This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235302e302f32332d3233203d3e203532323738.roa
File:                     3139302e3130352e3235302e302f32332d3233203d3e203532323738.roa (raw, json)
Hash identifier:          kYg+tcwQRPdEjwsjoEQuSiT/5ngab5csg3daATYDIxY=
Subject key identifier:   3F:82:A7:26:FB:9E:5E:51:B7:0F:B4:A0:FD:8C:D2:03:56:A7:7B:38
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       64C6D4B4E57432810360B0B25F561E9354923403
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235302e302f32332d3233203d3e203532323738.roa
Signing time:             Tue 06 Jan 2026 19:30:14 +0000
ROA not before:           Tue 06 Jan 2026 19:25:14 +0000
ROA not after:            Tue 05 Jan 2027 19:30:14 +0000
asID:                     52278
IP address blocks:        190.105.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c6:d4:b4:e5:74:32:81:03:60:b0:b2:5f:56:1e:93:54:92:34:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Jan  6 19:25:14 2026 GMT
            Not After : Jan  5 19:30:14 2027 GMT
        Subject: CN=3F82A726FB9E5E51B70FB4A0FD8CD20356A77B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2d:6d:ee:35:55:b7:00:73:29:73:98:80:fe:
                    1e:b9:61:a7:a0:e2:ba:69:da:e4:92:b2:b5:d9:f2:
                    cf:af:74:7c:93:49:ec:e8:93:ad:3e:ae:d8:de:22:
                    47:71:9b:9e:22:27:40:8e:4f:f3:fc:00:af:d7:81:
                    8d:9b:fa:fb:2b:32:8e:3d:ab:bd:c6:1f:77:71:a2:
                    2b:4e:61:4e:c5:10:6b:76:ce:53:e1:1a:a8:f6:7c:
                    c6:26:79:13:b3:73:5c:80:1d:f9:bf:81:af:97:6a:
                    d0:bd:f8:f3:d1:3c:d6:74:80:fb:1d:0e:88:55:8d:
                    3d:71:42:14:98:bd:85:62:0e:9c:9a:11:66:dc:88:
                    a4:2d:ba:f9:22:1d:f8:27:6d:61:e2:58:ed:8c:ab:
                    5a:4f:bd:7c:5c:2f:05:e7:80:41:23:5b:8a:75:a2:
                    42:ef:bf:c0:fc:43:33:9f:32:b8:5f:ca:f0:35:f2:
                    4d:95:01:50:57:45:ab:64:09:ac:f2:e1:76:e5:50:
                    97:ab:87:d0:41:64:44:ee:c2:0d:38:46:44:67:77:
                    97:55:3f:fa:fa:fb:39:3d:f8:37:9f:61:3a:89:47:
                    ef:6a:51:46:2f:46:3a:44:7f:99:55:fd:e4:39:3b:
                    96:28:a3:e8:a3:bd:b4:91:dc:c2:af:fc:fa:76:51:
                    83:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:82:A7:26:FB:9E:5E:51:B7:0F:B4:A0:FD:8C:D2:03:56:A7:7B:38
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235302e302f32332d3233203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:34:f5:a1:13:25:dc:61:78:02:14:b6:f4:d3:60:54:e9:f6:
         d7:1f:d4:95:40:d3:ad:8c:f8:7a:d3:f9:1e:19:d8:5d:9b:11:
         dd:9a:09:72:c8:10:70:8a:d1:57:13:6c:57:8c:8a:f1:22:91:
         d3:69:1a:2e:8f:61:79:d9:a4:4e:d4:5f:07:e5:93:bf:3c:49:
         93:89:e4:a5:da:33:a0:28:66:e7:63:bd:05:d8:e2:fd:26:86:
         27:94:87:8b:ce:28:1b:e7:b2:a8:ac:f4:cf:96:34:2a:25:cb:
         f8:8a:a2:64:0b:76:a3:8e:b4:a0:cd:7b:ea:7c:49:f7:ad:87:
         19:c7:00:b2:71:25:43:fd:80:95:b9:ab:75:dd:0f:7a:05:21:
         12:b1:4b:fb:d2:2c:d9:92:55:86:01:33:d1:13:37:f7:04:fb:
         ef:53:73:fa:19:0d:93:bc:b3:16:8d:53:1c:50:a2:f5:42:62:
         07:03:b0:fe:a8:3a:b1:dc:14:c6:58:ba:8c:0e:9b:9c:e6:23:
         0a:c7:a3:30:01:f5:2e:60:0d:d2:c7:0d:34:8f:53:69:e5:ae:
         d6:26:f0:b1:d0:6f:1b:d7:bc:9f:c8:84:82:64:b7:f2:e1:00:
         65:5f:da:1c:58:6d:ff:5f:68:03:53:25:71:b7:f4:bc:4f:2a:
         19:dd:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:00:15 2026 by rpki-client