This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3230362e302f32342d3234203d3e20323636383731.roa
File:                     3139302e3138352e3230362e302f32342d3234203d3e20323636383731.roa (raw, json)
Hash identifier:          YCmsGAdFp7ZTkCBi2z3M/qPMB8DgHH5vitSj0TcOOrU=
Subject key identifier:   B5:E8:7F:A0:B6:C1:DB:51:87:B2:78:03:44:86:0F:27:09:B1:1C:EA
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       2C3A5BBF3EB3156BCFFA4AD591978D969A3555C8
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3230362e302f32342d3234203d3e20323636383731.roa
Signing time:             Tue 06 Jan 2026 19:25:26 +0000
ROA not before:           Tue 06 Jan 2026 19:20:26 +0000
ROA not after:            Tue 05 Jan 2027 19:25:26 +0000
asID:                     266871
IP address blocks:        190.185.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3a:5b:bf:3e:b3:15:6b:cf:fa:4a:d5:91:97:8d:96:9a:35:55:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Jan  6 19:20:26 2026 GMT
            Not After : Jan  5 19:25:26 2027 GMT
        Subject: CN=B5E87FA0B6C1DB5187B2780344860F2709B11CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:68:f1:d0:32:2e:a5:0f:62:da:27:f6:b7:a4:
                    b1:c1:ea:4f:e9:b9:70:a5:6c:7b:32:0d:ce:e9:cd:
                    e0:c4:a6:f4:27:ef:f0:3e:11:6c:c8:5c:67:b9:e0:
                    46:47:70:96:57:99:60:74:ae:b4:9a:e9:2a:e4:49:
                    31:52:e4:b0:16:59:96:bf:79:c5:9d:14:06:88:2f:
                    57:71:8f:e1:56:1f:af:f9:8d:e2:73:39:40:85:13:
                    79:cc:2c:1b:f4:c4:4c:79:81:f5:33:db:d9:7a:56:
                    8b:43:06:70:bc:f0:46:44:b8:1c:2b:b2:52:52:c0:
                    29:1c:8b:92:cb:d9:a2:24:03:a0:7d:09:36:26:70:
                    b4:51:54:31:ca:e6:78:ec:8f:9c:c9:e8:23:f4:cd:
                    de:d4:6a:7b:7c:71:de:19:18:f9:7e:66:54:73:00:
                    24:cb:fe:8e:a9:e9:2b:ad:2a:bd:63:21:89:78:9d:
                    70:fe:0d:14:94:86:2e:1a:5f:d2:f3:13:56:a2:de:
                    dc:73:82:0a:da:c7:d2:c5:9b:19:04:ff:09:c6:20:
                    b1:f8:9e:1e:75:5e:4e:4f:f1:59:fc:ff:fd:fe:89:
                    66:cd:f6:6c:fe:a9:27:58:1b:ff:1e:40:ab:64:df:
                    4e:f7:75:2a:97:77:fe:38:ec:d3:4f:f7:06:1a:e7:
                    bc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E8:7F:A0:B6:C1:DB:51:87:B2:78:03:44:86:0F:27:09:B1:1C:EA
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3230362e302f32342d3234203d3e20323636383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:e2:94:ae:cd:74:96:f8:17:9e:03:80:3b:5a:4c:f2:fe:09:
         4c:56:2f:9d:57:25:fa:c1:cd:a4:da:52:6f:83:32:8c:43:2b:
         d9:57:5a:62:af:88:3d:a5:90:4e:2c:cf:a8:e3:81:80:33:5a:
         1f:6c:37:5f:28:e8:94:21:ba:34:ed:84:a8:c1:d4:11:11:e1:
         f8:01:eb:9b:7f:55:db:50:01:13:ea:d4:4d:ad:62:4f:bb:69:
         b8:cf:a2:ac:49:cb:98:61:7b:fd:af:5a:c7:33:c6:c5:94:46:
         3d:37:da:b6:0b:8c:01:5b:82:e9:d7:c5:12:c7:8a:2a:ab:2a:
         10:42:15:35:b9:a6:cc:c8:58:47:3a:2b:46:74:0a:fd:62:08:
         f2:8c:f3:9a:3d:fa:c2:47:cd:83:93:1b:f8:18:7b:41:8d:61:
         cb:58:df:a7:22:95:db:0b:fd:56:38:d3:12:9f:e9:21:de:ba:
         8e:c9:3a:08:36:64:35:69:1d:a1:55:af:65:6f:08:04:22:70:
         3b:dd:2c:30:95:12:39:a2:2d:12:98:93:b3:1e:75:66:17:41:
         32:99:ee:92:e2:15:49:0f:50:a1:47:48:13:e9:88:82:b4:cf:
         50:cd:0c:d1:47:b0:9d:a7:17:f4:e2:94:0b:2a:5d:36:b7:d2:
         6b:1e:e2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:08:06 2026 by rpki-client