This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3234302e302f32302d3234203d3e203235363230.roa
File:                     3139302e3137312e3234302e302f32302d3234203d3e203235363230.roa (raw, json)
Hash identifier:          sIncXeT9RQ+SaWbSBvgYV1RDDaQLPSqeuiiwcA/5ZD0=
Subject key identifier:   F9:64:E1:BB:E6:18:09:DB:B2:83:C5:BC:43:87:49:3B:6B:CD:B1:BE
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       556A27F4B07972D807C2CC664D8E2E3982A9B429
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3234302e302f32302d3234203d3e203235363230.roa
Signing time:             Tue 20 Jan 2026 22:20:00 +0000
ROA not before:           Tue 20 Jan 2026 22:15:00 +0000
ROA not after:            Tue 19 Jan 2027 22:20:00 +0000
asID:                     25620
IP address blocks:        190.171.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6a:27:f4:b0:79:72:d8:07:c2:cc:66:4d:8e:2e:39:82:a9:b4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Jan 20 22:15:00 2026 GMT
            Not After : Jan 19 22:20:00 2027 GMT
        Subject: CN=F964E1BBE61809DBB283C5BC4387493B6BCDB1BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:e1:b1:82:3d:58:8e:6d:63:f3:af:3c:d4:
                    c7:b3:3c:25:71:4d:10:eb:39:5c:43:22:2c:1c:b8:
                    07:f9:18:6d:a2:7a:26:d7:a1:76:82:5e:f4:e3:13:
                    b1:bb:5a:75:9e:23:19:ad:ab:b9:e1:ff:90:21:d3:
                    d5:f3:42:a5:94:d3:32:c4:6f:e3:45:7a:d5:6a:f2:
                    f7:9f:cc:bf:ed:e2:e9:3f:1e:11:dd:71:09:f6:1e:
                    69:c2:ff:1a:a0:2a:ef:2d:fa:0c:b2:bd:d8:e3:53:
                    0e:e1:5a:ba:32:20:f4:e8:80:01:b7:1f:67:0b:ef:
                    0f:6f:06:ba:0f:1e:b6:2c:2d:29:71:70:7e:fa:38:
                    ee:d1:82:f0:73:6b:54:ab:b4:1f:46:2d:b3:4c:03:
                    aa:50:98:f6:bd:c6:cd:f4:38:9d:15:c9:14:3a:2e:
                    f9:31:6e:97:31:3c:8e:91:e6:b9:16:6d:56:75:22:
                    2d:16:86:37:ee:d9:9c:9e:6d:58:d9:49:3c:c1:13:
                    5a:af:ae:73:5d:f0:cd:66:42:bb:1e:9e:c2:f4:17:
                    a6:e0:00:ac:8b:1d:37:0b:ba:cf:10:57:21:6d:9f:
                    73:fa:40:d5:a2:8d:bf:5b:f5:ee:67:35:78:c2:77:
                    85:b2:19:9f:2a:b7:d7:29:ea:7b:58:89:3b:ec:41:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:64:E1:BB:E6:18:09:DB:B2:83:C5:BC:43:87:49:3B:6B:CD:B1:BE
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3137312e3234302e302f32302d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:f1:91:d7:ee:1b:3c:57:c1:f4:a5:69:01:b5:18:b3:7f:94:
         1c:32:a4:e4:f9:10:25:b7:97:5b:5d:9d:7f:e3:fa:43:bd:ae:
         03:8c:a2:b3:1d:17:9a:af:c2:aa:1c:1c:f0:27:fc:14:b6:8a:
         7b:e4:a8:fd:ef:7e:60:ba:d2:d4:39:69:b7:3c:01:e1:0d:05:
         12:8b:4e:5a:eb:98:a0:49:7f:a7:f8:a1:ae:ba:75:1c:a6:07:
         fe:5e:d4:c7:d5:c8:e8:7c:66:2d:1b:8a:60:52:34:d9:ab:b6:
         6f:3a:ea:d4:51:99:5b:7b:b0:26:d8:e1:ce:3b:27:b1:9d:70:
         41:1c:2d:3d:b2:21:23:c1:99:41:d5:5b:46:76:db:ff:6c:16:
         76:50:eb:24:e3:12:4f:80:e5:91:0c:dc:8a:80:28:7e:ea:3b:
         65:8c:33:51:8d:6d:b9:87:d9:e3:b1:1f:13:d4:55:f7:77:d8:
         ac:d2:16:49:b0:b2:46:cc:39:f9:73:6d:0f:1e:ee:75:bc:b4:
         cd:42:4b:ca:00:51:50:1e:9a:22:40:3b:34:44:72:77:0d:e1:
         76:ff:6c:5f:20:74:6f:77:71:53:e7:9b:d9:19:9e:1e:9d:b2:
         3c:36:69:cc:ee:da:e5:53:60:11:4d:8f:48:72:01:85:a1:0c:
         43:b0:81:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:19:12 2026 by rpki-client