This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3139322e302f31382d3139203d3e203235363230.roa
File:                     3139302e3137312e3139322e302f31382d3139203d3e203235363230.roa (raw, json)
Hash identifier:          r3NGqmav9wjbDMz8y2yZ595lKlHinDWrZNesZESibh0=
Subject key identifier:   40:38:0B:88:2B:DF:DE:43:02:4E:9A:E7:1E:24:F7:CB:2D:63:E5:1F
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       1E23C1D158E3B234DE9EA99B9B9DB82CDAD1B8C3
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3139322e302f31382d3139203d3e203235363230.roa
Signing time:             Tue 20 Jan 2026 22:20:00 +0000
ROA not before:           Tue 20 Jan 2026 22:15:00 +0000
ROA not after:            Tue 19 Jan 2027 22:20:00 +0000
asID:                     25620
IP address blocks:        190.171.192.0/18 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:23:c1:d1:58:e3:b2:34:de:9e:a9:9b:9b:9d:b8:2c:da:d1:b8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Jan 20 22:15:00 2026 GMT
            Not After : Jan 19 22:20:00 2027 GMT
        Subject: CN=40380B882BDFDE43024E9AE71E24F7CB2D63E51F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d8:b1:69:74:87:31:b2:0f:26:1e:43:80:2d:
                    71:c0:87:10:2d:a0:c5:3b:f7:ba:8f:f5:fc:c0:aa:
                    bc:65:e9:5e:53:0b:a8:c2:5c:21:3e:a5:2d:c7:5e:
                    d7:f2:a9:e5:7e:9f:ce:85:e4:9b:dd:e8:59:bf:39:
                    5d:81:1c:aa:8b:58:e4:47:79:22:5b:1b:29:32:8f:
                    39:93:6c:a2:0d:e7:68:b5:cf:d1:a0:a7:21:9f:2c:
                    5d:0d:7e:14:c2:97:8f:d6:18:8e:7c:77:46:a3:c7:
                    b3:ff:12:5e:4f:23:8f:fc:0a:d4:0f:c3:e0:ef:a4:
                    0f:7b:60:51:5c:c7:2f:3e:29:1e:47:58:88:73:cf:
                    3d:0f:41:45:8e:d2:46:f9:5b:9e:03:d5:17:0e:c1:
                    5c:38:59:6d:9e:d5:4a:b9:cd:46:15:b9:e9:16:b5:
                    30:a7:6f:2b:85:4c:44:f2:ac:61:10:e1:f3:83:4c:
                    36:cd:df:b5:b3:b4:ad:2d:b6:86:ab:02:85:b2:8e:
                    3a:fc:8d:27:83:6f:e3:5a:e5:18:71:3d:e9:2d:f6:
                    8c:90:7e:c4:a8:76:ec:27:cf:47:27:3d:05:74:6b:
                    80:08:36:40:30:8d:fc:b1:65:af:2c:70:70:fe:69:
                    0c:99:92:0f:4b:36:4f:07:0b:ea:f5:5a:61:e7:c4:
                    e6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:38:0B:88:2B:DF:DE:43:02:4E:9A:E7:1E:24:F7:CB:2D:63:E5:1F
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3139322e302f31382d3139203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         90:7c:8a:23:dd:5d:dc:87:7e:13:00:79:53:ea:4a:7f:ba:2d:
         f1:ad:7d:1e:6d:97:89:eb:57:79:49:d1:b0:2b:05:e1:7f:cc:
