This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3139322e3133362e34322e302f32342d3234203d3e20323637373937.roa
File:                     3139322e3133362e34322e302f32342d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          1RiO5XRYUCa18+mnZCYINAi4RCManrmX1Y2/65llLMo=
Subject key identifier:   2D:12:DF:EB:D1:25:9C:AC:82:65:A1:07:51:BF:05:F1:71:6D:3D:C9
Certificate issuer:       /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial:       42B54AA357384638C580E4692B600B9B82C21089
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3139322e3133362e34322e302f32342d3234203d3e20323637373937.roa
Signing time:             Wed 14 Jan 2026 00:00:25 +0000
ROA not before:           Tue 13 Jan 2026 23:55:25 +0000
ROA not after:            Wed 13 Jan 2027 00:00:25 +0000
asID:                     267797
IP address blocks:        192.136.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b5:4a:a3:57:38:46:38:c5:80:e4:69:2b:60:0b:9b:82:c2:10:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
        Validity
            Not Before: Jan 13 23:55:25 2026 GMT
            Not After : Jan 13 00:00:25 2027 GMT
        Subject: CN=2D12DFEBD1259CAC8265A10751BF05F1716D3DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:95:77:ee:49:1d:c6:c3:b4:6c:22:b2:58:db:
                    19:05:e0:e1:ae:5a:32:43:56:b8:56:90:39:14:a6:
                    da:cc:5f:f6:39:f8:92:7c:10:7c:57:ef:b7:f4:1b:
                    7e:21:8d:d0:f1:a7:81:40:06:04:5b:cc:c1:bd:5a:
                    50:ef:f6:0d:ca:1e:87:73:8b:06:26:ab:e7:b0:4d:
                    eb:4a:dd:e4:26:b3:71:30:e0:ce:67:07:38:d9:66:
                    a9:5f:7c:c4:ea:6f:27:de:df:5b:74:92:1d:3a:30:
                    c4:ab:1d:3b:47:d9:08:3b:07:23:d4:a0:ff:22:f2:
                    f8:7f:43:31:4d:8f:d4:fd:cb:c1:fa:03:18:e2:1f:
                    6c:01:f8:2a:31:2e:f7:c0:f3:f8:8c:dc:b3:d0:c7:
                    93:77:18:aa:27:02:a6:98:16:64:0d:6c:cd:33:b5:
                    58:d9:7d:40:94:66:be:6c:cb:9a:16:bb:d4:2c:9d:
                    49:ee:1a:57:ee:80:6c:50:53:a7:5c:83:6c:5d:d2:
                    6c:30:95:a1:80:b5:96:7e:61:8e:e2:15:17:21:e2:
                    a9:27:5b:3b:8e:1c:35:a9:88:a8:e4:e7:af:a8:37:
                    63:5d:32:67:d8:07:ca:e8:2b:0b:7f:f7:69:59:60:
                    b8:21:f0:f9:fb:6a:3e:cc:21:c7:38:c9:9d:39:9c:
                    44:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:12:DF:EB:D1:25:9C:AC:82:65:A1:07:51:BF:05:F1:71:6D:3D:C9
            X509v3 Authority Key Identifier:
                keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3139322e3133362e34322e302f32342d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:ae:fd:28:d8:7f:fb:97:41:1b:17:fa:a9:5c:3c:cd:a8:b8:
