This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/3139302e382e3138342e302f32312d3234203d3e203532343733.roa
File:                     3139302e382e3138342e302f32312d3234203d3e203532343733.roa (raw, json)
Hash identifier:          GJg5HH0X7lC4CpjlH1R9JrSaSArILL+MuCk+imXSEL0=
Subject key identifier:   3C:36:A3:6C:85:75:D3:16:9F:7A:7E:BA:D4:30:23:55:AF:C0:20:18
Certificate issuer:       /CN=D7363F403DF6F6AE0C574D827665A0235A1DED01
Certificate serial:       72F9DB19D0FDB8D616DC980C93FD15BBC8A50187
Authority key identifier: D7:36:3F:40:3D:F6:F6:AE:0C:57:4D:82:76:65:A0:23:5A:1D:ED:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/3139302e382e3138342e302f32312d3234203d3e203532343733.roa
Signing time:             Tue 06 Jan 2026 19:28:51 +0000
ROA not before:           Tue 06 Jan 2026 19:23:51 +0000
ROA not after:            Tue 05 Jan 2027 19:28:51 +0000
asID:                     52473
IP address blocks:        190.8.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f9:db:19:d0:fd:b8:d6:16:dc:98:0c:93:fd:15:bb:c8:a5:01:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7363F403DF6F6AE0C574D827665A0235A1DED01
        Validity
            Not Before: Jan  6 19:23:51 2026 GMT
            Not After : Jan  5 19:28:51 2027 GMT
        Subject: CN=3C36A36C8575D3169F7A7EBAD4302355AFC02018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:c4:49:5b:14:b8:1b:79:a3:68:95:b6:b8:
                    e0:6c:2f:90:a5:cc:62:88:cd:d7:05:a3:73:f7:24:
                    43:1c:b1:dd:60:56:c5:5b:ac:21:e0:ba:b8:8c:1f:
                    c5:9a:5f:ee:cb:aa:b4:ec:98:75:c1:01:20:06:ec:
                    70:d5:02:0f:a4:81:6a:fb:1a:d4:6e:7b:e4:54:ac:
                    87:21:a3:5a:27:3e:16:13:74:b4:e5:6d:d3:cd:6d:
                    29:55:14:2d:b2:8a:12:50:e6:5e:9b:23:5f:51:39:
                    9e:6d:61:ee:8c:9c:07:77:de:59:af:55:c6:4c:5b:
                    ed:c5:34:a3:7b:a6:e8:2c:a7:cd:b9:e0:2b:cb:b8:
                    4c:ef:86:69:10:5f:50:fc:ae:2b:21:75:c0:a6:29:
                    ce:19:2d:7c:cb:88:ee:6e:00:b7:00:81:a1:7c:30:
                    19:3d:98:2d:f1:07:ae:af:1d:55:72:6a:bc:e1:a4:
                    d3:a8:60:28:82:d0:ea:a9:c8:7d:a0:b4:fd:cb:88:
                    33:bf:0c:9e:34:5d:66:55:d0:31:58:4a:c3:ea:1f:
                    89:b0:30:24:64:c7:ec:23:cf:dc:9f:5f:55:dd:aa:
                    de:cf:ab:e6:e9:71:9d:9b:ee:18:b3:86:65:48:91:
                    82:b8:67:25:e3:20:32:d3:c7:9f:89:d8:da:ce:b9:
                    4f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:36:A3:6C:85:75:D3:16:9F:7A:7E:BA:D4:30:23:55:AF:C0:20:18
            X509v3 Authority Key Identifier:
                keyid:D7:36:3F:40:3D:F6:F6:AE:0C:57:4D:82:76:65:A0:23:5A:1D:ED:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7363F403DF6F6AE0C574D827665A0235A1DED01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6AF8A3BDFA13AD42DB6426EA43E432D91BED8ABB9E338D4770C125210FAF6DB4/0/3139302e382e3138342e302f32312d3234203d3e203532343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:97:8e:3f:ef:10:36:cd:97:0f:21:aa:d0:8a:50:1c:a3:17:
         9b:c9:d9:66:db:53:d5:fd:c7:ef:23:8a:34:c6:1c:3d:a4:d3:
         a1:7c:21:cd:3c:0d:7e:1d:79:aa:3a:71:87:17:0b:b5:ca:e1:
         07:68:cc:c6:c5:5b:d7:ff:c1:bc:80:1c:17:54:cf:62:2e:f9:
         a2:c7:ac:9e:e1:76:9b:d7:1f:87:49:4d:f7:c4:b2:63:08:b5:
         7d:e7:fb:04:91:c4:06:31:4d:c6:7a:54:4b:86:d2:bf:4c:b8:
         5a:0b:03:5a:62:e4:22:9e:0c:2a:ac:2c:43:cf:de:90:8a:06:
         ae:16:41:e0:2e:99:7d:03:f0:5a:61:51:70:f2:7c:f1:4b:fd:
         63:e2:67:74:b7:3d:24:40:26:da:b3:52:47:bc:d9:56:d0:c2:
         d7:8e:33:e6:1f:cd:45:75:87:1f:3e:03:0f:f5:85:b4:91:5d:
         58:c2:d4:92:1a:78:e0:76:2c:54:ca:67:9f:39:fe:f7:21:60:
         6d:e9:0b:35:ee:b3:de:99:bf:fa:dc:31:da:43:16:c8:3e:d7:
         d5:f4:92:6c:84:ea:55:a0:b6:87:7b:cd:cc:2a:21:e4:4b:78:
         e6:8a:5c:bc:1e:09:ef:17:72:13:2e:6e:bc:76:d6:20:bd:29:
         dc:cb:39:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:18:06 2026 by rpki-client