This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3139302e39342e3139322e302f31382d3234203d3e2038303533.roa
File:                     3139302e39342e3139322e302f31382d3234203d3e2038303533.roa (raw, json)
Hash identifier:          jet1Ni/KzWgHiOFVzuYV3pJ+vxfYWsoDXGClVsWyRAI=
Subject key identifier:   22:53:AC:77:C1:FE:3E:6C:C8:A2:14:15:8E:DE:3C:8F:56:A2:F5:61
Certificate issuer:       /CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
Certificate serial:       34F037BC0C3EDD1DD7F999456120C219C1F20900
Authority key identifier: 3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3139302e39342e3139322e302f31382d3234203d3e2038303533.roa
Signing time:             Tue 06 Jan 2026 19:39:21 +0000
ROA not before:           Tue 06 Jan 2026 19:34:21 +0000
ROA not after:            Tue 05 Jan 2027 19:39:21 +0000
asID:                     8053
IP address blocks:        190.94.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 14:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f0:37:bc:0c:3e:dd:1d:d7:f9:99:45:61:20:c2:19:c1:f2:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
        Validity
            Not Before: Jan  6 19:34:21 2026 GMT
            Not After : Jan  5 19:39:21 2027 GMT
        Subject: CN=2253AC77C1FE3E6CC8A214158EDE3C8F56A2F561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:70:e2:bc:70:57:0d:46:a2:e1:3b:87:e4:cc:
                    8e:b0:74:f3:ed:e1:f5:97:4c:1d:f7:d0:0c:cf:e1:
                    b1:d0:e9:5b:a8:7d:a3:9f:08:3c:2d:ba:46:cd:0e:
                    95:9b:c0:a5:a2:78:57:bb:c0:a1:af:f1:64:52:91:
                    68:22:11:6e:2b:f6:76:c5:dc:43:bb:b4:45:ab:8c:
                    2c:5e:78:c7:a3:73:0a:06:ad:23:68:0e:64:6e:39:
                    4e:8f:64:33:45:72:ed:74:04:f1:85:49:4f:c1:42:
                    e5:c1:93:ab:ec:fe:97:3e:d2:46:f3:30:a3:c6:bd:
                    d5:60:f2:d0:7b:2a:8a:67:38:9b:39:30:14:c2:ec:
                    01:38:e7:b2:42:ea:d3:0d:71:ee:5d:5e:5a:60:77:
                    af:b0:94:4c:29:3a:39:bb:8d:1b:a6:f1:44:6b:c6:
                    d2:87:d3:60:7f:e4:2c:74:f7:16:3d:c3:22:fe:05:
                    12:e4:d9:b1:3f:82:04:f1:7c:cf:b3:2f:92:aa:30:
                    c9:0c:a6:cf:21:5a:63:71:8f:82:70:54:8a:cf:f5:
                    2f:34:2d:b9:f6:3c:26:21:28:e8:93:73:3c:ba:2f:
                    2f:1e:d1:0a:57:25:3b:76:8b:ec:ca:ad:e1:52:f5:
                    0e:60:8a:d7:d0:67:c6:dc:19:ef:ce:7f:d4:22:89:
                    dc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:53:AC:77:C1:FE:3E:6C:C8:A2:14:15:8E:DE:3C:8F:56:A2:F5:61
            X509v3 Authority Key Identifier:
                keyid:3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3139302e39342e3139322e302f31382d3234203d3e2038303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         19:57:4b:76:78:ea:c6:4d:34:a9:41:f4:9f:49:01:c9:06:9f:
         1f:f8:fa:a6:a5:2e:a9:fc:99:30:b7:93:c9:e1:2c:91:db:25:
         b2:d0:2a:78:26:c0:c8:10:68:87:f2:07:76:a0:63:48:cf:4f:
         74:fe:51:27:a7:ac:ab:31:1b:d8:59:5d:04:7c:4c:a9:24:90:
         99:65:be:dc:90:30:65:a0:20:fc:f1:d1:15:fe:5f:b2:b7:49:
         ba:1a:32:cb:97:c7:72:86:bf:d3:31:6b:b4:ea:02:bc:6e:43:
         4e:fa:dd:90:66:14:d5:f1:54:e1:30:a4:1c:1c:90:47:a6:68:
         fb:78:0a:d8:7f:28:ff:3a:a5:da:84:8a:70:d7:f0:82:04:a7:
         a8:71:67:f6:f1:be:ff:97:d0:4a:f2:d6:64:61:24:3b:3e:3e:
         0a:a2:34:ce:0e:87:ec:98:a1:93:fc:24:42:53:9b:79:74:ba:
         e3:c2:75:18:9e:5b:90:15:a7:02:40:71:54:5b:bd:19:a6:18:
         72:1b:54:84:73:49:b9:c8:23:44:71:54:3d:69:32:05:fe:92:
         c7:bc:44:dd:c4:e3:0d:8d:fc:46:e7:ce:96:8c:43:51:50:0d:
         53:ad:0c:44:82:44:43:21:bc:da:7b:c3:55:a7:85:33:4d:b6:
         39:74:2f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:47:08 2026 by rpki-client