This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132372e302f32342d3234203d3e203532333932.roa
File:                     3139302e39392e3132372e302f32342d3234203d3e203532333932.roa (raw, json)
Hash identifier:          Hw+lJEoT2A0aw52A8kCK7DlcK9SqyMv97oTk6RAKRks=
Subject key identifier:   BA:44:10:05:6D:90:59:0A:FA:91:B6:16:7D:CD:CA:EE:7F:D4:E5:B8
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       6576AFE7150DDBEDD7060C953BA2AF6FA6B51D17
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132372e302f32342d3234203d3e203532333932.roa
Signing time:             Tue 06 Jan 2026 19:17:11 +0000
ROA not before:           Tue 06 Jan 2026 19:12:11 +0000
ROA not after:            Tue 05 Jan 2027 19:17:11 +0000
asID:                     52392
IP address blocks:        190.99.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:76:af:e7:15:0d:db:ed:d7:06:0c:95:3b:a2:af:6f:a6:b5:1d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Jan  6 19:12:11 2026 GMT
            Not After : Jan  5 19:17:11 2027 GMT
        Subject: CN=BA4410056D90590AFA91B6167DCDCAEE7FD4E5B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:27:96:7b:a4:78:a5:1b:22:84:a4:c7:09:
                    e6:75:ae:78:ef:9b:ff:71:94:df:31:c9:9c:1f:8c:
                    4b:33:44:73:10:e3:8a:31:d4:00:f5:a0:86:f8:6d:
                    57:a0:d4:60:6b:fd:87:40:f6:03:55:59:92:40:97:
                    19:0e:b5:e6:95:0b:2b:2d:59:07:73:ce:86:f5:59:
                    34:ee:0a:e9:54:98:7e:a4:8a:52:68:33:36:08:35:
                    ac:6c:19:1e:54:3a:33:d3:00:90:3c:85:0d:4f:46:
                    30:75:3f:8f:05:7b:77:21:68:95:f1:f1:77:6e:ff:
                    4e:d8:fa:60:17:d3:f9:b2:b8:0a:b9:b7:92:90:fd:
                    c2:d2:19:01:13:ec:52:9f:2e:a7:74:43:08:da:f6:
                    4b:b0:83:cd:bd:fa:bb:5c:b2:cd:e8:c5:92:c4:b4:
                    97:8b:73:6b:a2:62:0f:00:62:69:6e:1d:b5:92:fb:
                    a6:0c:ca:b6:25:09:87:d9:a5:81:16:83:a4:b3:06:
                    74:30:d6:f3:8c:3c:cd:33:30:66:c4:69:3d:93:85:
                    05:67:62:9e:20:7a:75:17:ae:1e:e2:d4:1b:c4:57:
                    27:b5:78:49:c2:66:cc:b7:35:8c:07:86:61:cf:98:
                    22:0d:65:f5:b0:67:04:d2:25:81:46:9c:ad:93:86:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:44:10:05:6D:90:59:0A:FA:91:B6:16:7D:CD:CA:EE:7F:D4:E5:B8
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132372e302f32342d3234203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b1:92:2c:37:26:e7:ee:c4:12:bc:ad:98:a9:43:95:11:ab:
         87:78:a4:c3:60:ea:a7:2d:7c:c6:e5:e2:a8:be:59:21:b0:a3:
         33:43:45:a0:ab:f5:5b:a1:e5:b2:49:a5:73:11:4b:14:de:cd:
         88:d3:5f:ab:96:f3:41:ae:bc:55:0d:ba:80:19:03:ce:b4:06:
         0b:0f:b4:6f:73:da:72:8a:ae:fc:fb:b2:d1:78:96:ff:8f:88:
         e9:47:6b:24:f5:5b:86:df:c4:5f:bc:9a:42:13:3d:30:8f:5b:
         17:6b:d5:45:90:63:64:07:e6:0f:24:07:49:eb:6c:6a:e9:f6:
         0f:1e:bf:6d:10:ea:6c:75:f3:51:d5:a2:df:23:0e:f6:ef:7b:
         7a:5f:56:30:41:b6:dc:50:48:80:de:0d:27:3a:e6:3c:6d:4b:
         08:0f:a5:bf:d3:0a:d6:bd:56:5f:74:b8:0b:de:a3:5d:d2:f2:
         c8:f2:00:86:7c:2b:8f:e8:c2:0f:28:90:8e:cf:86:3a:44:45:
         e3:e7:f1:64:d2:b0:71:23:5c:6d:ee:58:10:62:cd:9e:64:5a:
         c4:59:40:71:00:89:a3:b4:cf:07:51:b6:87:a1:ab:fa:59:98:
         9d:7e:4e:fd:99:f9:72:2f:e6:b7:25:0e:a6:fb:6a:c0:64:c2:
         7e:00:03:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:03:16 2026 by rpki-client