This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3139302e302f32342d3234203d3e20323635363833.roa
File:                     3139302e3138322e3139302e302f32342d3234203d3e20323635363833.roa (raw, json)
Hash identifier:          zCxftELdFh68vAZUE0uGBrAvTV9mFApkuALYnley3mk=
Subject key identifier:   8A:E4:A4:AF:2E:31:70:99:B3:35:00:93:3B:5E:70:13:66:2B:86:41
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       5B7A36FC03C9ABAC5382E8C30D3F478970A96F20
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3139302e302f32342d3234203d3e20323635363833.roa
Signing time:             Tue 06 Jan 2026 19:25:22 +0000
ROA not before:           Tue 06 Jan 2026 19:20:22 +0000
ROA not after:            Tue 05 Jan 2027 19:25:22 +0000
asID:                     265683
IP address blocks:        190.182.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7a:36:fc:03:c9:ab:ac:53:82:e8:c3:0d:3f:47:89:70:a9:6f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Jan  6 19:20:22 2026 GMT
            Not After : Jan  5 19:25:22 2027 GMT
        Subject: CN=8AE4A4AF2E317099B33500933B5E7013662B8641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:04:2c:a3:09:4c:7e:72:a1:85:db:35:3c:50:
                    c4:21:f5:03:57:43:83:ea:21:4c:8f:9b:da:d1:4b:
                    1b:93:9d:da:51:31:52:85:d4:26:d0:a7:0c:b5:50:
                    c2:24:40:b3:3e:19:7c:bf:dd:65:7d:16:45:1b:5a:
                    34:38:0f:8e:f7:03:eb:af:74:11:65:a8:35:91:f3:
                    57:0e:c2:78:41:03:3b:ce:9a:11:a1:77:95:e0:8d:
                    8c:cd:dd:76:52:93:eb:8f:d9:c6:b2:8b:d7:86:ee:
                    5f:fd:5d:3b:b2:66:aa:cb:93:2b:79:8b:4b:7e:61:
                    ae:97:ee:77:43:ee:4f:1c:05:1a:ca:94:83:2c:dd:
                    91:ca:ff:37:63:f1:b3:fe:fd:ed:88:c9:fc:00:d1:
                    28:9e:28:b1:64:56:33:60:9b:87:9c:17:e7:2b:08:
                    e0:6e:bf:bd:55:aa:5a:71:ff:ab:f8:96:6e:d2:11:
                    aa:20:91:ad:e5:17:64:71:05:17:7c:12:72:5b:d6:
                    8f:56:dd:ad:96:44:6a:55:4e:cb:4f:9c:21:7c:9b:
                    16:91:d3:4c:db:d3:fc:56:9e:0f:6c:44:7e:8a:ec:
                    cb:e3:5a:48:05:54:55:0b:8c:ce:2b:c9:bb:9d:20:
                    be:ae:23:a0:ad:e3:53:ad:24:f0:d9:f5:d4:41:4f:
                    e2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E4:A4:AF:2E:31:70:99:B3:35:00:93:3B:5E:70:13:66:2B:86:41
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3139302e302f32342d3234203d3e20323635363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.182.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:8e:53:51:2e:6e:cf:6e:6a:49:6c:29:88:cb:25:26:ad:a5:
         74:b3:aa:ea:a0:ce:85:3f:34:5f:60:47:08:64:9f:ea:0e:0a:
         93:cb:84:d4:7b:d3:f1:9a:50:c7:d5:9a:08:b6:f5:0c:8f:c2:
         aa:25:f7:84:a1:6e:7b:f6:bb:b1:d7:47:f6:75:fc:ea:cc:04:
         d9:c0:44:17:2a:41:ac:07:8f:4b:10:f8:89:85:2a:a0:e4:da:
         b7:88:c2:ce:d8:99:ef:15:10:66:56:5f:97:13:be:df:92:40:
         b4:04:33:6d:62:64:70:26:36:d5:e2:3e:43:7a:6a:c8:6c:8b:
         38:85:78:be:d0:d4:1a:d4:40:ba:bf:13:be:47:8f:9b:23:90:
         77:de:a9:8c:cc:1f:7e:eb:03:f5:bc:ff:51:23:a1:60:9d:9e:
         5a:0f:ee:ce:06:1e:60:a1:ae:1c:43:d7:ed:0a:43:23:c2:95:
         cc:5e:49:a5:69:9a:f5:ed:7e:36:45:a6:22:e7:2d:82:af:8b:
         72:53:4c:81:ec:cc:34:95:39:aa:49:c8:d4:17:c1:d1:cc:fa:
         cd:d1:11:08:cd:9d:84:2d:14:df:cd:c0:c8:84:c0:54:57:8f:
         3b:80:a4:26:3c:70:84:51:9f:00:22:0f:91:3e:ba:a0:45:a1:
         82:5f:b5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:52:49 2026 by rpki-client