This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231332e302f32342d3234203d3e203630303232.roa
File:                     3139302e3132312e3231332e302f32342d3234203d3e203630303232.roa (raw, json)
Hash identifier:          wtLEDTR9CF5C1IdtEAKdXTDdWcT/urF7DToyP6NcNQs=
Subject key identifier:   25:D3:DA:B8:AA:F1:49:67:B9:89:29:35:D1:13:D7:E5:61:B5:E6:1A
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       47FEE1B4B4DB0933173B2DBA993923F41A38D6FD
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231332e302f32342d3234203d3e203630303232.roa
Signing time:             Tue 06 Jan 2026 20:51:31 +0000
ROA not before:           Tue 06 Jan 2026 20:46:31 +0000
ROA not after:            Tue 05 Jan 2027 20:51:31 +0000
asID:                     60022
IP address blocks:        190.121.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 23 Jan 2026 01:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:fe:e1:b4:b4:db:09:33:17:3b:2d:ba:99:39:23:f4:1a:38:d6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Jan  6 20:46:31 2026 GMT
            Not After : Jan  5 20:51:31 2027 GMT
        Subject: CN=25D3DAB8AAF14967B9892935D113D7E561B5E61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1e:9a:84:24:73:05:7d:b7:25:b5:53:71:a5:
                    37:6a:39:d6:31:04:45:6a:13:21:82:f9:95:19:9f:
                    84:02:c3:28:88:9c:69:f7:40:df:2c:80:bb:c3:0f:
                    fa:3f:38:5c:0a:74:11:2a:d0:b8:c4:05:53:9c:16:
                    83:4d:00:46:dc:76:3b:16:08:50:60:e1:12:08:97:
                    6b:ca:d3:db:f7:74:14:77:9b:ad:30:f9:ac:2d:e3:
                    bc:86:1d:17:35:d0:9d:51:6a:9c:49:b0:7b:08:ab:
                    4b:3f:37:23:d3:91:ed:1d:ad:16:63:3b:16:18:17:
                    87:a1:2d:2e:b9:ef:08:a2:25:04:29:16:7a:fe:86:
                    71:a9:ee:cf:78:4e:7f:2b:a9:ef:20:21:d2:fd:83:
                    37:59:b0:47:9e:78:fe:bf:db:41:ed:93:12:5d:f0:
                    a1:ef:d0:b1:1c:1a:8b:8b:cd:4d:ff:05:8b:dc:5d:
                    1f:ff:04:33:57:6b:61:f4:0b:b2:f0:21:11:7a:6e:
                    f6:f7:11:56:f5:b3:32:e4:8b:4d:6a:93:52:49:2a:
                    72:b1:89:d0:f2:c0:f7:bf:71:f7:c5:9e:9e:60:68:
                    41:8d:b5:a0:c2:b9:c7:ee:64:85:a3:65:44:f7:37:
                    3d:97:23:aa:b8:1a:46:ed:2a:0e:00:57:bb:65:9c:
                    03:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D3:DA:B8:AA:F1:49:67:B9:89:29:35:D1:13:D7:E5:61:B5:E6:1A
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231332e302f32342d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:61:99:9d:eb:db:67:88:54:72:9b:ff:31:3e:61:bb:8a:23:
         1e:83:00:38:74:b1:eb:73:8c:fa:be:9f:d6:30:00:1e:11:a6:
         ff:59:2b:87:5c:37:e0:df:b3:70:94:44:3a:c4:24:65:d7:31:
         b8:ab:e5:1c:2e:e4:24:28:1c:a2:f5:a7:03:84:b9:80:3f:f9:
         35:f9:2a:45:3c:fb:f4:a0:f8:dc:28:cf:60:c3:af:52:f9:f8:
         f4:7a:be:cd:dc:54:16:b5:09:0f:b4:d5:bb:38:58:71:3e:fa:
         27:30:3f:01:11:f7:5a:a0:7a:26:1d:a8:0e:37:db:0b:be:b5:
         2c:de:19:ba:1c:20:22:10:3f:24:2f:41:f8:93:42:b6:91:8d:
         91:c6:2a:82:e5:e6:20:11:d0:e7:30:58:3a:69:d6:31:f1:8e:
         2b:1d:ab:c0:2c:81:2f:d9:02:49:26:78:03:20:84:a3:44:e5:
         58:81:5a:99:3a:7b:f9:44:b6:63:8f:91:8e:af:2c:00:94:04:
         86:8f:ad:e3:a7:fa:e4:5d:78:50:36:ef:72:36:a9:b2:5f:db:
         a4:45:d6:6c:d7:57:c0:a8:fc:bb:0e:04:48:6f:64:f3:f0:a2:
         7c:98:00:d4:ea:19:5e:af:68:c9:86:26:d3:4d:98:d0:42:5f:
         af:32:1b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 21:03:56 2026 by rpki-client