This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3230382e302f32302d3234203d3e203235363230.roa
File:                     3139302e3137312e3230382e302f32302d3234203d3e203235363230.roa (raw, json)
Hash identifier:          UEvAxOJnNEcpT+TlmWx5RadA8K8VF4oHlxuIQ6Spu1o=
Subject key identifier:   15:BF:53:28:48:CB:03:ED:D8:A0:C9:B2:D7:A0:47:25:8C:09:53:41
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       6703EA856094314F0A4A68CEEDD5F887B94E8EC2
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3230382e302f32302d3234203d3e203235363230.roa
Signing time:             Tue 20 Jan 2026 22:20:01 +0000
ROA not before:           Tue 20 Jan 2026 22:15:01 +0000
ROA not after:            Tue 19 Jan 2027 22:20:01 +0000
asID:                     25620
IP address blocks:        190.171.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:03:ea:85:60:94:31:4f:0a:4a:68:ce:ed:d5:f8:87:b9:4e:8e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Jan 20 22:15:01 2026 GMT
            Not After : Jan 19 22:20:01 2027 GMT
        Subject: CN=15BF532848CB03EDD8A0C9B2D7A047258C095341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:61:84:c3:8c:be:ad:02:5d:aa:6e:23:65:
                    54:60:69:a3:8d:9d:22:68:e4:be:c3:d6:af:86:67:
                    5d:2e:15:95:fe:7d:81:a8:df:58:c3:ee:97:1f:40:
                    ae:d8:f0:5a:e5:6f:70:9b:10:b3:a7:d1:47:f6:cf:
                    90:b7:e9:64:3d:62:ec:9c:2d:83:61:6a:14:f6:2d:
                    66:47:97:ad:65:f8:2c:64:fd:32:13:b4:24:fd:8c:
                    1f:35:b9:8c:21:25:e3:e6:0a:9f:40:73:63:38:95:
                    97:71:6c:e9:ca:ea:5e:59:e5:c0:11:03:75:6b:1f:
                    f5:86:59:fd:16:04:54:b7:e8:6a:e2:fb:54:fb:37:
                    41:a0:7a:ba:89:f3:f9:99:8c:06:d1:d5:87:95:c0:
                    a4:56:f9:c6:3c:3d:a6:65:c9:91:ec:97:5d:ca:48:
                    5e:4e:e8:85:e5:d9:46:22:8e:5a:76:77:b8:22:43:
                    c1:9f:ee:30:eb:39:af:ea:f1:b6:3c:78:16:d1:b4:
                    21:99:77:97:2c:43:1d:67:39:85:0c:2a:12:14:1d:
                    c5:5c:e0:e0:67:77:3d:84:45:92:1b:6f:50:84:c9:
                    7f:0b:15:b9:b4:38:37:4e:58:ae:ee:ad:0f:ac:d9:
                    d5:d4:b8:2e:bf:16:95:6b:4f:3e:c1:34:2f:9a:a8:
                    c8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BF:53:28:48:CB:03:ED:D8:A0:C9:B2:D7:A0:47:25:8C:09:53:41
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3230382e302f32302d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:33:ff:8d:53:53:d7:cc:53:22:80:bf:f8:f9:71:71:cd:40:
         3b:96:14:93:ba:67:93:e9:a2:00:30:d4:f2:e3:4f:33:f3:c1:
         09:5b:6c:b4:8a:6d:b2:41:04:44:88:9c:3f:e2:47:7d:22:22:
         37:09:94:cf:d7:81:42:b0:41:ee:57:c8:ac:b4:48:80:11:2b:
         43:53:c0:ba:11:57:c4:4b:1a:5f:65:be:bc:de:be:94:ca:cd:
         b7:6a:d4:93:fe:19:db:85:05:c8:dc:65:54:07:4e:14:f4:96:
         b3:0a:70:c4:df:7f:c9:6f:3e:4a:08:a6:cb:4b:42:c1:76:77:
         b3:15:b1:79:71:46:ce:9a:26:75:fe:31:d7:ef:e4:5b:57:db:
         83:24:1b:57:c8:8f:eb:ac:68:12:86:46:53:2c:72:68:e3:70:
         bb:ce:8f:3b:66:6d:e9:50:2f:c4:97:91:44:35:ef:5c:6a:33:
         27:83:55:1f:9e:ee:6e:e9:fb:fa:51:c6:2b:8f:33:fe:fc:62:
         5b:c0:f0:0c:4a:c5:f8:b8:b5:82:fd:f8:d5:fe:70:fb:28:19:
         b9:1e:ed:a3:d0:8e:b1:f0:3b:fc:b8:81:62:33:a9:bc:49:a2:
         f1:29:47:95:40:f0:f8:77:cc:45:05:85:c8:9b:41:9b:4a:7e:
         f5:2e:6a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:19:26 2026 by rpki-client