This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e33372e302f32342d3234203d3e203237373733.roa
File:                     3139302e39392e33372e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          l4oENGwdqrMyPtV6VXo4WNUwncBcAMqiFmuYbcnwF6Q=
Subject key identifier:   C2:F0:BD:DB:A9:36:B1:C0:B6:6D:9E:33:1D:FD:E6:50:C5:3A:3B:11
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       0A842197220E16B2D0D8AAA07C44A7969E66607E
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e33372e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 20:53:12 +0000
ROA not before:           Tue 06 Jan 2026 20:48:12 +0000
ROA not after:            Tue 05 Jan 2027 20:53:12 +0000
asID:                     27773
IP address blocks:        190.99.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:84:21:97:22:0e:16:b2:d0:d8:aa:a0:7c:44:a7:96:9e:66:60:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:12 2026 GMT
            Not After : Jan  5 20:53:12 2027 GMT
        Subject: CN=C2F0BDDBA936B1C0B66D9E331DFDE650C53A3B11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:e2:e6:4b:b8:0c:c7:e3:16:b5:5d:7e:a4:
                    8a:20:85:c7:08:82:8b:40:cf:64:58:6e:a9:2b:a1:
                    5f:fc:06:c2:a6:23:2e:fc:81:6a:0a:47:d1:98:ca:
                    66:0d:66:e4:5a:79:60:a3:15:0a:3b:d5:57:1b:b6:
                    11:08:16:4d:22:a5:5d:dd:c0:8b:ac:4c:5a:23:43:
                    04:00:b1:ca:ec:81:d5:ab:1a:fd:aa:08:a6:04:1d:
                    10:9c:5b:29:fc:f2:b3:2f:ec:6a:06:00:20:bb:46:
                    6e:82:df:21:24:1e:db:d7:6b:3e:a4:62:f0:7f:ba:
                    c7:40:dd:fb:5e:a8:fe:3d:3a:a1:fd:67:15:85:24:
                    c1:21:c9:fc:21:0a:99:25:c6:64:81:fd:8f:ff:bd:
                    de:2f:e8:6e:10:97:b7:cc:6c:7f:e6:d3:13:f1:20:
                    d4:9c:4d:a3:20:62:de:26:d1:b7:c3:ac:33:ee:28:
                    1c:a2:9e:94:be:ee:30:cd:d2:21:8b:78:de:d8:87:
                    4f:0b:c7:d4:db:86:9f:76:9b:31:16:eb:36:7f:46:
                    c1:41:68:54:cb:2a:76:11:41:0b:e1:72:1a:46:f5:
                    f8:ac:ef:4f:e4:78:ed:cc:0d:37:ba:f3:2d:18:f5:
                    54:4a:b8:3e:e7:48:d8:de:d8:a9:e6:f4:6a:20:f4:
                    12:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F0:BD:DB:A9:36:B1:C0:B6:6D:9E:33:1D:FD:E6:50:C5:3A:3B:11
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e33372e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:cf:1a:3b:4e:4e:c9:28:3a:5f:46:05:08:43:06:d8:b8:a3:
         71:8f:48:7c:6e:ff:28:31:37:5c:27:c9:3e:08:05:a7:c0:4a:
         b1:fc:28:fb:95:b9:a0:82:7c:b5:59:20:a3:ed:84:4a:2b:79:
         10:2d:2b:8e:13:36:29:0a:29:69:e6:9c:36:06:e6:3e:4d:87:
         eb:e6:29:49:6d:fe:d9:36:00:56:fb:aa:7e:27:20:cb:9f:43:
         07:50:81:14:86:26:0e:53:b7:29:ab:74:e5:7d:e7:49:5c:19:
         c6:26:48:0f:f1:d7:bf:a4:36:d9:0a:8f:b4:33:3e:e5:c7:07:
         ee:48:ec:b3:c4:c6:b5:a4:ee:65:f4:2b:8b:b1:31:ff:96:dc:
         c4:f0:8c:e2:91:97:e2:7f:67:d2:0e:57:fd:75:3e:c4:99:a7:
         99:1f:9a:3c:63:a2:81:eb:ac:ce:00:ce:0f:d2:42:00:26:e0:
         45:41:26:a0:4c:0a:3c:ed:6f:b5:33:eb:e1:90:f5:41:38:4c:
         cc:21:cb:3e:a9:a7:18:4a:7b:23:53:9a:a8:bf:4c:cb:cb:c4:
         1e:e5:49:43:e7:d4:9a:a3:44:5e:e8:7c:ad:58:78:fb:f1:97:
         7a:53:c6:f8:e3:21:55:1d:85:45:c4:8e:cf:3a:be:16:24:34:
         39:a1:09:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:23 2026 by rpki-client