This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/3139302e3231312e3136302e302f32312d3234203d3e20323632353839.roa
File:                     3139302e3231312e3136302e302f32312d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          EnXZOOoC/E1XMwh+kGEMqajHycSr9Y4SwcW+DZQT0FI=
Subject key identifier:   D1:B3:92:F5:F1:58:76:F5:C5:E8:DF:95:D1:93:19:8E:23:B4:2F:43
Certificate issuer:       /CN=2152913C2D5333E6F48DA45B339F5C285841364B
Certificate serial:       473A72E46490878BFC43797A16E74729F8BE991A
Authority key identifier: 21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/3139302e3231312e3136302e302f32312d3234203d3e20323632353839.roa
Signing time:             Tue 06 Jan 2026 18:57:34 +0000
ROA not before:           Tue 06 Jan 2026 18:52:34 +0000
ROA not after:            Tue 05 Jan 2027 18:57:34 +0000
asID:                     262589
IP address blocks:        190.211.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Feb 2026 16:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3a:72:e4:64:90:87:8b:fc:43:79:7a:16:e7:47:29:f8:be:99:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2152913C2D5333E6F48DA45B339F5C285841364B
        Validity
            Not Before: Jan  6 18:52:34 2026 GMT
            Not After : Jan  5 18:57:34 2027 GMT
        Subject: CN=D1B392F5F15876F5C5E8DF95D193198E23B42F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:02:96:d4:46:5e:ae:5b:93:ee:47:85:80:
                    a3:e9:78:1e:0d:e0:bf:81:0b:b5:3e:9a:e2:c4:0e:
                    38:fc:3a:ed:13:81:79:d6:c2:b0:45:00:40:25:bf:
                    f9:8b:2e:3a:4b:60:04:ae:9a:5b:75:41:6a:66:bb:
                    53:6b:4e:0d:16:f5:05:0a:16:51:66:98:93:de:68:
                    7c:50:3a:67:59:9d:45:dd:09:9c:93:dd:31:c2:36:
                    0d:77:5e:79:75:d2:0b:11:13:3c:5c:24:3a:88:17:
                    8d:97:af:03:37:4b:c3:5c:13:b2:29:4e:49:17:7b:
                    28:9e:67:df:59:8f:1e:34:35:a2:83:ef:35:3e:a2:
                    45:7f:a5:75:9e:07:0c:6d:cb:33:55:3f:be:17:df:
                    24:e3:c7:0b:a0:eb:01:99:90:01:5d:96:2c:82:58:
                    d2:2d:2c:01:35:82:6d:50:70:c6:ca:6f:40:50:16:
                    ca:24:b5:28:7d:8c:73:25:e6:35:57:b3:b0:b9:18:
                    ee:1e:0b:62:b1:41:5d:7e:52:e3:57:f7:cc:75:7c:
                    50:5a:ce:30:7f:2c:da:84:01:9f:97:81:c8:70:ad:
                    46:70:54:73:c0:4c:2a:26:d7:66:8c:06:7f:2a:e0:
                    72:cf:af:85:84:2a:e4:f5:48:d6:bd:5a:8e:85:3f:
                    38:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B3:92:F5:F1:58:76:F5:C5:E8:DF:95:D1:93:19:8E:23:B4:2F:43
            X509v3 Authority Key Identifier:
                keyid:21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/3139302e3231312e3136302e302f32312d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:fb:14:40:6e:25:d3:fa:d7:b4:99:60:40:89:65:89:51:86:
         5b:22:50:99:8f:53:20:b0:1f:48:25:0a:d8:3e:d6:da:8e:5d:
         79:ca:25:2e:fe:d7:31:0e:2d:bf:37:5c:2c:a4:1d:85:f3:c1:
         35:ed:6d:5d:7b:ca:bd:19:62:af:9e:fe:9f:3e:9f:60:77:06:
         4a:d6:f5:4f:40:58:1a:48:d0:80:41:ab:1c:01:c8:62:2d:45:
         2b:72:ad:98:1c:9f:c7:5e:8d:63:30:a7:34:67:66:69:10:e3:
         18:3b:26:35:4e:1e:97:70:19:76:6b:57:1a:9a:a5:0c:d9:13:
         53:a4:87:a2:0c:19:5c:3e:a7:18:93:da:6e:61:ea:17:4d:56:
         bc:79:56:25:66:f5:ea:e3:3f:e2:69:5c:7c:a4:76:52:85:be:
         30:11:69:0b:8e:79:44:c9:99:fe:88:0e:5a:88:df:ce:93:46:
         1f:66:62:a2:b6:34:ca:89:d9:52:02:e6:48:7d:d1:07:d0:8b:
         7a:80:38:39:a5:25:1f:18:06:3b:64:69:51:f3:3a:70:07:09:
         d5:5d:6d:d4:02:03:89:d4:df:ae:87:d1:27:65:a5:18:66:87:
         75:e5:01:43:23:57:17:2a:14:5d:81:5c:d4:c5:07:e1:66:db:
         3e:2b:85:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 05:23:47 2026 by rpki-client