This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3139322e302f32302d3234203d3e203235363230.roa
File:                     3139302e3137312e3139322e302f32302d3234203d3e203235363230.roa (raw, json)
Hash identifier:          q2tzU7TRdoWvmSLWWum56ejY3YmHAtPLy8Z7jPsACDo=
Subject key identifier:   99:EA:32:EF:F4:E1:F2:61:BA:35:3C:CD:B2:AD:06:98:88:37:43:5D
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       12553069B0D21327372E103A1C2A87FEA9286245
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3139322e302f32302d3234203d3e203235363230.roa
Signing time:             Tue 20 Jan 2026 22:20:01 +0000
ROA not before:           Tue 20 Jan 2026 22:15:01 +0000
ROA not after:            Tue 19 Jan 2027 22:20:01 +0000
asID:                     25620
IP address blocks:        190.171.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:55:30:69:b0:d2:13:27:37:2e:10:3a:1c:2a:87:fe:a9:28:62:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Jan 20 22:15:01 2026 GMT
            Not After : Jan 19 22:20:01 2027 GMT
        Subject: CN=99EA32EFF4E1F261BA353CCDB2AD06988837435D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fb:cb:67:93:16:3c:6c:b5:e8:9c:07:2d:d4:
                    0a:7a:f9:15:7d:af:ab:65:2f:1c:2f:9f:c2:d8:90:
                    9e:c9:48:e1:19:46:dd:d5:29:11:d8:2a:3c:74:39:
                    1f:e3:3a:99:1a:1f:a1:a3:73:c7:a7:d2:54:4b:ee:
                    fc:5a:b6:a4:51:06:3b:6a:76:ba:7a:7b:be:47:69:
                    32:c3:8a:1f:04:81:cf:7c:af:bb:ce:f8:55:7e:1e:
                    58:51:29:af:be:13:42:c7:ed:0a:54:6b:6f:97:42:
                    ac:3e:25:fb:ed:7d:75:aa:12:30:97:4c:25:6d:31:
                    d1:e7:be:19:b5:44:43:4c:6d:a4:66:36:24:c5:1b:
                    6f:c4:66:9b:24:18:71:79:2a:0b:b6:9d:bc:54:4d:
                    e5:67:6b:5c:65:7f:d5:b0:fd:17:99:e2:8e:ac:40:
                    cb:d2:9b:a8:2e:c6:85:26:7a:cd:76:30:b8:b8:fb:
                    e7:98:d0:2f:d1:8a:4a:20:6c:6a:ab:33:8b:a7:a2:
                    8f:30:2a:ad:25:f4:d4:c3:27:fe:e1:27:f5:ba:83:
                    2a:4b:e4:d1:ef:fa:35:41:7a:b8:86:14:56:81:56:
                    c8:90:df:36:69:4c:e3:c7:57:7a:ca:8e:44:b5:63:
                    52:96:fc:75:eb:21:6b:54:20:b2:67:7f:8c:a5:37:
                    23:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EA:32:EF:F4:E1:F2:61:BA:35:3C:CD:B2:AD:06:98:88:37:43:5D
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3139322e302f32302d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:23:d6:64:09:b0:2e:ad:be:88:67:78:b7:9d:5b:fb:58:ee:
         e9:59:78:29:22:b9:82:67:46:4c:7c:95:1f:22:b8:c7:c1:e6:
         5c:25:80:1a:c7:dd:33:9a:c1:5b:03:3b:10:8a:e1:ef:c5:91:
         68:cb:c7:27:34:a6:d8:11:e3:cc:da:ef:82:80:8d:16:0d:50:
         7a:48:cd:3a:d1:5d:90:01:82:fb:f3:db:af:9f:f5:bf:22:1e:
         86:bf:a0:e8:c6:6d:e5:f1:8d:cd:27:9f:2b:6d:81:7b:a0:54:
         5c:b3:2b:5d:b1:35:2f:e5:9b:a1:22:a1:41:2e:9f:87:3c:af:
         2a:fc:71:4b:ce:39:95:3e:cf:4d:c0:dd:65:89:e7:ae:b8:fb:
         ee:13:83:43:ea:97:cd:83:c0:c1:a5:3b:d0:af:fd:a2:06:59:
         4b:9a:f3:3b:df:b8:46:fa:3a:94:02:49:81:ed:b8:20:7d:c6:
         15:86:54:1b:32:23:2e:f5:75:5b:20:90:bb:75:e6:9b:6f:b0:
         71:0b:0d:13:c7:26:34:f3:09:f3:08:5b:86:e9:ed:2d:bd:61:
         c2:71:73:a5:1d:05:ab:55:3b:db:8c:2d:f4:fa:62:71:c6:1c:
         31:ce:61:b9:69:0c:31:d4:67:31:bf:67:1b:97:c5:51:c7:fb:
         d8:0b:d2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:19:24 2026 by rpki-client