This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3139342e302f32332d3234203d3e203131303134.roa
File:                     3139302e3130342e3139342e302f32332d3234203d3e203131303134.roa (raw, json)
Hash identifier:          t2LRy9HdwGrdKTzJG14BZ3H9gQSr5A2WvUtsIZnqqNo=
Subject key identifier:   37:1E:39:D6:42:2F:7D:4F:55:7B:34:D7:44:8E:34:E9:FA:99:31:EE
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       19FD2CF90575152223E6894ED084C19A1B6CAE77
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3139342e302f32332d3234203d3e203131303134.roa
Signing time:             Tue 06 Jan 2026 19:20:18 +0000
ROA not before:           Tue 06 Jan 2026 19:15:18 +0000
ROA not after:            Tue 05 Jan 2027 19:20:18 +0000
asID:                     11014
IP address blocks:        190.104.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 06:27:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fd:2c:f9:05:75:15:22:23:e6:89:4e:d0:84:c1:9a:1b:6c:ae:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Jan  6 19:15:18 2026 GMT
            Not After : Jan  5 19:20:18 2027 GMT
        Subject: CN=371E39D6422F7D4F557B34D7448E34E9FA9931EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:51:a7:58:f7:cd:d9:cc:e4:4d:66:a1:37:9f:
                    91:fc:64:e3:d6:3f:55:ff:f5:ae:52:4a:f2:d4:f3:
                    34:24:7d:ea:11:94:31:f6:be:d6:6f:34:75:95:a9:
                    5a:1a:e9:aa:20:75:78:ed:0f:ff:68:99:76:50:fb:
                    20:99:6d:f3:51:17:84:d5:d7:83:ef:cf:42:d4:b0:
                    a8:f0:bd:e1:af:06:df:74:be:a1:7d:d2:1b:1e:75:
                    ea:2c:a2:81:85:6e:95:b1:c5:7b:f2:b6:fa:97:26:
                    97:f6:27:b3:9b:91:db:32:7d:70:6e:12:79:24:2e:
                    7a:62:9d:64:71:0d:57:85:20:de:a3:ec:6b:bb:ca:
                    65:d9:83:8f:cd:6f:44:12:17:f2:8f:14:c0:41:e4:
                    5c:73:16:d2:41:57:c4:e9:18:b1:86:b7:2a:9a:b4:
                    04:6a:cd:c5:fe:48:80:92:dd:72:fe:98:61:3d:e1:
                    99:99:9e:42:c2:52:75:e2:1b:88:23:5c:99:65:24:
                    02:17:27:9c:d7:2e:3a:ae:00:ab:17:05:f9:7a:c5:
                    a0:5b:6e:7e:40:3c:29:14:62:d0:51:36:9b:9c:f5:
                    a1:b3:87:9e:2d:2d:1d:71:ab:f9:af:c2:ec:5f:82:
                    8a:92:a4:76:10:17:e2:2b:32:d6:42:e9:53:58:54:
                    50:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1E:39:D6:42:2F:7D:4F:55:7B:34:D7:44:8E:34:E9:FA:99:31:EE
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3139342e302f32332d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:ac:9e:35:d5:33:c1:c2:f8:95:52:43:01:78:da:e9:8b:c5:
         6d:e7:8c:43:1c:ec:fd:31:d1:41:67:ab:86:a4:48:ef:6e:a7:
         71:f2:32:3b:8f:83:a4:83:db:f3:62:76:c3:1c:c5:fa:1b:bc:
         55:32:c1:47:05:c8:28:3d:96:43:78:1c:e4:e3:b3:19:27:ec:
         ec:be:47:96:af:98:4a:ab:21:af:74:55:50:2d:89:f4:f0:f7:
         d0:50:83:62:e5:e4:ed:95:df:04:02:b9:d7:cb:19:9e:0e:38:
         dd:95:5f:7b:e9:5a:97:bd:86:83:45:0c:6a:6a:b9:78:e7:76:
         22:73:74:ed:d9:51:d4:ce:35:63:b0:1e:81:c1:39:56:0e:95:
         5b:02:92:bd:c1:0a:0f:b2:31:50:cf:f2:8a:f2:2e:44:af:c6:
         2c:7b:fc:b5:4e:59:ca:25:5b:02:94:29:db:0d:4b:0a:12:44:
         43:81:75:4b:a0:42:7e:c1:da:9c:f0:d3:af:91:b2:34:e6:a2:
         92:36:54:d1:a4:f6:2a:a1:ae:60:f1:e8:be:a2:f0:f2:ce:8f:
         6f:19:f3:27:25:42:59:4b:a6:03:3c:59:7e:eb:8a:26:dd:b7:
         02:34:49:d0:95:12:f6:9f:ec:38:21:a7:46:46:7a:da:60:e8:
         1a:cc:78:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 23:48:33 2026 by rpki-client