This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3139322e302f32312d3234203d3e203232333638.roa
File:                     3139302e39362e3139322e302f32312d3234203d3e203232333638.roa (raw, json)
Hash identifier:          YgcQTjaB0x1QoPlPENj8/TZPtddTt2PrKU57GMr2MnE=
Subject key identifier:   2E:F4:27:F3:C0:8E:34:09:6A:C5:99:7C:00:38:37:7A:B6:30:FF:47
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       60B2E663A8E6C4BBB0616CC8FC4A05E6400652A2
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3139322e302f32312d3234203d3e203232333638.roa
Signing time:             Tue 06 Jan 2026 19:17:58 +0000
ROA not before:           Tue 06 Jan 2026 19:12:58 +0000
ROA not after:            Tue 05 Jan 2027 19:17:58 +0000
asID:                     22368
IP address blocks:        190.96.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 21:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b2:e6:63:a8:e6:c4:bb:b0:61:6c:c8:fc:4a:05:e6:40:06:52:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jan  6 19:12:58 2026 GMT
            Not After : Jan  5 19:17:58 2027 GMT
        Subject: CN=2EF427F3C08E34096AC5997C0038377AB630FF47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:96:59:75:35:a3:12:c2:8a:cf:0a:97:68:
                    17:b2:46:3f:1f:91:61:57:d3:ee:36:1a:f8:40:ef:
                    f4:87:4b:f5:bf:d4:86:e7:b6:bb:17:dc:0c:3d:8b:
                    d3:b6:39:65:20:bf:56:38:bf:4c:a7:26:22:be:94:
                    05:d5:98:81:e0:5f:3d:de:05:9f:13:a6:3a:e4:3d:
                    42:3e:e7:34:c7:3d:bf:b0:99:a0:c2:36:54:c9:c9:
                    89:4e:a1:bc:6f:54:84:3d:b3:ef:5d:f7:8c:f0:3d:
                    c8:2a:1f:ae:63:fe:cd:5f:9f:8a:64:e9:1c:01:86:
                    45:18:31:8a:16:7d:1e:25:ee:d5:09:d1:58:f7:59:
                    40:36:a8:17:be:8e:10:e4:fb:9a:6c:92:80:ad:0e:
                    53:96:2c:7a:4f:75:43:ce:b7:87:18:8f:5f:59:2e:
                    d4:03:9d:8b:d0:9a:19:fb:b6:7a:e3:62:65:dd:db:
                    c8:c4:52:61:d7:9e:e7:fb:e9:a4:0d:b9:57:85:3d:
                    16:40:74:b8:12:e7:6d:d5:71:6e:29:d8:d2:00:8c:
                    a0:f2:93:46:04:af:ec:5e:f4:78:be:77:4a:c7:07:
                    22:ce:2b:28:2d:de:1b:5a:07:e1:d6:6e:22:cf:8b:
                    8c:c8:66:07:22:0c:ce:d2:7a:d0:a3:f0:29:12:27:
                    c2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F4:27:F3:C0:8E:34:09:6A:C5:99:7C:00:38:37:7A:B6:30:FF:47
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3139322e302f32312d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:b4:c0:c8:fb:1a:56:b1:3a:68:41:55:8c:5e:fa:8f:f2:14:
         c7:6d:ca:1b:f2:a4:61:76:d1:72:d3:6f:d8:dc:da:04:c9:4d:
         d7:4c:0b:44:c0:f4:77:a8:4a:9f:27:14:ee:a9:10:08:54:36:
         10:45:24:0f:8e:e3:dd:1d:be:46:64:16:22:b8:4a:c7:8c:95:
         b4:d9:53:05:05:4d:6f:c6:d1:a4:82:be:4d:d2:b3:07:56:b3:
         74:77:a3:ed:ce:2b:b3:83:fd:3c:72:9f:18:32:9e:3a:04:32:
         3e:b1:49:bc:8a:06:41:7e:ff:00:44:d7:78:bb:fc:e4:54:69:
         9e:bd:60:59:a2:90:01:c0:f8:c9:e0:24:9a:3d:0e:4c:96:78:
         66:18:0e:4d:6e:07:b6:f2:42:2e:85:43:d5:5e:0d:77:41:41:
         ee:c7:cd:dc:0a:1c:70:df:f4:d3:15:70:a6:a4:bc:80:0e:85:
         d6:4e:09:0a:67:57:43:06:1a:e0:92:2a:99:84:a6:67:85:24:
         fe:fc:1a:bc:4b:3a:73:b2:ae:1d:52:51:86:d6:4f:1a:d4:fe:
         51:75:fc:c4:16:6c:25:32:1e:bd:e2:d9:01:84:a6:9a:15:de:
         64:58:55:6c:17:54:cf:cb:ba:16:69:e9:2e:6a:63:b7:e1:d8:
         05:29:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:16:02 2026 by rpki-client