This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139322e302f32332d3234203d3e20323637383736.roa
File:                     3139302e3138352e3139322e302f32332d3234203d3e20323637383736.roa (raw, json)
Hash identifier:          nlPiOabfF5kYVGMl+iwNegQar3wf/muERBpyzsAUsOI=
Subject key identifier:   1D:1F:B9:07:0C:9F:18:60:C2:AF:B5:1B:32:36:9A:D8:1D:28:6D:A6
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       6E3D2C1BDC5220561B110DA3332EBD62523B4D17
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139322e302f32332d3234203d3e20323637383736.roa
Signing time:             Tue 06 Jan 2026 19:25:24 +0000
ROA not before:           Tue 06 Jan 2026 19:20:24 +0000
ROA not after:            Tue 05 Jan 2027 19:25:24 +0000
asID:                     267876
IP address blocks:        190.185.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3d:2c:1b:dc:52:20:56:1b:11:0d:a3:33:2e:bd:62:52:3b:4d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Jan  6 19:20:24 2026 GMT
            Not After : Jan  5 19:25:24 2027 GMT
        Subject: CN=1D1FB9070C9F1860C2AFB51B32369AD81D286DA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5c:67:ac:e8:ab:83:b7:d5:a7:13:8d:d4:c2:
                    78:15:d7:ff:f5:6a:5a:46:08:bc:77:4e:80:04:d6:
                    f7:19:45:fe:db:f6:f0:66:fc:de:fc:4a:7f:48:d9:
                    03:bf:d4:63:ae:69:54:2c:cb:61:be:68:20:a5:cf:
                    18:bb:8f:fa:61:ef:6e:7b:46:3c:cd:38:3c:06:7b:
                    a7:ab:1a:72:ca:bd:68:9f:cb:8d:1b:0f:85:05:b4:
                    5c:fc:9a:ba:39:cf:a3:c0:c3:f3:09:84:9f:24:c7:
                    3c:92:d6:30:7f:33:e5:28:1e:b9:dd:c9:dc:e1:98:
                    02:ad:79:d5:45:08:31:e3:9c:de:89:46:63:03:c0:
                    a9:10:fc:e6:15:4f:85:a7:05:17:9e:4a:e6:c1:7b:
                    3e:21:7e:7b:cb:5a:8b:61:83:d8:06:a0:90:03:15:
                    f8:bb:fa:b2:d0:2b:11:19:95:61:da:f7:d8:23:61:
                    01:68:cd:81:e2:85:19:1f:b3:25:c7:10:95:79:24:
                    f3:66:cd:40:34:6c:a5:23:1e:8b:7b:5e:01:cc:71:
                    86:09:4f:ea:2f:e8:0a:d7:19:c8:7e:37:b1:e5:e2:
                    91:e1:84:3e:92:b3:8a:78:78:20:b4:d7:33:ad:3b:
                    d5:0a:46:40:f6:c8:e9:c2:b2:c9:fc:3b:64:99:3a:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1F:B9:07:0C:9F:18:60:C2:AF:B5:1B:32:36:9A:D8:1D:28:6D:A6
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139322e302f32332d3234203d3e20323637383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:27:6c:4c:10:f6:0e:7e:40:59:cc:ae:94:fa:e3:57:fe:76:
         76:cd:e5:14:24:93:5e:13:7b:3a:83:fc:c2:df:a3:b3:4d:73:
         f7:4a:34:c8:fe:42:cb:a1:1c:83:f1:53:27:4a:6a:6b:08:9f:
         9d:8b:7c:0f:a6:b2:6b:fe:2e:89:3b:f1:a4:3b:84:5b:9e:c0:
         26:8e:f9:8a:06:37:d0:20:9c:2c:f7:80:90:d1:e1:cd:db:22:
         b4:bc:bb:aa:e4:93:87:d9:38:58:dd:6c:f0:bf:04:aa:6c:31:
         69:27:71:07:f3:87:df:ef:58:6e:12:1c:9d:ae:81:88:5c:5a:
         41:d0:c3:ec:34:1b:f9:b8:04:0d:fa:7b:ac:c6:cc:36:51:9e:
         4e:10:b8:49:9c:40:74:e6:e1:fa:95:2e:88:77:53:74:f4:76:
         de:a9:f9:65:a1:20:b0:a6:f6:69:29:b2:bb:bf:3d:83:ea:6a:
         15:83:da:8b:c4:32:c5:76:f3:cd:1e:83:de:3a:c3:95:8d:3b:
         85:6f:36:41:ad:fc:98:f3:d9:54:08:99:52:89:c2:0f:c3:5b:
         d8:4b:1d:be:ea:c1:18:06:f8:54:a1:6b:01:5a:86:82:90:a3:
         b8:74:02:1b:85:32:63:ef:4f:c1:bd:ba:4c:6a:cf:78:a6:b4:
         08:0d:c2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:08:37 2026 by rpki-client