         80:42:d0:52:a6:21:59:31:a0:0d:34:69:f1:8d:ae:79:4b:ce:
         10:fa:12:d5:ea:01:38:9f:64:e3:3f:a3:f3:c4:55:b5:1f:b2:
         e4:c4:bb:1f:70:68:e6:32:94:0a:bf:6a:67:40:ac:3b:1f:41:
         4d:55:38:17:f1:3f:b3:81:a0:0b:1d:e0:35:83:9c:83:42:35:
         cc:a1:0b:7a:2f:e6:36:26:a1:80:c0:6a:7e:0c:ef:90:50:dc:
         06:64:34:50:71:aa:23:cb:42:f8:59:45:e1:ed:ce:5a:8f:9f:
         f4:1e:29:86:2f:22:20:e6:a3:3d:7f:f8:82:1f:f5:85:01:1b:
         e7:41:92:e1:47:9b:98:8d:7b:ea:4e:19:e4:02:cd:a0:88:ca:
         43:83:26:19:a4:cf:f5:c0:b3:51:1e:f5:9c:e6:20:3b:ee:72:
         b4:8a:fc:b4:11:4a:17:07:ff:7a:78:1d:45:b9:ca:61:96:9f:
         f8:66:1f:5a:29:2c:96:6e:73:2b:97:ee:ee:1f:9f:9f:33:87:
         fb:0b:4e:b4:00:7d:60:59:e5:af:10:fd:fa:fa:39:56:8e:d1:
         61:4a:6d:be:9a:3d:26:dd:2a:f8:b8:80:0a:41:f0:7b:f6:87:
         f5:88:45:4d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQrVKo1c4RjjFgORpK2ALm4LCEIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIzRkIwNjgwOTM2MkQ5MEVEODJGNEEzNjBCREVFM0ZC
MzAzQzAzRDAeFw0yNjAxMTMyMzU1MjVaFw0yNzAxMTMwMDAwMjVaMDMxMTAvBgNV
BAMTKDJEMTJERkVCRDEyNTlDQUM4MjY1QTEwNzUxQkYwNUYxNzE2RDNEQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDklXfuSR3Gw7RsIrJY2xkF4OGu
WjJDVrhWkDkUptrMX/Y5+JJ8EHxX77f0G34hjdDxp4FABgRbzMG9WlDv9g3KHodz
iwYmq+ewTetK3eQms3Ew4M5nBzjZZqlffMTqbyfe31t0kh06MMSrHTtH2Qg7ByPU
oP8i8vh/QzFNj9T9y8H6AxjiH2wB+CoxLvfA8/iM3LPQx5N3GKonAqaYFmQNbM0z
tVjZfUCUZr5sy5oWu9QsnUnuGlfugGxQU6dcg2xd0mwwlaGAtZZ+YY7iFRch4qkn
WzuOHDWpiKjk56+oN2NdMmfYB8roKwt/92lZYLgh8Pn7aj7MIcc4yZ05nEQHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQULRLf69ElnKyCZaEHUb8F8XFtPckwHwYDVR0j
BBgwFoAUGz+waAk2LZDtgvSjYL3uP7MDwD0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjg1Q0ZFNDMzNjBEM0MwNUQxQTExMDdFN0RGQTUzMkM5
QjJGNjgyNUJGMTJCQUExMjIzNUREMTU4NDJBQ0RGLzAvMUIzRkIwNjgwOTM2MkQ5
MEVEODJGNEEzNjBCREVFM0ZCMzAzQzAzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjNGQjA2ODA5MzYyRDkwRUQ4
MkY0QTM2MEJERUUzRkIzMDNDMDNELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTY4NUNGRTQzMzYwRDNDMDVEMUExMTA3RTdERkE1MzJDOUIyRjY4MjVC
RjEyQkFBMTIyMzVERDE1ODQyQUNERi8wLzMxMzkzMjJlMzEzMzM2MmUzNDMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzczOTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIgq
MA0GCSqGSIb3DQEBCwUAA4IBAQC2rv0o2H/7l0EbF/qpXDzNqLiAQtBSpiFZMaAN
NGnxja55S84Q+hLV6gE4n2TjP6PzxFW1H7LkxLsfcGjmMpQKv2pnQKw7H0FNVTgX
8T+zgaALHeA1g5yDQjXMoQt6L+Y2JqGAwGp+DO+QUNwGZDRQcaojy0L4WUXh7c5a
j5/0HimGLyIg5qM9f/iCH/WFARvnQZLhR5uYjXvqThnkAs2giMpDgyYZpM/1wLNR
HvWc5iA77nK0ivy0EUoXB/96eB1Fucphlp/4Zh9aKSyWbnMrl+7uH5+fM4f7C060
AH1gWeWvEP36+jlWjtFhSm2+mj0m3Sr4uIAKQfB79of1iEVN
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:24:34 2026 by rpki-client