This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139362e302f32332d3234203d3e20323635363833.roa
File:                     3139302e3138352e3139362e302f32332d3234203d3e20323635363833.roa (raw, json)
Hash identifier:          uNTLJWaaSa7ERsyZ5aZYyNU7Wv4vulJDuftUucy0wpI=
Subject key identifier:   7E:B7:0B:FF:00:C0:30:3F:4B:93:8A:8C:DC:33:76:53:C2:45:04:D8
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       0BDB55A0FE778C3ECD21A34DE6D3143938F54CBB
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139362e302f32332d3234203d3e20323635363833.roa
Signing time:             Tue 06 Jan 2026 19:25:25 +0000
ROA not before:           Tue 06 Jan 2026 19:20:25 +0000
ROA not after:            Tue 05 Jan 2027 19:25:25 +0000
asID:                     265683
IP address blocks:        190.185.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:db:55:a0:fe:77:8c:3e:cd:21:a3:4d:e6:d3:14:39:38:f5:4c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Jan  6 19:20:25 2026 GMT
            Not After : Jan  5 19:25:25 2027 GMT
        Subject: CN=7EB70BFF00C0303F4B938A8CDC337653C24504D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:c5:55:2a:49:c8:5e:43:2f:ba:43:f1:29:
                    e3:e8:b7:cf:1c:be:70:0a:45:35:0c:65:c5:aa:2b:
                    fa:39:c2:be:4f:d6:97:4c:77:81:a1:b5:b9:89:dc:
                    8e:de:eb:6b:98:39:23:e7:f7:87:9a:95:67:20:fb:
                    22:fb:c3:3e:10:c3:03:e9:07:a9:e0:f9:da:76:de:
                    ab:8e:e1:08:73:8e:fd:16:7a:7e:d2:88:8d:34:b8:
                    60:4d:e3:25:dc:d9:20:e2:38:27:9e:85:1e:08:40:
                    36:78:ab:a5:7b:be:16:70:40:82:e2:bf:40:78:b7:
                    8d:a3:99:c5:1d:fd:06:99:78:31:c6:5d:fe:ec:fd:
                    c6:ed:fa:9e:96:06:01:09:50:af:26:99:fc:e7:b4:
                    74:cd:89:c9:ed:b6:a7:89:6c:98:71:2c:b3:77:1b:
                    3c:e1:9f:eb:24:7f:be:b2:18:83:af:0a:3a:6d:5a:
                    94:a1:ea:4d:fc:57:88:a9:fd:29:5b:b2:83:db:d0:
                    9f:e5:71:f1:69:d9:5d:ae:f8:31:02:c5:2f:15:5e:
                    7b:56:74:04:44:a0:34:2c:ef:17:c6:4d:65:ef:85:
                    3a:3c:98:5b:d1:24:a5:c6:31:16:d1:6b:d8:a0:7a:
                    b1:08:ea:e1:9c:1d:26:33:7a:42:38:da:fe:be:50:
                    b7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B7:0B:FF:00:C0:30:3F:4B:93:8A:8C:DC:33:76:53:C2:45:04:D8
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139362e302f32332d3234203d3e20323635363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:98:fc:6c:da:2f:fe:ba:bc:13:7e:a7:58:f1:b3:7a:9f:c5:
         da:96:bb:df:78:38:b9:ef:47:cb:d5:7b:da:51:0d:cf:ed:b3:
