This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3235322e302f32322d3234203d3e20323637383736.roa
File:                     3139302e3138322e3235322e302f32322d3234203d3e20323637383736.roa (raw, json)
Hash identifier:          92sEXzFOSynhJ4N8+QHjEkAyKR/d+1vyl0qjLpYzEpI=
Subject key identifier:   60:F2:9C:F5:23:1D:85:F0:8B:9F:F0:49:0B:35:67:10:79:80:7B:98
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       614B40AA1C79E35F890C7AB0B680A0683BC212C8
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3235322e302f32322d3234203d3e20323637383736.roa
Signing time:             Tue 06 Jan 2026 19:25:21 +0000
ROA not before:           Tue 06 Jan 2026 19:20:21 +0000
ROA not after:            Tue 05 Jan 2027 19:25:21 +0000
asID:                     267876
IP address blocks:        190.182.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4b:40:aa:1c:79:e3:5f:89:0c:7a:b0:b6:80:a0:68:3b:c2:12:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Jan  6 19:20:21 2026 GMT
            Not After : Jan  5 19:25:21 2027 GMT
        Subject: CN=60F29CF5231D85F08B9FF0490B35671079807B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:c9:de:89:99:3f:14:06:a3:07:c2:67:60:
                    e2:44:33:84:59:2c:63:34:9b:74:fd:d1:7a:b1:17:
                    99:58:bb:cf:c3:2f:9a:bc:cd:42:34:f2:4e:dc:0f:
                    d4:47:58:0d:00:4c:20:80:61:d6:d4:ef:7d:be:8f:
                    42:71:15:a4:3d:8a:79:2d:5c:23:e3:f9:84:7c:28:
                    3b:9f:b5:55:5c:c0:5f:55:cc:4b:86:3d:c1:bf:45:
                    55:a1:a0:8d:a6:53:93:3d:13:1b:c5:0a:92:3e:e5:
                    07:ea:09:97:1b:a2:9c:c6:80:6f:c1:bd:b4:16:b4:
                    a9:1d:03:0a:09:7f:dd:fd:fe:b8:95:f4:f8:66:97:
                    3c:4d:9a:55:be:a8:9f:4f:53:b7:99:28:ef:68:cc:
                    ac:16:21:29:4d:60:09:b7:52:bd:31:35:04:88:68:
                    7c:d6:f6:fb:2e:3d:c0:4e:3e:ad:67:4e:15:f4:06:
                    31:6a:ab:24:f6:6d:6c:b2:c4:d9:10:ec:de:07:97:
                    e3:6f:17:97:d3:64:de:a4:7d:9a:55:7e:8e:eb:bd:
                    c0:38:c2:3a:83:e7:af:d4:5f:6f:44:dc:e4:31:74:
                    a4:69:15:be:63:c9:01:a6:6f:05:2e:66:e3:2c:3c:
                    fa:3c:36:59:75:40:d9:46:6a:fd:c9:69:1c:80:92:
                    ed:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F2:9C:F5:23:1D:85:F0:8B:9F:F0:49:0B:35:67:10:79:80:7B:98
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138322e3235322e302f32322d3234203d3e20323637383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.182.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:90:99:a1:f2:65:54:bf:bc:8a:07:9d:bf:8e:be:a1:73:1c:
         f3:a4:1c:0e:83:6b:19:41:2e:ad:4d:fa:f1:04:7c:2d:94:ae:
         6f:fe:2f:25:ed:13:f4:73:b1:b5:3e:5b:62:1a:9b:fc:bd:af:
         e7:8e:66:03:ee:08:91:a2:82:87:5b:fb:03:12:5e:b6:15:67:
         6b:f2:5e:b1:e1:1e:04:af:ff:94:29:ca:58:8f:e7:5c:6b:65:
         7b:5b:81:c7:d3:88:b0:ac:76:97:26:c6:ff:86:5e:04:d8:c0:
         3f:74:d1:27:8e:98:4a:13:3b:3a:80:6f:31:05:89:22:70:c1:
         f8:40:92:f2:47:58:9d:1c:2e:fb:bd:62:37:45:92:af:35:e4:
         0b:3b:4b:e8:c8:fb:34:dd:25:bf:4a:e2:60:da:47:8b:37:4e:
         f0:04:8f:f9:89:14:78:6d:02:a8:70:ba:29:8c:7d:e9:b0:8d:
         a2:f0:77:46:60:8a:88:73:f8:2b:ff:97:d3:f9:a2:c4:72:70:
         3a:d9:c6:b8:9a:f9:f8:8a:c8:31:1a:f8:8f:66:e1:95:e6:06:
         c6:de:d8:ff:08:14:c1:3f:fc:3a:3e:8d:9e:94:8f:97:35:25:
         ea:ac:c1:f1:ba:fa:7e:4b:2c:67:70:15:8b:b5:bc:00:fc:89:
         a6:80:13:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:08:14 2026 by rpki-client