This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3135342e302f32342d3234203d3e203532323333.roa
File:                     3139302e342e3135342e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          DPfK6lcTlQ5gVWl4i6KL+i4V6y6x+OSZhAPVoiMn4mo=
Subject key identifier:   FF:B1:8F:FC:DC:F9:7B:8D:50:0B:22:93:55:94:78:A3:91:AB:CE:E3
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       6DD365005FDBC2B1E900124267E02586843292BC
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3135342e302f32342d3234203d3e203532323333.roa
Signing time:             Tue 06 Jan 2026 19:43:16 +0000
ROA not before:           Tue 06 Jan 2026 19:38:16 +0000
ROA not after:            Tue 05 Jan 2027 19:43:16 +0000
asID:                     52233
IP address blocks:        190.4.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d3:65:00:5f:db:c2:b1:e9:00:12:42:67:e0:25:86:84:32:92:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Jan  6 19:38:16 2026 GMT
            Not After : Jan  5 19:43:16 2027 GMT
        Subject: CN=FFB18FFCDCF97B8D500B2293559478A391ABCEE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:78:7a:e6:6d:99:8c:4d:bb:44:c8:42:21:
                    8f:5d:28:65:0c:75:0e:c3:56:8e:7f:bd:28:5c:47:
                    b4:0a:5f:8b:e2:41:9d:22:a9:71:48:50:dd:48:6f:
                    af:34:ed:90:26:e8:45:db:31:a0:e6:3a:4f:18:22:
                    ab:a0:b9:e0:e0:9e:11:43:a6:01:c6:12:65:6e:e2:
                    d9:d7:ec:dd:ef:72:d1:a0:77:d1:d0:a7:6d:f3:b6:
                    41:ce:a4:77:c7:44:c0:15:6a:9f:ca:96:1c:15:2d:
                    af:aa:d1:7d:de:fe:f1:a7:fa:ce:77:fc:89:94:e9:
                    99:2c:eb:d5:6b:69:c6:c3:6e:f4:e6:4a:ac:bd:ce:
                    39:6f:97:c0:a5:84:3b:2c:c5:f5:48:df:91:ef:7f:
                    ee:f5:cb:08:14:9a:ba:e5:0e:f6:03:e0:48:4d:0a:
                    98:f7:a1:98:51:41:fb:26:62:b4:f5:86:5d:ba:b4:
                    70:bf:c2:bb:d7:66:38:17:20:52:2e:8d:55:40:d2:
                    5c:49:70:26:99:bf:22:74:7a:c9:30:b7:64:ed:46:
                    44:b7:34:62:7b:23:46:55:62:f8:1e:99:ae:67:61:
                    2f:e5:46:91:51:fd:f6:8b:d5:0e:3c:fe:b2:24:03:
                    c8:c4:27:4b:0f:a2:65:a8:08:a5:be:61:ba:33:79:
                    16:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B1:8F:FC:DC:F9:7B:8D:50:0B:22:93:55:94:78:A3:91:AB:CE:E3
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3135342e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:cb:41:ca:d0:a3:95:b1:5f:c8:6e:b3:f3:3b:08:f3:eb:89:
         18:1f:f9:eb:2c:5e:86:c1:55:5a:71:44:2a:30:04:cf:e1:de:
         d2:82:20:0a:0d:89:ac:81:84:cd:ee:2a:e7:a6:2b:cd:65:22:
         40:43:c0:bc:39:fb:46:97:f9:95:2a:a1:a7:1b:87:8e:ac:8f:
         13:44:75:a5:35:ad:fc:ac:1d:8e:05:06:74:b2:a6:53:0d:41:
         b6:e0:73:dc:e7:60:ca:04:78:32:01:38:0a:ae:c0:23:f2:30:
         65:47:6b:c0:4e:a9:69:42:95:5d:ae:db:49:d9:3e:7e:01:ec:
         01:24:1c:a9:cc:80:33:ba:6c:f9:13:c0:a9:bc:3e:b9:1c:07:
         51:e1:53:a6:ef:87:c2:6b:66:29:32:94:fe:7e:d3:d1:69:d9:
         9a:c3:6c:81:eb:48:b9:81:8a:99:f7:c7:29:76:34:6a:40:97:
         aa:cc:d1:53:51:1e:d5:b2:2e:37:44:56:e9:55:bc:6d:6b:1e:
         5c:ae:77:05:cd:11:69:a5:7c:3f:b0:cd:61:35:ce:00:01:b2:
         9f:f8:ce:91:b9:bf:24:c7:19:ae:56:2f:30:1b:69:af:37:92:
         76:54:23:34:f0:c6:1e:13:3d:92:a8:43:dc:3a:86:c2:c4:9e:
         11:a5:80:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:53 2026 by rpki-client