This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3130332e3233382e302f32332d3234203d3e20323633383232.roa
File:                     3139302e3130332e3233382e302f32332d3234203d3e20323633383232.roa (raw, json)
Hash identifier:          WP4rHeYGiDayJONRrbg/Bo6XIX69mxc953pBqsc3loM=
Subject key identifier:   B6:1D:F5:88:B5:18:1C:14:1E:4C:65:16:E8:8B:82:4C:83:65:15:10
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       581972698A29F028236C72704AB54AAC73EDB121
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3130332e3233382e302f32332d3234203d3e20323633383232.roa
Signing time:             Tue 06 Jan 2026 19:25:20 +0000
ROA not before:           Tue 06 Jan 2026 19:20:20 +0000
ROA not after:            Tue 05 Jan 2027 19:25:20 +0000
asID:                     263822
IP address blocks:        190.103.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:19:72:69:8a:29:f0:28:23:6c:72:70:4a:b5:4a:ac:73:ed:b1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Jan  6 19:20:20 2026 GMT
            Not After : Jan  5 19:25:20 2027 GMT
        Subject: CN=B61DF588B5181C141E4C6516E88B824C83651510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:1f:d8:48:e1:c7:fe:c6:95:d2:31:79:14:
                    ee:50:9b:1a:bf:2f:7d:cb:e7:4e:5d:5a:4c:07:37:
                    09:b7:fe:f3:46:5a:ad:16:72:0e:f6:15:32:2d:89:
                    8b:63:33:14:56:a2:ed:eb:01:6f:b2:96:1d:c6:1e:
                    5b:7b:d9:78:18:88:4a:ea:6b:70:77:17:70:e4:ae:
                    25:cf:27:da:ff:30:c0:4f:f7:07:54:a7:5a:c4:a6:
                    1b:a6:dc:2b:6d:e1:0a:4a:2b:22:2a:e3:98:d1:d0:
                    34:14:bb:7f:3d:d7:e6:f5:ea:af:40:6e:c4:bb:88:
                    87:32:f0:26:f1:7a:6a:28:3a:01:09:36:9e:bd:9e:
                    96:ff:47:20:35:d1:f6:72:b4:3e:e3:2f:1f:cb:ed:
                    7c:7c:fe:c6:66:23:1a:28:bc:a7:2e:5b:4c:58:30:
                    df:1e:39:a4:26:af:84:dc:4b:cf:f1:14:66:2b:df:
                    69:88:7c:fd:88:4b:d0:cf:63:62:92:e4:0c:e2:4a:
                    1c:0c:a7:7e:f4:8a:f6:31:5b:1f:94:06:c9:c1:ec:
                    30:0c:b2:be:9d:6f:c1:08:39:64:f1:02:86:10:a3:
                    46:ec:37:22:f0:44:87:a2:8e:d4:14:89:94:f6:b6:
                    1e:4c:f9:07:f6:36:00:9f:11:61:06:dd:bf:a9:62:
                    09:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1D:F5:88:B5:18:1C:14:1E:4C:65:16:E8:8B:82:4C:83:65:15:10
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3130332e3233382e302f32332d3234203d3e20323633383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:00:2c:f5:56:8a:77:29:03:eb:96:3e:32:d3:69:cc:5c:3e:
         f8:74:1a:09:5d:9a:28:81:0b:a8:12:4d:f4:81:e7:6f:92:14:
         6e:de:97:90:73:2f:c6:7f:e9:2a:8c:64:30:13:18:eb:66:e6:
         40:12:5b:27:cc:29:39:a8:05:2a:fb:19:e7:f4:03:3c:c2:a0:
         75:7d:37:a5:60:12:e2:97:2f:c4:74:8f:be:db:b9:8e:a7:56:
         be:d7:8c:01:e5:c3:a6:3f:2b:78:ee:07:6e:72:88:dd:65:bb:
         2a:05:f0:5f:b6:ad:da:ce:cc:e8:65:e7:f3:2a:e6:c9:4b:b2:
         75:3e:96:03:5f:dc:d3:e5:7a:9d:91:d2:10:86:1f:64:1f:b5:
         1e:57:ed:03:c8:73:ca:ca:db:9b:d8:ec:ae:d0:69:72:8f:e0:
         7d:b0:ca:f3:a8:da:49:34:8f:26:25:a4:9a:77:92:be:35:a3:
         b0:85:d9:1f:35:8d:be:e6:ae:f9:38:a0:fc:76:95:13:cb:53:
         40:da:e1:ae:d6:8e:b4:06:44:af:07:56:1e:7b:08:bb:e0:75:
         a1:e3:28:71:ff:46:77:08:aa:a6:69:6c:e5:d4:74:d2:e9:3c:
         38:87:05:0e:33:be:24:fa:06:17:a4:77:61:56:b7:88:f7:16:
         da:6d:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:14 2026 by rpki-client