This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131332e302f32342d3234203d3e20323632323334.roa
File:                     3139302e3138352e3131332e302f32342d3234203d3e20323632323334.roa (raw, json)
Hash identifier:          3kuWCMX2OE+Kh9cb6dXc12ZnO8kGNmlGk6X4Ti9faTE=
Subject key identifier:   D2:32:8A:17:3E:09:33:0B:BE:AC:47:36:6F:4C:11:73:0D:0A:0A:1F
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       52DF5EDEC439DE0435FBC4E67BD7634C417BC42D
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131332e302f32342d3234203d3e20323632323334.roa
Signing time:             Tue 06 Jan 2026 19:06:33 +0000
ROA not before:           Tue 06 Jan 2026 19:01:33 +0000
ROA not after:            Tue 05 Jan 2027 19:06:33 +0000
asID:                     262234
IP address blocks:        190.185.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl
                          rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:df:5e:de:c4:39:de:04:35:fb:c4:e6:7b:d7:63:4c:41:7b:c4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Jan  6 19:01:33 2026 GMT
            Not After : Jan  5 19:06:33 2027 GMT
        Subject: CN=D2328A173E09330BBEAC47366F4C11730D0A0A1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0d:8c:67:63:97:e2:b7:01:06:e2:79:4c:a6:
                    37:28:5a:54:b2:37:aa:75:31:c4:1d:1d:ac:6a:02:
                    9d:a9:27:25:36:48:7a:8d:25:5d:c0:01:75:4b:51:
                    f0:42:dc:f1:64:79:dc:96:cc:ee:55:b4:42:fe:dd:
                    63:1d:87:61:13:7f:a2:ce:55:f0:1f:8b:b0:b4:aa:
                    a4:19:79:37:11:b4:44:90:9b:2d:76:4c:9d:ab:f5:
                    b8:fa:a6:d5:5d:2c:f1:cb:65:5d:c4:52:f6:c0:a0:
                    0f:65:01:00:f2:4a:0e:eb:69:bb:ad:4f:fe:cb:cb:
                    48:55:45:2d:32:24:75:72:1a:1a:bb:f0:7a:07:70:
                    98:77:d3:ad:d6:90:bb:41:f6:5e:6a:d5:1a:8c:0c:
                    bb:da:d7:bc:14:24:f7:60:10:77:92:97:b3:6f:39:
                    cc:5b:bc:db:2b:82:16:3d:f6:98:43:2c:12:4d:7a:
                    16:b7:c9:14:9d:25:ac:d2:f3:9a:f0:c0:fb:92:ed:
                    6c:5c:2e:ca:3f:38:be:7f:de:0f:0a:a6:f8:a7:f8:
                    e7:4f:69:5c:68:0e:fd:8f:79:31:cb:b1:e6:24:19:
                    d6:21:13:3f:99:c7:5b:6b:04:44:4b:88:42:a8:46:
                    54:e6:d4:b5:1c:81:61:c5:0e:f4:77:80:8c:2e:c9:
                    4c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:32:8A:17:3E:09:33:0B:BE:AC:47:36:6F:4C:11:73:0D:0A:0A:1F
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131332e302f32342d3234203d3e20323632323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a3:4e:28:ed:d0:b2:2a:07:3f:ab:20:fb:b5:3f:6f:06:8a:
         14:1f:42:22:74:40:e8:9f:24:cf:d8:f5:31:c9:e3:d9:3b:2c:
         3e:51:3b:db:87:be:2b:58:04:bb:d1:15:6c:fd:af:51:a3:03:
         bf:ef:89:d3:6f:43:59:00:f7:87:55:63:f4:af:39:31:65:d5:
         8b:ae:45:05:7d:df:51:19:42:89:e1:07:bd:30:fd:c7:77:aa:
         ea:68:27:8d:1b:4d:65:37:d7:c9:17:a1:8b:99:6d:1c:7a:84:
         6f:c9:3e:ac:26:34:4f:8f:69:11:ec:d2:18:b0:0e:9f:5a:97:
         b9:da:56:6a:79:e8:4c:2d:48:60:d2:89:be:e1:a5:4f:00:53:
         f4:4f:03:f9:f0:66:b5:01:02:08:cc:25:d5:59:e5:bf:14:bd:
         dd:21:78:ff:2a:d1:81:71:00:a8:92:7f:d4:21:a0:96:bd:29:
         6f:7b:36:58:20:0a:84:c4:c2:f0:12:d5:a4:2e:51:c5:e4:0f:
         5e:a9:44:fb:e4:74:74:4a:6b:8f:27:41:2c:07:1e:aa:23:85:
         0c:9e:03:a0:0b:b5:95:1e:a3:31:aa:3b:05:2f:e1:2d:4a:db:
         87:d4:7a:22:be:24:1f:c5:84:fa:92:12:4d:4c:97:6e:16:ee:
         0c:5e:69:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 11:22:07 2026 by rpki-client