This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/3139302e3131322e34302e302f32322d3234203d3e203532333137.roa
File:                     3139302e3131322e34302e302f32322d3234203d3e203532333137.roa (raw, json)
Hash identifier:          FNeT4kgS8Hum4WjWfvh/AX7B8qmZmyinoCSADVq0Sbk=
Subject key identifier:   A5:A7:6A:AF:59:F5:01:DB:5D:D1:E9:11:85:81:FD:49:DC:29:96:D7
Certificate issuer:       /CN=0FBC927625F02776A16169AB038AD9EB0A4689E3
Certificate serial:       62EB1E141C0D345FA7FB937F08E6D040EE17FC32
Authority key identifier: 0F:BC:92:76:25:F0:27:76:A1:61:69:AB:03:8A:D9:EB:0A:46:89:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/3139302e3131322e34302e302f32322d3234203d3e203532333137.roa
Signing time:             Tue 06 Jan 2026 19:16:18 +0000
ROA not before:           Tue 06 Jan 2026 19:11:18 +0000
ROA not after:            Tue 05 Jan 2027 19:16:18 +0000
asID:                     52317
IP address blocks:        190.112.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 15:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:eb:1e:14:1c:0d:34:5f:a7:fb:93:7f:08:e6:d0:40:ee:17:fc:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FBC927625F02776A16169AB038AD9EB0A4689E3
        Validity
            Not Before: Jan  6 19:11:18 2026 GMT
            Not After : Jan  5 19:16:18 2027 GMT
        Subject: CN=A5A76AAF59F501DB5DD1E9118581FD49DC2996D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:42:77:f5:a5:25:f4:19:7e:27:51:df:eb:8b:
                    3c:3f:38:07:3d:63:c6:91:fc:5e:cd:9a:e2:1b:ea:
                    98:c4:25:e9:f3:7b:75:34:47:66:fa:42:91:7f:db:
                    a4:d8:a5:0e:a7:b0:f8:60:2b:b8:a4:f6:80:ed:f3:
                    16:b8:8a:e2:f8:7d:6f:fb:29:4c:65:8c:83:c6:00:
                    e2:c6:ef:ad:07:51:f1:eb:5f:f2:76:6a:eb:10:13:
                    c4:a7:2c:8c:86:9b:74:b9:a7:93:5d:1e:95:f6:d9:
                    3d:29:ac:fb:d2:75:3a:ff:02:df:51:cf:4c:cb:ab:
                    ce:37:c5:7f:8c:07:77:a0:0c:38:44:79:ef:cc:91:
                    69:92:90:a0:50:4b:b9:e4:6c:69:cc:45:e2:67:b5:
                    61:43:5c:08:bb:77:e8:13:c2:6b:dc:c4:a6:74:bf:
                    ac:7b:91:3b:fa:06:2b:40:0c:5b:0c:df:69:1d:df:
                    ae:30:0a:35:ec:b8:17:b3:e3:3c:13:8d:14:ab:06:
                    ce:a4:d6:34:99:14:0f:c2:0a:56:e4:bf:4b:37:4a:
                    35:a7:d1:13:bd:ce:d1:8f:7f:5a:64:69:a1:03:be:
                    39:7c:ea:cd:d6:71:6e:76:36:fc:d6:04:d4:46:d9:
                    a7:6a:db:6b:ee:5e:58:49:57:4b:89:4e:ad:f5:c9:
                    6c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A7:6A:AF:59:F5:01:DB:5D:D1:E9:11:85:81:FD:49:DC:29:96:D7
            X509v3 Authority Key Identifier:
                keyid:0F:BC:92:76:25:F0:27:76:A1:61:69:AB:03:8A:D9:EB:0A:46:89:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FBC927625F02776A16169AB038AD9EB0A4689E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F65352287F31C0C6D7842B307D391E2F5915984CCCED23341816373425D0F3D7/0/3139302e3131322e34302e302f32322d3234203d3e203532333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:ae:b7:4a:1d:61:d5:a5:ab:0d:95:24:97:0c:a9:b8:1a:42:
         f7:6b:0d:94:0b:cf:13:c4:19:12:48:b5:d2:c9:71:ce:c2:ec:
         13:5f:c4:92:00:96:c2:c5:11:e9:19:84:49:db:0b:e6:31:ba:
         93:06:e8:d2:35:56:e5:1f:d7:44:7f:96:53:bd:dd:57:25:25:
         8a:35:fc:1e:1e:ad:97:bf:3b:4e:bb:85:f0:f8:82:e8:c9:eb:
         4a:a9:29:9d:bb:4a:b0:6f:f8:11:dc:a8:f0:4b:0b:70:fa:8a:
         38:f7:29:93:80:7d:56:09:f1:34:4a:97:34:48:54:9b:8a:57:
         af:c0:10:d3:de:86:8c:cc:c8:de:8b:1a:ef:13:61:4d:58:6b:
         34:03:49:72:77:14:88:0d:27:a2:3f:1a:cb:33:ae:25:ab:8d:
         65:b0:ce:7d:ac:44:19:f6:ca:0b:cd:8e:5d:d3:3e:c2:02:15:
         2e:90:12:b7:18:3e:58:d2:8b:0b:95:ab:29:bc:fe:71:a1:0d:
         f5:18:39:51:58:d6:71:0a:a9:42:8f:33:9f:1f:be:5b:30:21:
         96:dd:74:64:48:93:3a:dc:b6:63:09:48:b9:c5:a1:65:e6:96:
         9a:09:cd:b5:4c:f3:30:6e:43:32:60:4a:fd:8b:4d:7f:d6:4b:
         fa:7b:ab:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:55 2026 by rpki-client