                     3139302e3131322e33322e302f32312d3234203d3e203532323733.roa (raw, json)
Hash identifier:          f1xfXsRox+34YqYLsccB4anhbqM63buz4xJKLuWHGUI=
Subject key identifier:   CB:31:5E:FA:55:E4:61:57:8B:40:49:EB:48:4F:14:0F:D0:41:6C:55
Certificate issuer:       /CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
Certificate serial:       2C15D14430951C35E4845669A94F4329987B8FEE
Authority key identifier: 9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3234203d3e203532323733.roa
Signing time:             Tue 06 Jan 2026 19:40:40 +0000
ROA not before:           Tue 06 Jan 2026 19:35:40 +0000
ROA not after:            Tue 05 Jan 2027 19:40:40 +0000
asID:                     52273
IP address blocks:        190.112.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:15:d1:44:30:95:1c:35:e4:84:56:69:a9:4f:43:29:98:7b:8f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F
        Validity
            Not Before: Jan  6 19:35:40 2026 GMT
            Not After : Jan  5 19:40:40 2027 GMT
        Subject: CN=CB315EFA55E461578B4049EB484F140FD0416C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:dc:f1:67:04:38:78:a2:65:69:c8:a3:29:
                    0e:db:06:a2:74:f1:a8:48:13:5f:88:7d:db:17:b4:
                    bd:f3:25:08:e0:a6:c5:da:39:51:e0:64:16:52:73:
                    3f:c9:aa:9e:2c:6a:44:b6:ee:7a:e9:f2:d5:a0:7f:
                    cd:23:09:d2:f8:df:19:86:53:a7:be:ce:7f:0b:26:
                    b0:fd:69:8e:9f:3e:c9:84:bb:4f:1e:fc:6a:3d:20:
                    18:0b:65:e5:3b:80:fa:b1:f2:68:03:78:ad:19:66:
                    85:78:be:c3:63:c0:e3:36:e4:b8:0f:30:20:7a:1c:
                    af:6d:9c:8f:9a:99:4e:f8:d8:b8:72:fc:99:80:7e:
                    f4:78:84:55:18:27:93:72:2c:70:cc:a3:56:25:b5:
                    2a:6c:8c:ca:3d:1b:24:6b:b8:cd:1f:c7:4b:17:7d:
                    4e:b1:e5:b7:ba:bb:89:f5:0c:36:a0:76:35:cc:e8:
                    6d:a0:ce:29:23:6d:c3:ae:df:8c:9e:49:79:d1:32:
                    a3:61:df:76:b4:5e:28:ed:78:ba:9a:2e:8d:6b:43:
                    3c:4c:70:e0:8e:37:ab:38:bb:21:0c:36:c1:0b:01:
                    5a:af:c3:fe:87:ca:5d:6b:65:98:75:b4:cb:01:b6:
                    e5:34:2d:6b:7c:4b:5a:29:12:1f:0b:88:a3:f2:c5:
                    76:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:31:5E:FA:55:E4:61:57:8B:40:49:EB:48:4F:14:0F:D0:41:6C:55
            X509v3 Authority Key Identifier:
                keyid:9F:48:5C:5C:D6:35:5E:FB:6B:DA:F1:E2:2E:74:24:D2:1A:DC:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F485C5CD6355EFB6BDAF1E22E7424D21ADC6C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3B703CE181ECF7F6FB57DCF57631196AFF0BD14D1AAA086F67972C822083B6E/0/3139302e3131322e33322e302f32312d3234203d3e203532323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:a1:e9:a2:47:65:e6:99:5c:a7:3d:85:4a:ff:8c:37:41:a3:
         4e:92:73:62:11:89:cd:d6:e5:19:1e:1e:63:91:5e:16:5c:a0:
         d9:4b:cc:fe:e3:78:86:76:f5:7f:a8:2c:8e:cd:8f:48:c3:f2:
         97:74:df:31:77:7f:f9:44:f1:5b:00:31:0e:ef:fa:ba:62:d7:
         dc:37:3c:51:eb:2b:cf:ea:99:5c:52:b8:32:55:ac:a6:e4:87:
         8d:10:a5:01:9b:52:4d:03:2e:6e:5e:a0:ba:d4:bd:cd:b2:50:
         c0:11:49:45:94:9d:82:dd:44:28:82:76:0a:2a:41:aa:be:b3:
         8c:0a:12:e4:49:03:07:ca:c7:8c:99:fb:71:94:38:cd:2f:88:
         4d:fd:81:0b:44:77:50:fb:de:89:8a:e8:01:b6:43:80:41:17:
         d8:01:5a:f7:21:e3:1a:80:e0:b6:d7:db:0e:e1:2a:1c:21:2e:
         67:b5:9f:ba:38:bd:12:74:30:f2:83:c2:39:aa:57:f3:8a:a9:
         4d:32:c0:44:6c:c7:9b:0a:98:16:6d:bc:e7:ab:47:6a:80:75:
         a1:c3:73:df:89:bf:f2:14:e6:fc:a8:b3:90:d6:7b:f5:16:1d:
         ad:a6:79:06:3d:03:57:15:e3:80:2f:5e:cb:70:57:40:fe:27:
         64:f3:df:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:47:35 2026 by rpki-client