This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139342e302f32332d3233203d3e20323635363833.roa
File:                     3139302e3138352e3139342e302f32332d3233203d3e20323635363833.roa (raw, json)
Hash identifier:          9lAzcRDBCg/wjs6l3oG6cXWu2qfedMfNIWYvt2GtBIE=
Subject key identifier:   32:4B:9B:7A:19:69:8F:7D:75:18:6E:61:89:23:90:2A:6E:4F:34:07
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       4ABB85C4E3B598A0E40154A557C13AE8EFFF57CA
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139342e302f32332d3233203d3e20323635363833.roa
Signing time:             Tue 06 Jan 2026 19:25:23 +0000
ROA not before:           Tue 06 Jan 2026 19:20:23 +0000
ROA not after:            Tue 05 Jan 2027 19:25:23 +0000
asID:                     265683
IP address blocks:        190.185.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:bb:85:c4:e3:b5:98:a0:e4:01:54:a5:57:c1:3a:e8:ef:ff:57:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Jan  6 19:20:23 2026 GMT
            Not After : Jan  5 19:25:23 2027 GMT
        Subject: CN=324B9B7A19698F7D75186E618923902A6E4F3407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:d4:93:d5:57:76:03:4c:20:66:1b:68:23:
                    a2:00:62:fe:2b:99:cb:c6:4c:0b:0d:81:a1:a0:15:
                    be:6e:c4:6b:3d:b8:e2:9f:f3:47:6d:06:90:74:e0:
                    40:cc:db:d7:40:e8:a6:c9:06:24:83:df:ca:15:e2:
                    8e:1a:0b:a3:5a:5d:f8:1b:32:b1:b5:77:9a:5a:05:
                    3c:fe:be:28:70:20:20:89:14:37:d9:39:1b:0e:26:
                    b2:f4:7a:b1:2e:2a:94:71:66:7a:4e:29:af:1e:9c:
                    ce:a5:95:14:ae:de:37:51:07:cd:08:bf:3b:64:42:
                    62:5c:60:97:cc:33:22:5d:e0:a5:f5:74:ec:f0:a9:
                    93:72:9c:f6:e7:bb:ac:da:b3:8b:b6:21:c4:10:71:
                    de:71:b8:e7:bb:bc:c5:2b:e1:56:53:9e:80:b9:cd:
                    cb:04:3b:71:e5:fc:71:fd:6b:90:83:b7:4a:c1:3d:
                    2d:2e:6e:8b:70:1b:63:8e:ce:49:c4:e6:72:0a:15:
                    ac:74:38:07:dc:fc:e6:17:00:8c:e9:26:fb:ef:79:
                    8e:b1:5a:d5:a1:3a:8a:b0:ab:e5:c5:61:bb:68:b0:
                    9f:03:5c:87:96:d5:f4:2d:f5:89:09:68:b0:6b:21:
                    11:ed:82:e1:4b:aa:37:84:17:07:b5:17:28:30:35:
                    41:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4B:9B:7A:19:69:8F:7D:75:18:6E:61:89:23:90:2A:6E:4F:34:07
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139342e302f32332d3233203d3e20323635363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:a7:0e:cf:6b:96:53:1a:df:73:06:75:33:5b:86:c1:f7:84:
         f2:2b:48:97:3a:f2:ee:c9:c9:c4:4c:ce:c2:99:e2:c5:2c:93:
         ce:27:18:57:6f:17:ae:2f:49:90:ce:36:f8:33:dc:5a:c1:05:
         1b:f6:46:c8:81:08:d2:8a:1e:0d:2c:99:22:41:8e:2e:88:7b:
         8f:19:7a:b4:a4:9a:6a:3e:6f:e2:ed:9a:f3:d8:94:a8:59:ee:
         6d:f9:2f:28:24:e0:68:8a:5f:f1:9f:d4:ac:00:b1:c9:fe:70:
         6e:67:d1:12:42:9f:e3:75:48:ac:87:12:80:91:7c:90:54:d8:
         a7:8c:14:bc:ad:2c:d6:48:57:7f:fa:05:41:14:cd:28:b5:a2:
         c0:76:a8:0d:ec:26:1c:05:ad:9d:61:ed:17:ae:c8:a6:51:a5:
         12:ea:07:b4:03:43:dd:6e:73:a5:f2:82:65:79:4b:c6:3a:b0:
         5a:b1:0d:85:87:82:b0:ae:cf:94:35:20:cc:5d:09:2a:47:cc:
         f0:23:99:d1:be:6f:ee:91:2a:bd:8f:61:1f:4d:4b:87:4e:8a:
         4b:d7:39:30:a7:80:19:d1:ec:41:84:f4:d4:3a:dc:44:d5:57:
         7e:fe:c1:c6:b6:5d:12:72:93:fa:c3:a9:79:a1:32:11:ec:32:
         f3:03:84:04
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUSruFxOO1mKDkAVSlV8E66O//V8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFDMzVCOUNGNDVCRERBQkU4MjlBOUY3OEJDMjREQzU4
QUZEN0VDQTAeFw0yNjAxMDYxOTIwMjNaFw0yNzAxMDUxOTI1MjNaMDMxMTAvBgNV
BAMTKDMyNEI5QjdBMTk2OThGN0Q3NTE4NkU2MTg5MjM5MDJBNkU0RjM0MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LtST1Vd2A0wgZhtoI6IAYv4r
mcvGTAsNgaGgFb5uxGs9uOKf80dtBpB04EDM29dA6KbJBiSD38oV4o4aC6NaXfgb
MrG1d5paBTz+vihwICCJFDfZORsOJrL0erEuKpRxZnpOKa8enM6llRSu3jdRB80I
vztkQmJcYJfMMyJd4KX1dOzwqZNynPbnu6zas4u2IcQQcd5xuOe7vMUr4VZTnoC5
zcsEO3Hl/HH9a5CDt0rBPS0ubotwG2OOzknE5nIKFax0OAfc/OYXAIzpJvvveY6x
WtWhOoqwq+XFYbtosJ8DXIeW1fQt9YkJaLBrIRHtguFLqjeEFwe1FygwNUE7AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUMkubehlpj311GG5hiSOQKm5PNAcwHwYDVR0j
BBgwFoAU8cNbnPRb3avoKan3i8JNxYr9fsowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQThEMzJEREVCNDcyN0EzNEQ3ODFFNDJGODFFMzA4NDY5
MkU5QTMyQ0EwMkM2QzUyQTVCQTQxMENFMTkwRjRCLzAvRjFDMzVCOUNGNDVCRERB
QkU4MjlBOUY3OEJDMjREQzU4QUZEN0VDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMUMzNUI5Q0Y0NUJEREFCRTgy
OUE5Rjc4QkMyNERDNThBRkQ3RUNBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E4RDMyRERFQjQ3MjdBMzRENzgxRTQyRjgxRTMwODQ2OTJFOUEzMkNB
MDJDNkM1MkE1QkE0MTBDRTE5MEY0Qi8wLzMxMzkzMDJlMzEzODM1MmUzMTM5MzQy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzUzNjM4MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+
ucIwDQYJKoZIhvcNAQELBQADggEBAD2nDs9rllMa33MGdTNbhsH3hPIrSJc68u7J
ycRMzsKZ4sUsk84nGFdvF64vSZDONvgz3FrBBRv2RsiBCNKKHg0smSJBji6Ie48Z
erSkmmo+b+LtmvPYlKhZ7m35Lygk4GiKX/Gf1KwAscn+cG5n0RJCn+N1SKyHEoCR
fJBU2KeMFLytLNZIV3/6BUEUzSi1osB2qA3sJhwFrZ1h7ReuyKZRpRLqB7QDQ91u
c6XygmV5S8Y6sFqxDYWHgrCuz5Q1IMxdCSpHzPAjmdG+b+6RKr2PYR9NS4dOikvX
OTCngBnR7EGE9NQ63ETVV37+wca2XRJyk/rDqXmhMhHsMvMDhAQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:08:38 2026 by rpki-client