This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3139302e3132342e33322e302f32312d3234203d3e203237373432.roa
File:                     3139302e3132342e33322e302f32312d3234203d3e203237373432.roa (raw, json)
Hash identifier:          r0G7Xt+LIfBez/unsLi3MG39n6L8aed7obxXuYsBLIQ=
Subject key identifier:   EE:AE:8F:3A:8F:E0:2A:96:3B:FE:1A:6C:72:44:BC:0B:2E:97:29:11
Certificate issuer:       /CN=9F2FC3FC04DC1462BC6896341B228F48B6AA06E2
Certificate serial:       317C746CF87AF42CF623DBD2173A578F0E7DBC64
Authority key identifier: 9F:2F:C3:FC:04:DC:14:62:BC:68:96:34:1B:22:8F:48:B6:AA:06:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3139302e3132342e33322e302f32312d3234203d3e203237373432.roa
Signing time:             Wed 19 Nov 2025 17:53:12 +0000
ROA not before:           Wed 19 Nov 2025 17:48:12 +0000
ROA not after:            Wed 18 Nov 2026 17:53:12 +0000
asID:                     27742
IP address blocks:        190.124.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 14:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7c:74:6c:f8:7a:f4:2c:f6:23:db:d2:17:3a:57:8f:0e:7d:bc:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F2FC3FC04DC1462BC6896341B228F48B6AA06E2
        Validity
            Not Before: Nov 19 17:48:12 2025 GMT
            Not After : Nov 18 17:53:12 2026 GMT
        Subject: CN=EEAE8F3A8FE02A963BFE1A6C7244BC0B2E972911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:74:d5:86:d9:67:ed:a1:6f:2a:f5:46:04:
                    29:63:69:e2:8f:78:9d:4d:32:4c:ec:fa:7f:32:23:
                    96:0b:fe:11:18:7b:f9:c4:56:fc:92:5f:22:a0:4f:
                    b4:f0:01:86:c6:e1:e7:65:29:96:4e:8e:1c:17:55:
                    af:80:8c:77:ad:61:41:3b:07:22:d2:67:04:5a:8c:
                    96:0b:ff:22:16:63:c0:67:8d:ae:bb:63:24:4a:c8:
                    9d:50:3b:52:db:fe:e1:db:d3:6e:19:2f:ee:1b:d1:
                    3b:22:6c:4b:fd:a9:91:50:33:62:2f:fa:d2:60:03:
                    42:8f:d2:8f:a0:50:4a:c7:3c:8b:18:82:a2:cb:cb:
                    26:c5:66:48:9d:f6:0f:eb:8c:e0:31:10:af:b2:b5:
                    0e:ce:9d:80:ce:ba:bd:1d:f4:3e:89:d5:0c:f4:38:
                    07:3e:2b:4d:6f:99:af:57:28:6d:60:1c:eb:00:cd:
                    f0:f8:b4:a1:e3:eb:40:43:d0:53:24:e9:a2:40:10:
                    29:45:22:4c:96:9d:12:ae:52:ac:4d:58:00:1e:ef:
                    ce:da:55:cd:db:2e:18:a9:72:f3:79:5d:b4:aa:a0:
                    f2:8a:8d:14:ba:04:f1:11:31:66:08:14:38:7c:a4:
                    6b:72:ce:dd:f1:dc:81:6d:00:bf:0c:66:b3:87:43:
                    75:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AE:8F:3A:8F:E0:2A:96:3B:FE:1A:6C:72:44:BC:0B:2E:97:29:11
            X509v3 Authority Key Identifier:
                keyid:9F:2F:C3:FC:04:DC:14:62:BC:68:96:34:1B:22:8F:48:B6:AA:06:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/3139302e3132342e33322e302f32312d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:a5:62:05:47:a1:f7:a0:11:42:3e:a2:b9:5b:68:23:e1:cc:
         8b:e5:2b:b1:17:95:8d:a1:a1:98:c2:57:9c:42:2a:92:84:b3:
         cc:f0:3b:5e:ed:59:1f:29:bc:6b:2e:f3:2f:d6:fd:1c:a5:a5:
         c9:7e:fe:ae:63:3a:ff:15:95:cf:6a:65:a5:99:64:f7:57:00:
         ce:58:cf:a5:6c:18:ff:4a:ea:dd:54:58:33:3e:ae:d5:3a:06:
         8b:8c:22:9d:d9:38:0a:c9:4b:2b:a7:3f:29:60:6c:de:fd:23:
         42:a9:9e:fa:ed:b8:79:5c:1f:ca:45:61:f7:18:c9:d5:e5:50:
         62:88:dd:c4:b9:75:53:0f:a4:a2:18:a3:70:cc:39:5d:02:93:
         8d:6c:da:a3:a1:9a:e7:fb:56:f2:2b:02:40:34:d4:0f:f3:20:
         31:59:80:61:a4:13:70:86:da:dc:a3:da:98:a0:86:fd:4f:5d:
         b8:5c:1c:a0:b9:98:ea:0f:e4:7e:8f:fe:74:62:9d:ea:fc:a2:
         d7:bf:44:35:16:3a:98:59:81:3c:66:c8:da:5a:74:dc:15:92:
         45:be:08:2d:4c:23:02:76:34:15:5b:ee:b4:55:9b:64:75:ab:
         6a:35:8e:16:0a:24:85:b2:25:75:dc:bc:f3:4f:8a:c8:1b:39:
         25:84:dc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 10:28:25 2025 by rpki-client