This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3137362e302f32332d3234203d3e20323635363833.roa
File:                     3139302e3138322e3137362e302f32332d3234203d3e20323635363833.roa (raw, json)
Hash identifier:          76XXcjC2VRmkr8xBuxdxyO6rOo74hUPg4jYQiN4dArU=
Subject key identifier:   6C:B1:37:2C:21:8E:40:B5:9D:BA:F7:DF:8C:2B:9B:0E:63:1D:73:D3
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       506D97FF607E618EFD8083CBB031483B107A445E
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3137362e302f32332d3234203d3e20323635363833.roa
Signing time:             Tue 06 Jan 2026 19:25:22 +0000
ROA not before:           Tue 06 Jan 2026 19:20:22 +0000
ROA not after:            Tue 05 Jan 2027 19:25:22 +0000
asID:                     265683
IP address blocks:        190.182.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6d:97:ff:60:7e:61:8e:fd:80:83:cb:b0:31:48:3b:10:7a:44:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Jan  6 19:20:22 2026 GMT
            Not After : Jan  5 19:25:22 2027 GMT
        Subject: CN=6CB1372C218E40B59DBAF7DF8C2B9B0E631D73D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:34:2d:27:d7:99:22:30:df:26:78:3b:e9:
                    e5:3f:b1:21:f1:a1:f6:3f:e0:cf:06:34:32:dd:9d:
                    19:99:89:a9:38:81:3c:d6:23:7f:1e:11:6e:07:c5:
                    dc:da:62:15:21:aa:21:67:b4:8e:c0:83:57:e1:7e:
                    9b:8b:78:a0:5a:0d:9a:de:ae:76:24:2c:fd:11:39:
                    51:53:98:d7:e8:ef:6e:90:f5:14:eb:f5:d3:4a:e9:
                    7c:fb:ef:90:c5:47:7f:04:74:44:7b:df:59:a0:fb:
                    e8:f1:2c:0c:8f:3e:2a:ec:3f:d4:72:5a:e3:a6:82:
                    53:3c:ba:ff:82:76:bc:56:c4:f6:fb:0c:bc:d8:d7:
                    d3:52:64:31:a3:2e:d7:bb:c0:4f:52:33:b5:14:fd:
                    5a:03:6f:e3:e7:e9:cb:35:fa:17:dd:44:1e:5d:cb:
                    85:93:b9:0d:d0:01:fb:6a:27:3d:e7:a2:6f:5c:fc:
                    69:ac:ce:df:74:0f:d5:da:f2:d6:57:a0:26:85:63:
                    1f:1a:15:bb:1a:ea:41:08:f5:4c:e7:67:63:5b:ef:
                    7e:4e:81:4e:a1:59:32:25:1f:1b:20:ce:9d:bd:5c:
                    fc:4e:2e:f0:04:b8:0f:2d:4d:d3:26:75:cb:95:16:
                    64:9a:8f:38:00:6c:14:ff:9c:c2:a9:44:72:89:3f:
                    d4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B1:37:2C:21:8E:40:B5:9D:BA:F7:DF:8C:2B:9B:0E:63:1D:73:D3
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3137362e302f32332d3234203d3e20323635363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.182.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:2f:dc:c5:e4:4a:41:22:4f:9e:3a:2b:42:ad:9a:d3:ef:36:
         b1:32:e0:b4:b1:5d:a3:5a:7f:4a:c3:a5:1f:fe:0d:af:fa:e7:
         70:94:de:39:7e:97:3e:b2:31:9c:dc:02:a5:be:b7:84:a9:38:
         98:61:31:49:52:84:5f:2b:2e:9e:ef:7e:00:47:8b:5e:be:d0:
         cd:19:31:a9:87:85:9e:bb:5f:a5:0d:15:30:41:27:8e:76:cb:
         cb:1b:35:15:5d:c6:56:0d:e2:05:71:ff:6c:36:50:78:08:37:
         e3:68:f7:0c:79:ff:3f:15:0d:5a:89:79:6a:3b:e3:47:86:b4:
         d1:64:cf:c7:9e:f9:f2:10:d9:57:f4:09:4f:73:1f:d9:46:3f:
         e7:b4:f9:17:4b:b6:1e:3d:32:41:51:10:2a:32:9d:08:86:e6:
         04:43:6c:20:1d:a2:21:62:dc:31:e3:eb:0f:85:ef:bc:e8:3f:
         01:e3:14:e1:ff:1f:db:35:a1:5b:52:b0:ae:e5:e8:4a:67:73:
         a2:96:85:64:7c:c0:ba:c9:cb:f8:d6:18:26:30:46:e0:0c:0e:
         7a:22:d2:b8:8b:3a:d1:4f:c6:b5:62:5b:4b:83:05:fe:7c:fb:
         3e:90:a4:77:09:5c:ae:ae:28:20:c4:3d:57:8b:5f:ed:ef:d0:
         54:5e:d9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:52:52 2026 by rpki-client