         5c:32:17:a1:cb:19:23:55:ac:4a:ce:39:8d:c1:69:01:64:c8:
         33:5b:a5:c3:c2:65:aa:e2:73:99:18:73:f6:00:24:8d:ac:f1:
         33:ae:5c:1a:ea:69:18:67:2b:86:02:27:18:8b:b5:0b:8a:07:
         c1:29:52:76:3b:b8:fe:85:d5:b7:84:d4:50:9e:40:10:af:e7:
         0a:5c:03:7b:6c:33:aa:fb:a2:7f:52:da:0d:c7:1e:56:80:1e:
         72:d2:09:a8:f8:fd:8b:5c:5d:57:f8:5c:01:a9:dd:16:9c:26:
         59:58:bf:aa:34:90:45:2d:82:39:2c:51:a1:b6:71:18:fd:6f:
         f3:2a:7c:ac:22:9a:85:60:3b:de:79:59:5d:8f:67:4a:ca:fc:
         16:75:18:ad:db:59:f9:74:93:6c:0d:4f:e0:85:54:8e:9b:40:
         26:9e:8d:8f:76:7c:6b:91:c6:a7:41:c4:28:aa:de:2f:3d:83:
         34:70:c3:2a:11:36:ba:ff:1f:d5:45:74:51:e1:5a:87:ac:63:
         cc:83:7a:d6:f6:c5:b9:2a:25:cd:be:61:10:cc:c5:97:9d:94:
         ad:ab:ed:d7
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUC9tVoP53jD7NIaNN5tMUOTj1TLswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFDMzVCOUNGNDVCRERBQkU4MjlBOUY3OEJDMjREQzU4
QUZEN0VDQTAeFw0yNjAxMDYxOTIwMjVaFw0yNzAxMDUxOTI1MjVaMDMxMTAvBgNV
BAMTKDdFQjcwQkZGMDBDMDMwM0Y0QjkzOEE4Q0RDMzM3NjUzQzI0NTA0RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs6cVVKknIXkMvukPxKePot88c
vnAKRTUMZcWqK/o5wr5P1pdMd4GhtbmJ3I7e62uYOSPn94ealWcg+yL7wz4QwwPp
B6ng+dp23quO4Qhzjv0Wen7SiI00uGBN4yXc2SDiOCeehR4IQDZ4q6V7vhZwQILi
v0B4t42jmcUd/QaZeDHGXf7s/cbt+p6WBgEJUK8mmfzntHTNicnttqeJbJhxLLN3
Gzzhn+skf76yGIOvCjptWpSh6k38V4ip/SlbsoPb0J/lcfFp2V2u+DECxS8VXntW
dAREoDQs7xfGTWXvhTo8mFvRJKXGMRbRa9igerEI6uGcHSYzekI42v6+ULcNAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUfrcL/wDAMD9Lk4qM3DN2U8JFBNgwHwYDVR0j
BBgwFoAU8cNbnPRb3avoKan3i8JNxYr9fsowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQThEMzJEREVCNDcyN0EzNEQ3ODFFNDJGODFFMzA4NDY5
MkU5QTMyQ0EwMkM2QzUyQTVCQTQxMENFMTkwRjRCLzAvRjFDMzVCOUNGNDVCRERB
QkU4MjlBOUY3OEJDMjREQzU4QUZEN0VDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMUMzNUI5Q0Y0NUJEREFCRTgy
OUE5Rjc4QkMyNERDNThBRkQ3RUNBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E4RDMyRERFQjQ3MjdBMzRENzgxRTQyRjgxRTMwODQ2OTJFOUEzMkNB
MDJDNkM1MkE1QkE0MTBDRTE5MEY0Qi8wLzMxMzkzMDJlMzEzODM1MmUzMTM5MzYy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzUzNjM4MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+
ucQwDQYJKoZIhvcNAQELBQADggEBACaY/GzaL/66vBN+p1jxs3qfxdqWu994OLnv
R8vVe9pRDc/ts1wyF6HLGSNVrErOOY3BaQFkyDNbpcPCZaric5kYc/YAJI2s8TOu
XBrqaRhnK4YCJxiLtQuKB8EpUnY7uP6F1beE1FCeQBCv5wpcA3tsM6r7on9S2g3H
HlaAHnLSCaj4/YtcXVf4XAGp3RacJllYv6o0kEUtgjksUaG2cRj9b/MqfKwimoVg
O955WV2PZ0rK/BZ1GK3bWfl0k2wNT+CFVI6bQCaejY92fGuRxqdBxCiq3i89gzRw
wyoRNrr/H9VFdFHhWoesY8yDetb2xbkqJc2+YRDMxZedlK2r7dc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:52:40 2026 by rpki-client