This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3139302e3130342e3132382e302f31382d3234203d3e203237383935.roa
File:                     3139302e3130342e3132382e302f31382d3234203d3e203237383935.roa (raw, json)
Hash identifier:          +UtVeCW/4hFq6lP7Kz8vYKRwLN2a1Hu/m2LwGv36hak=
Subject key identifier:   7D:57:09:A9:43:6C:17:D1:D8:4E:B9:24:A6:CE:27:3B:2C:B7:6F:03
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       580F945555FC2FBD7FBC9076E238FEE6FD2801E4
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3139302e3130342e3132382e302f31382d3234203d3e203237383935.roa
Signing time:             Tue 06 Jan 2026 19:21:39 +0000
ROA not before:           Tue 06 Jan 2026 19:16:39 +0000
ROA not after:            Tue 05 Jan 2027 19:21:39 +0000
asID:                     27895
IP address blocks:        190.104.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0f:94:55:55:fc:2f:bd:7f:bc:90:76:e2:38:fe:e6:fd:28:01:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Jan  6 19:16:39 2026 GMT
            Not After : Jan  5 19:21:39 2027 GMT
        Subject: CN=7D5709A9436C17D1D84EB924A6CE273B2CB76F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:f0:5d:74:31:d0:85:0c:a0:f0:83:ab:03:
                    e7:91:d6:12:7e:77:a0:8b:7c:14:f2:0d:34:d3:7b:
                    91:11:a1:d3:ae:a4:e6:44:b8:d4:da:16:53:3c:10:
                    b5:e7:92:49:64:50:e3:58:35:b7:9b:c3:5c:78:e4:
                    4b:4b:61:95:d4:f3:c5:a2:90:a3:aa:b9:90:de:ac:
                    e9:7a:fe:16:43:5c:02:e5:a1:60:57:60:a6:3f:8d:
                    16:9a:13:67:f5:50:15:13:49:49:04:b3:ac:6c:cf:
                    02:a3:47:25:4a:b2:ba:45:c0:6b:87:8f:ef:5d:40:
                    19:31:6c:a5:d5:86:20:e1:47:38:6a:2e:89:d5:61:
                    ad:48:9a:56:5f:2f:c0:37:58:8a:3b:8c:28:d6:6f:
                    b8:f3:30:be:7a:73:1c:f2:c7:b2:76:e2:61:50:0d:
                    9f:ca:71:93:93:2e:16:54:12:f8:27:1a:a2:c0:ed:
                    b1:db:d4:e0:bb:68:cb:b3:b6:14:f6:9e:e6:cc:a4:
                    79:d5:f3:7f:a4:05:37:e3:45:08:68:70:68:68:ac:
                    67:c5:d3:47:00:38:ba:cd:89:b0:00:02:cb:e1:d9:
                    61:c7:b1:52:84:a7:41:5a:24:5c:68:58:09:50:f9:
                    b7:21:b8:a9:59:93:ab:a9:de:37:06:f4:28:15:d5:
                    9e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:57:09:A9:43:6C:17:D1:D8:4E:B9:24:A6:CE:27:3B:2C:B7:6F:03
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3139302e3130342e3132382e302f31382d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8d:c9:6b:67:f3:34:cb:b0:ae:d8:04:75:26:0f:dd:7c:da:ed:
         cd:59:c5:0a:b6:60:70:11:e5:10:06:b5:f0:e4:26:4f:b5:4f:
         67:31:cb:96:96:8b:40:02:74:da:2f:d3:94:b6:39:64:63:ef:
         20:81:b5:10:08:be:ad:9f:66:0e:96:77:b9:9d:83:fd:73:c0:
         af:be:e1:ac:69:9a:53:2d:a6:eb:1f:cc:fe:f4:1a:c5:80:3c:
         76:48:08:7a:cf:c2:73:f6:0b:fc:8d:d7:7c:4f:9c:45:10:a5:
         4b:60:54:eb:88:fd:d7:ad:68:d4:4a:ce:e7:1e:90:5b:0f:09:
         e7:0e:8a:33:eb:6a:c9:bb:c0:7f:ba:3c:09:f6:78:f4:b1:59:
         6f:5b:6a:6e:30:ed:a8:45:66:e6:41:0b:bf:99:f1:cd:3b:33:
         83:61:24:2b:45:18:f8:51:69:34:21:2e:f4:d7:51:ff:b1:da:
         d3:df:0f:31:c7:e5:54:b8:ac:49:5d:13:9c:23:90:da:c5:b0:
         95:dd:92:ab:e5:4f:75:78:b2:02:fd:fc:df:3b:c5:d2:67:5f:
         0f:ea:10:fc:0b:1f:85:73:de:fd:88:9b:a2:b6:37:34:51:c3:
         b7:34:55:0c:19:4a:36:8c:0f:fd:d7:f8:a6:d9:f4:31:25:89:
         19:f7:28:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 06:54:02 2026 by rpki-client