This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3135302e302f32332d3234203d3e20323732383433.roa
File:                     3139302e3138352e3135302e302f32332d3234203d3e20323732383433.roa (raw, json)
Hash identifier:          rBuDU+Av2EYxMMxuICPhfuoAyI+OChZcnQwm9QgbPCE=
Subject key identifier:   6A:BE:37:D6:5C:E4:FA:51:F9:44:7E:08:D8:E2:9D:69:DB:39:17:F0
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       65C5A7C88680CD960FFD70CC168AF5932F9578A8
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3135302e302f32332d3234203d3e20323732383433.roa
Signing time:             Tue 06 Jan 2026 19:25:22 +0000
ROA not before:           Tue 06 Jan 2026 19:20:22 +0000
ROA not after:            Tue 05 Jan 2027 19:25:22 +0000
asID:                     272843
IP address blocks:        190.185.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c5:a7:c8:86:80:cd:96:0f:fd:70:cc:16:8a:f5:93:2f:95:78:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Jan  6 19:20:22 2026 GMT
            Not After : Jan  5 19:25:22 2027 GMT
        Subject: CN=6ABE37D65CE4FA51F9447E08D8E29D69DB3917F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:5a:02:74:e5:6d:04:93:fc:a2:79:6a:86:
                    1f:36:bc:b0:c5:be:33:3a:b3:75:03:c7:2f:9a:18:
                    db:01:b8:70:e7:43:7d:6f:ec:82:cd:01:76:9c:07:
                    44:5d:52:6b:76:64:36:c1:6b:1a:cf:b3:63:cc:ee:
                    18:30:43:4c:95:79:00:4c:37:75:bc:6a:7b:b2:9b:
                    29:de:cb:0b:86:88:0e:5e:39:6d:a0:6d:03:a7:3b:
                    1a:7c:b6:5a:84:c6:fb:b7:cd:1f:7d:c5:cb:f5:72:
                    ec:e7:e1:d2:cc:ec:b8:11:87:53:eb:47:f0:d7:79:
                    81:b2:0a:26:8c:14:b9:37:52:31:9d:47:b9:5f:fe:
                    db:90:ac:95:74:20:d1:0f:c3:ea:1a:ff:40:1f:19:
                    ac:e0:ca:f4:c6:46:bb:45:c2:08:3e:d0:2d:6e:76:
                    5d:c7:42:ca:50:de:f9:b8:74:0c:86:df:d8:ed:bf:
                    a3:0f:52:a7:e0:6b:ea:5a:a4:06:b3:49:2d:87:7b:
                    b3:1f:d7:f1:88:d8:c6:09:c8:10:c1:16:9d:06:d4:
                    de:6e:b8:07:8d:84:41:a9:44:bf:e5:a3:ce:98:96:
                    19:53:1b:05:0e:c2:2b:fb:77:ea:b9:f5:3f:1f:9f:
                    bc:e1:09:13:fe:9b:79:1a:6f:ff:59:9d:65:71:49:
                    c6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BE:37:D6:5C:E4:FA:51:F9:44:7E:08:D8:E2:9D:69:DB:39:17:F0
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3135302e302f32332d3234203d3e20323732383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:a8:9c:3a:ea:c5:3c:f7:e9:59:a2:b3:7e:84:30:38:9d:6d:
         88:7f:2b:79:31:42:6a:6a:13:d2:d7:1b:f2:ed:9e:78:4e:7f:
         5a:e5:e7:46:6d:93:07:fb:6e:a7:37:a0:a3:14:2e:c6:d7:30:
         f9:9b:c7:74:01:6f:16:18:76:30:51:ff:a6:52:80:e5:c2:23:
         07:c4:2f:49:b7:4c:74:89:8a:0d:2e:41:a2:5c:0b:5b:34:46:
         b7:f9:86:b4:d2:a2:4f:6d:af:cc:30:0a:2f:d4:86:54:da:db:
         15:73:27:dd:0f:9b:35:3c:53:56:45:97:96:c1:a6:e6:35:bf:
         5f:3b:fc:bb:8c:da:ce:7f:55:c2:66:29:28:30:20:ca:b4:3c:
         89:f8:20:2c:62:76:2b:7c:5f:d2:89:0c:44:10:d0:96:dc:37:
         21:8b:d5:ac:e5:0d:8c:53:43:73:53:17:e5:bc:ca:a5:7e:85:
         9e:5b:79:09:08:e3:b5:40:85:e8:b3:77:72:86:5f:e9:c3:e1:
         15:ac:a4:9d:78:72:21:85:3e:7e:39:9e:55:c8:8a:6e:29:f6:
         fc:96:7c:34:08:c6:c1:46:02:4a:b2:d4:b1:20:04:87:c2:ed:
         e9:fe:ee:75:33:47:e9:c4:78:83:bd:53:d5:0c:0a:97:e9:82:
         fc:17:20:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:52:10 2026 by rpki-client