         4d:c8:5e:8b:89:29:41:71:e2:25:1f:75:f6:96:72:8e:39:f2:
         dc:65:db:3f:51:8a:04:fb:6d:5d:77:d2:bb:21:4a:e0:11:f6:
         24:36:fe:f1:46:05:7a:2f:4c:67:de:5f:93:2d:a3:41:4d:6c:
         df:56:e3:b3:e0:a3:6c:d6:ec:fa:6c:bc:bb:b7:ae:0d:ae:f0:
         fc:c7:5b:35:8d:b0:ce:5d:e6:1e:5f:11:4b:6c:14:9e:60:3d:
         9c:ef:c0:5b:60:96:ec:11:f0:19:bd:cf:04:42:e2:f8:75:46:
         4c:3b:8d:4d:8a:98:82:9f:c6:17:0e:08:6a:36:c6:01:ea:6c:
         0b:3e:13:df:ba:aa:10:18:20:f2:13:29:7a:49:48:98:73:5b:
         4b:4a:69:0e:1b:b2:2c:39:99:2f:37:53:72:0d:1c:95:9e:ac:
         c1:2d:0a:3b:f8:fc:68:27:79:71:c6:92:7c:f3:82:39:54:60:
         36:14:a5:20:f2:f4:9c:e9:cf:87:33:0d:2e:89:da:a1:ff:63:
         f6:4c:90:80:c6:6d:54:bb:1f:08:f6:0c:53:fa:76:5c:a6:ee:
         a7:a5:72:ca
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHiPB0VjjsjTenqmbm524LNrRuMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E0NjY1NEQ2RjAyQ0VDNDFFQUE0MzM5NDk4NDg2QzYw
OUJGMzRFQzAeFw0yNjAxMjAyMjE1MDBaFw0yNzAxMTkyMjIwMDBaMDMxMTAvBgNV
BAMTKDQwMzgwQjg4MkJERkRFNDMwMjRFOUFFNzFFMjRGN0NCMkQ2M0U1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32LFpdIcxsg8mHkOALXHAhxAt
oMU797qP9fzAqrxl6V5TC6jCXCE+pS3HXtfyqeV+n86F5Jvd6Fm/OV2BHKqLWORH
eSJbGykyjzmTbKIN52i1z9GgpyGfLF0NfhTCl4/WGI58d0ajx7P/El5PI4/8CtQP
w+DvpA97YFFcxy8+KR5HWIhzzz0PQUWO0kb5W54D1RcOwVw4WW2e1Uq5zUYVuekW
tTCnbyuFTETyrGEQ4fODTDbN37WztK0ttoarAoWyjjr8jSeDb+Na5RhxPekt9oyQ
fsSoduwnz0cnPQV0a4AINkAwjfyxZa8scHD+aQyZkg9LNk8HC+r1WmHnxOYTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQDgLiCvf3kMCTprnHiT3yy1j5R8wHwYDVR0j
BBgwFoAUOkZlTW8CzsQeqkM5SYSGxgm/NOwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEYxQjg1NTI5ODhBQzdCMjk5QzI3MDU2RjQ3MzNDMjMw
MzIxMkNBMkJBMDZCMkEyQ0YyQzVDODAzOENGRjJDLzAvM0E0NjY1NEQ2RjAyQ0VD
NDFFQUE0MzM5NDk4NDg2QzYwOUJGMzRFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTQ2NjU0RDZGMDJDRUM0MUVB
QTQzMzk0OTg0ODZDNjA5QkYzNEVDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBGMUI4NTUyOTg4QUM3QjI5OUMyNzA1NkY0NzMzQzIzMDMyMTJDQTJC
QTA2QjJBMkNGMkM1QzgwMzhDRkYyQy8wLzMxMzkzMDJlMzEzNzMxMmUzMTM5MzIy
ZTMwMmYzMTM4MmQzMTM5MjAzZDNlMjAzMjM1MzYzMjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGvqvA
MA0GCSqGSIb3DQEBCwUAA4IBAQCQfIoj3V3ch34TAHlT6kp/ui3xrX0ebZeJ61d5
SdGwKwXhf8xNyF6LiSlBceIlH3X2lnKOOfLcZds/UYoE+21dd9K7IUrgEfYkNv7x
RgV6L0xn3l+TLaNBTWzfVuOz4KNs1uz6bLy7t64NrvD8x1s1jbDOXeYeXxFLbBSe
YD2c78BbYJbsEfAZvc8EQuL4dUZMO41NipiCn8YXDghqNsYB6mwLPhPfuqoQGCDy
Eyl6SUiYc1tLSmkOG7IsOZkvN1NyDRyVnqzBLQo7+PxoJ3lxxpJ884I5VGA2FKUg
8vSc6c+HMw0uidqh/2P2TJCAxm1Uux8I9gxT+nZcpu6npXLK
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:19:19 2026 by rpki-client