This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3138362e302e302f31362d3234203d3e203235363230.roa
File:                     3139302e3138362e302e302f31362d3234203d3e203235363230.roa (raw, json)
Hash identifier:          9jBrliDVHamgVeg5cKYmCDTo5yKNHm7itqwTQg3OGqc=
Subject key identifier:   B7:D9:EF:22:79:32:15:01:D1:F1:F9:BC:80:B2:56:EB:6D:90:BE:1E
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       2F0D0908E314046B44E73CA2667E2DF4110019BE
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3138362e302e302f31362d3234203d3e203235363230.roa
Signing time:             Tue 06 Jan 2026 19:23:06 +0000
ROA not before:           Tue 06 Jan 2026 19:18:06 +0000
ROA not after:            Tue 05 Jan 2027 19:23:06 +0000
asID:                     25620
IP address blocks:        190.186.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0d:09:08:e3:14:04:6b:44:e7:3c:a2:66:7e:2d:f4:11:00:19:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Jan  6 19:18:06 2026 GMT
            Not After : Jan  5 19:23:06 2027 GMT
        Subject: CN=B7D9EF2279321501D1F1F9BC80B256EB6D90BE1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7b:f7:30:7f:ab:d6:10:51:24:58:66:b7:2c:
                    a2:7c:80:8d:23:26:0d:ea:99:9e:54:dd:76:d5:78:
                    5a:37:e6:1a:d3:4a:56:25:18:58:30:b5:47:70:37:
                    60:aa:5d:68:ae:39:1f:84:d6:3f:23:49:0f:8b:5e:
                    a7:fc:28:79:d4:d5:ba:29:8d:4f:56:a0:1e:47:8e:
                    82:0a:7f:59:a3:47:09:6b:09:d5:b8:ac:ca:22:1c:
                    9b:3f:80:b7:89:41:3e:28:4c:65:39:b0:7a:8a:fd:
                    45:09:19:66:7e:4c:8e:6e:96:69:d9:65:e5:f8:4e:
                    98:f4:94:8a:91:b9:d1:de:a2:79:0b:83:85:f0:46:
                    e9:ec:45:b0:f3:37:b1:9a:a9:b9:a3:9e:3f:d3:95:
                    95:87:84:d2:da:d9:0a:3e:c4:53:1e:38:62:ce:7c:
                    b5:d5:0b:87:f0:d0:7e:b7:c8:9d:c8:ba:62:aa:ea:
                    d2:b7:85:f5:ad:b3:09:e2:26:a5:f1:f6:3d:ce:c9:
                    ea:54:96:c6:5a:97:4c:f3:1f:77:f2:3f:ac:d1:16:
                    8e:67:75:68:60:39:77:e2:80:f5:96:cb:63:98:92:
                    5b:00:09:c0:99:7d:02:2f:01:50:50:1c:cc:20:ea:
                    12:3a:84:80:8b:9a:8d:00:d6:ab:4f:ba:63:cb:c8:
                    5c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D9:EF:22:79:32:15:01:D1:F1:F9:BC:80:B2:56:EB:6D:90:BE:1E
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3138362e302e302f31362d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.186.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8c:70:dd:48:91:ad:16:80:73:9b:97:b3:25:f7:88:2f:16:0f:
         02:26:ee:b3:25:b9:b5:37:f5:3b:50:1f:5a:32:96:ec:58:5a:
         78:f8:c0:db:ec:ba:e9:8f:1f:cc:f1:51:ec:9f:93:40:d8:88:
         fc:a3:03:16:73:3a:aa:77:5d:34:cf:7b:27:3e:8b:3c:b6:19:
         be:67:c7:29:bb:d0:3a:97:c8:c4:ca:61:99:9a:16:8b:bf:d6:
         d3:15:13:5c:84:78:92:d1:9f:6c:1f:bd:65:47:b0:86:15:d7:
         3a:49:00:c8:48:67:f8:23:9b:b5:b7:08:96:70:fd:11:8b:5a:
         c8:80:26:82:6e:98:38:9d:0d:c1:9a:0d:35:ee:81:f7:b6:09:
         19:1d:18:a0:b3:5e:6f:54:b8:96:9a:46:42:a7:18:87:22:e2:
         1d:86:45:2e:3b:e4:68:7b:1f:67:53:22:a9:60:a5:8b:8f:fd:
         bd:90:7f:ce:61:f7:ba:a4:a9:cb:76:df:9f:1a:57:d6:b8:e3:
         1a:e6:ac:c9:83:c8:bb:21:ae:34:b7:65:39:4d:3c:42:69:3a:
         90:92:88:b4:52:6b:e0:c5:ef:ae:a4:32:2f:0d:74:4b:1f:a7:
         f9:d6:e6:db:6b:d5:8f:f3:45:e5:42:39:6b:17:f8:1c:f6:62:
         e7:44:f0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:39 2026 by rpki-client