This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3232342e302f31392d3231203d3e2033383136.roa
File:                     3139302e39362e3232342e302f31392d3231203d3e2033383136.roa (raw, json)
Hash identifier:          6j353+g0NIZCaXKqPrz82pLVSn8qdkUKwOw5pFFCE1E=
Subject key identifier:   0D:25:1C:1C:2D:BA:D4:EB:78:C0:04:0D:99:09:F7:96:AA:0C:9C:8C
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       30EE462B4187B8939E268045D73B5C1E13903586
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3232342e302f31392d3231203d3e2033383136.roa
Signing time:             Tue 06 Jan 2026 19:18:00 +0000
ROA not before:           Tue 06 Jan 2026 19:13:00 +0000
ROA not after:            Tue 05 Jan 2027 19:18:00 +0000
asID:                     3816
IP address blocks:        190.96.224.0/19 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 21:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ee:46:2b:41:87:b8:93:9e:26:80:45:d7:3b:5c:1e:13:90:35:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jan  6 19:13:00 2026 GMT
            Not After : Jan  5 19:18:00 2027 GMT
        Subject: CN=0D251C1C2DBAD4EB78C0040D9909F796AA0C9C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:57:72:5c:86:58:77:43:0f:6a:d5:27:5e:
                    ef:bb:c9:58:a1:f0:78:ac:51:1b:05:f4:fc:80:24:
                    29:3e:2b:da:2c:28:83:5f:bc:69:82:78:65:dd:86:
                    95:17:e4:bc:bd:b4:33:ac:c6:c5:33:b6:cd:1e:fa:
                    ee:a7:72:5f:5d:92:b4:c5:a6:fc:31:b6:90:66:f0:
                    49:92:16:69:18:ac:17:ff:62:d6:c6:8c:2c:64:7e:
                    8e:bc:aa:7c:4a:57:44:7d:81:4f:93:1e:e1:da:13:
                    b9:5d:24:b6:24:da:38:f6:31:51:91:a0:cf:63:e1:
                    8d:c3:3d:0d:3b:40:13:83:a3:7c:fb:53:d6:d7:e4:
                    f2:07:45:2c:a2:ee:08:64:83:56:2d:12:52:52:e0:
                    72:4c:11:2a:c9:8e:3d:8f:e7:58:03:04:6f:01:b3:
                    21:7d:20:51:90:19:c5:e0:7f:db:9c:5b:dd:0e:5f:
                    ba:56:41:bf:5e:a6:46:20:e1:4e:a1:d0:3d:b0:b4:
                    f6:6e:e0:1d:68:7f:84:bc:bf:4f:e0:ac:9c:84:6c:
                    6d:5c:e0:46:e8:30:68:ab:41:45:09:c4:2c:4f:76:
                    90:0f:80:a0:61:25:9e:99:09:2a:69:bc:18:dc:5b:
                    a1:dd:fe:7b:e9:27:65:b1:97:d8:06:9e:a7:d7:0f:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:25:1C:1C:2D:BA:D4:EB:78:C0:04:0D:99:09:F7:96:AA:0C:9C:8C
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3232342e302f31392d3231203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:30:61:67:8b:53:84:d2:f1:86:79:21:1c:71:1e:35:6b:b9:
         55:14:2c:93:1e:ba:1d:f9:ff:44:04:8f:7c:1e:47:d9:ac:fc:
         40:db:da:58:32:c0:2c:72:83:de:46:c1:ea:3a:71:e9:b0:39:
         98:20:8c:4d:21:07:2d:97:99:93:f3:07:d8:e7:b0:b7:df:6b:
         a9:36:4b:47:fe:3a:c5:60:46:05:dd:6c:ce:62:1c:7c:f1:f8:
         8e:ee:a6:20:80:48:9e:b3:d9:26:bd:47:e1:4d:8f:84:bf:69:
         52:32:29:a9:4e:6d:e5:36:1a:10:c7:cf:44:d9:94:ab:81:41:
         0c:a0:8e:30:8e:bc:4c:a3:cc:91:42:36:29:65:e2:ce:34:bf:
         b3:69:43:ee:6e:cf:5e:bc:5c:a5:f4:c9:39:0d:f4:37:01:12:
         9b:3b:b3:1d:b5:2b:b2:19:96:b5:07:80:a5:ee:b6:cf:56:58:
         9a:35:dd:f6:7e:f4:04:52:3a:e9:5b:ad:d3:46:1d:6f:41:c1:
         57:ec:42:43:9a:f8:03:1d:30:5f:43:45:22:8f:26:1e:bf:5f:
         1e:b6:1d:71:8c:2b:a5:26:c0:d8:39:1c:b0:40:d0:4d:4c:59:
         9b:fe:f2:90:ac:8f:b0:4f:05:d0:f6:0c:19:58:a5:90:79:be:
         e1:3d:18:91
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUMO5GK0GHuJOeJoBF1ztcHhOQNYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNjAxMDYxOTEzMDBaFw0yNzAxMDUxOTE4MDBaMDMxMTAvBgNV
BAMTKDBEMjUxQzFDMkRCQUQ0RUI3OEMwMDQwRDk5MDlGNzk2QUEwQzlDOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5ldyXIZYd0MPatUnXu+7yVih
8HisURsF9PyAJCk+K9osKINfvGmCeGXdhpUX5Ly9tDOsxsUzts0e+u6ncl9dkrTF
pvwxtpBm8EmSFmkYrBf/YtbGjCxkfo68qnxKV0R9gU+THuHaE7ldJLYk2jj2MVGR
oM9j4Y3DPQ07QBODo3z7U9bX5PIHRSyi7ghkg1YtElJS4HJMESrJjj2P51gDBG8B
syF9IFGQGcXgf9ucW90OX7pWQb9epkYg4U6h0D2wtPZu4B1of4S8v0/grJyEbG1c
4EboMGirQUUJxCxPdpAPgKBhJZ6ZCSppvBjcW6Hd/nvpJ2Wxl9gGnqfXD953AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUDSUcHC261Ot4wAQNmQn3lqoMnIwwHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMxMzkzMDJlMzkzNjJlMzIzMjM0MmUz
MDJmMzEzOTJkMzIzMTIwM2QzZTIwMzMzODMxMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+YOAwDQYJ
KoZIhvcNAQELBQADggEBAHYwYWeLU4TS8YZ5IRxxHjVruVUULJMeuh35/0QEj3we
R9ms/EDb2lgywCxyg95Gweo6cemwOZggjE0hBy2XmZPzB9jnsLffa6k2S0f+OsVg
RgXdbM5iHHzx+I7upiCASJ6z2Sa9R+FNj4S/aVIyKalObeU2GhDHz0TZlKuBQQyg
jjCOvEyjzJFCNill4s40v7NpQ+5uz168XKX0yTkN9DcBEps7sx21K7IZlrUHgKXu
ts9WWJo13fZ+9ARSOulbrdNGHW9BwVfsQkOa+AMdMF9DRSKPJh6/Xx62HXGMK6Um
wNg5HLBA0E1MWZv+8pCsj7BPBdD2DBlYpZB5vuE9GJE=
-----END CERTIFICATE-----
Generated at Mon Jan 12 22:15:03 2026 by rpki-client