This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3232342e302f32302d3234203d3e203235363230.roa
File:                     3139302e3137312e3232342e302f32302d3234203d3e203235363230.roa (raw, json)
Hash identifier:          k4yKc7YMKD43smz9farM6jGUQMWR4fr3Y83vrxsQLnM=
Subject key identifier:   1F:E7:BF:14:BE:1D:E8:71:60:3C:30:95:EB:6D:F3:0A:2A:4F:44:5A
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       7DBE0461D08940BBABC54FAB285C616F662A77A4
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3232342e302f32302d3234203d3e203235363230.roa
Signing time:             Tue 20 Jan 2026 22:20:01 +0000
ROA not before:           Tue 20 Jan 2026 22:15:01 +0000
ROA not after:            Tue 19 Jan 2027 22:20:01 +0000
asID:                     25620
IP address blocks:        190.171.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:be:04:61:d0:89:40:bb:ab:c5:4f:ab:28:5c:61:6f:66:2a:77:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Jan 20 22:15:01 2026 GMT
            Not After : Jan 19 22:20:01 2027 GMT
        Subject: CN=1FE7BF14BE1DE871603C3095EB6DF30A2A4F445A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1a:e5:35:27:c8:08:1e:b3:1d:f0:aa:8f:6d:
                    db:1e:34:dc:b8:38:61:2d:ee:b5:88:f4:1b:f4:fc:
                    40:12:13:f1:d6:75:91:a8:e9:29:5b:34:5e:aa:93:
                    09:69:27:86:27:05:61:e0:33:ec:b9:35:af:0a:53:
                    40:1c:db:12:78:cd:dd:90:be:c7:ea:d1:2d:db:24:
                    5d:87:a8:0e:cd:0c:81:cd:59:a7:ce:d6:d4:54:e0:
                    f5:14:35:cf:fe:a4:41:69:56:35:a4:a6:b1:61:5b:
                    6e:fd:d3:e3:63:1d:61:f6:74:f2:39:e6:7d:bd:51:
                    60:21:8f:e4:dc:6a:da:ae:cd:1e:d5:a1:d2:f8:cf:
                    76:fd:bb:1c:3d:ce:c2:e0:bc:89:89:cd:e2:9c:5e:
                    3d:de:67:25:7d:a6:b5:2f:fe:9a:d0:69:fd:85:45:
                    ab:28:e3:c6:5d:a4:df:39:db:77:46:f8:0a:dd:7d:
                    f8:0d:88:75:7f:15:06:1c:10:56:a3:64:dc:33:1a:
                    06:b8:d1:e6:e7:e0:8c:5c:e5:e0:7e:2b:fa:b5:a4:
                    8d:fd:ea:af:fa:a4:e6:3e:f6:de:86:5d:29:ad:47:
                    21:1c:47:8e:8b:95:e5:57:52:23:0d:a9:30:58:21:
                    21:12:ef:8c:d3:bc:b6:c5:6c:40:52:37:eb:d9:59:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E7:BF:14:BE:1D:E8:71:60:3C:30:95:EB:6D:F3:0A:2A:4F:44:5A
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3232342e302f32302d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:dd:02:23:e6:85:bb:63:8e:b9:c1:96:cb:4c:74:ce:f1:1b:
         27:43:2c:8b:5a:40:42:19:6d:42:ba:4e:70:57:97:bc:9c:7c:
         a3:82:df:8d:9a:7c:6e:cb:dc:6b:a0:94:61:9c:bd:6e:cd:b5:
         15:a2:39:b8:da:73:65:df:18:ab:57:b9:56:f9:1b:ad:0d:a3:
         d6:fb:87:5a:82:f6:10:d6:37:46:ae:c1:f5:0d:8b:61:4c:c5:
         62:d1:31:9c:df:88:b8:3f:f5:f1:c5:33:b8:d8:59:1e:ad:26:
         7a:99:f2:2b:28:f2:af:50:f5:aa:a7:4b:61:b5:0f:c6:6b:0a:
         2d:b9:57:ee:4d:bf:83:6e:33:cf:85:d5:f3:90:bd:be:24:98:
         ff:ca:b0:00:6d:91:5c:b8:bf:d3:fd:d8:8b:10:8d:f9:e4:7e:
         6e:b5:60:b2:2a:9a:72:c8:38:e1:ea:fd:c8:01:fe:ff:bf:9d:
         b3:9a:e1:65:c6:61:3b:a4:fb:d6:81:9f:d0:a6:cb:28:bc:40:
         a9:a5:c6:7b:cf:a9:76:40:7b:f4:e6:d3:f9:e9:2b:f1:a4:1c:
         4b:9e:20:ca:ec:7e:14:fe:a5:0e:2c:d2:d6:f2:ef:aa:f5:11:
         1e:c2:2e:1c:0c:f0:d1:28:57:02:5c:0a:e3:3f:d7:07:45:ce:
         40:cb:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:20:32 2026 by rpki-client