This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3130332e3233312e302f32342d3234203d3e20323637383736.roa
File:                     3139302e3130332e3233312e302f32342d3234203d3e20323637383736.roa (raw, json)
Hash identifier:          3nCSjZCFg/4DEcQTJnwMWLrLsDHKsUyRsfAVHBug07g=
Subject key identifier:   81:5B:B4:F7:A6:69:FE:95:49:01:3D:43:DE:30:CC:0B:96:D8:FD:51
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       53BE91A17759D3C479A7D24C3865819FA96194F7
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3130332e3233312e302f32342d3234203d3e20323637383736.roa
Signing time:             Tue 06 Jan 2026 19:25:26 +0000
ROA not before:           Tue 06 Jan 2026 19:20:26 +0000
ROA not after:            Tue 05 Jan 2027 19:25:26 +0000
asID:                     267876
IP address blocks:        190.103.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:be:91:a1:77:59:d3:c4:79:a7:d2:4c:38:65:81:9f:a9:61:94:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Jan  6 19:20:26 2026 GMT
            Not After : Jan  5 19:25:26 2027 GMT
        Subject: CN=815BB4F7A669FE9549013D43DE30CC0B96D8FD51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:84:2c:da:c9:2f:a0:6e:c8:2b:46:6d:70:77:
                    cf:7e:d5:26:e6:33:77:54:e5:30:4a:e9:2c:4b:9e:
                    d1:16:dd:e4:80:b9:74:de:d4:96:b9:20:80:f6:f0:
                    53:dc:48:35:fe:58:39:02:83:70:58:3d:10:4c:c9:
                    23:ba:3f:24:03:52:1a:64:f5:7e:11:bb:a5:77:32:
                    e2:46:a4:c1:91:a8:44:8b:a8:f7:4f:5f:96:9e:f4:
                    59:8e:e0:ab:e4:6a:8e:51:b6:ee:ad:93:ce:f9:74:
                    3c:3b:3b:6f:90:7c:ef:00:91:83:62:8d:1e:ea:32:
                    b9:50:57:ad:b2:ee:47:8f:bb:7a:f6:4b:56:18:e3:
                    bc:81:14:5c:11:4f:4c:60:b3:01:81:0f:8d:d7:5e:
                    47:2b:64:d0:f5:65:cb:9e:56:ce:48:b4:89:ad:63:
                    83:52:90:4d:77:96:c7:f6:d0:56:ba:2a:23:da:97:
                    67:f1:00:18:aa:0e:2f:5b:54:fa:0c:8a:9a:61:a0:
                    5d:6a:53:65:66:86:73:69:07:fb:24:4a:c2:bf:44:
                    3f:c8:8c:69:b8:18:cf:3c:a5:fb:37:7c:25:4a:ff:
                    cd:45:7e:15:a0:9e:d0:ac:b4:37:8b:97:7c:57:e3:
                    01:60:92:0a:05:8d:20:0d:50:03:d7:e7:fc:16:ae:
                    13:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5B:B4:F7:A6:69:FE:95:49:01:3D:43:DE:30:CC:0B:96:D8:FD:51
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3130332e3233312e302f32342d3234203d3e20323637383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:50:cc:be:96:79:34:ef:25:82:c2:c0:a5:f8:48:f8:e1:ac:
         00:9e:52:06:8e:c8:93:f5:6d:e0:60:9d:57:63:bc:62:dc:12:
         e4:e6:e4:eb:3e:b4:96:dd:ee:7c:15:1e:34:61:da:f8:45:ae:
         38:c9:0c:3e:27:2d:cd:07:ce:0e:f5:60:43:7b:62:d6:72:89:
         f4:d3:08:2a:3a:87:6a:40:b9:e8:a6:4a:73:12:9e:05:55:bf:
         38:fa:18:0f:f4:6b:33:1b:bd:57:bc:ca:9f:96:c0:37:af:73:
         06:b3:2d:48:15:d0:77:0c:f3:1c:38:cf:ef:07:7d:90:e5:05:
         34:1a:2d:86:5f:47:77:14:3a:ad:ab:42:7c:70:b8:a6:bb:1c:
         47:27:72:6b:3c:a8:3d:a4:ee:fc:24:d5:f4:42:cd:e4:20:80:
         d8:5a:1e:7f:2c:c2:5c:0f:5d:a5:2d:a6:09:64:b3:27:43:02:
         8f:c8:4b:c3:9f:9c:c0:39:8f:bb:13:e8:3f:95:7f:a7:bf:1f:
         11:a1:f3:43:3a:c3:56:97:b1:e9:44:0b:a3:2d:ab:0d:00:a9:
         62:9e:91:9b:78:97:e5:28:0f:90:84:97:b8:12:21:63:fe:d5:
         51:e3:8d:76:18:6a:08:b6:59:15:91:bc:0c:d4:f2:62:f3:3d:
         f4:93:62:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:39:11 2026 by rpki-client