This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3139302e3134322e302e302f31362d3234203d3e203231383236.roa
File:                     3139302e3134322e302e302f31362d3234203d3e203231383236.roa (raw, json)
Hash identifier:          n3AJp61F5KldnbHCd25Sg5LDdT9ir9vwBY0lPqOk7fA=
Subject key identifier:   F2:46:8F:D9:1F:31:94:42:FA:CD:2D:51:40:74:2E:40:F5:2B:5D:C2
Certificate issuer:       /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial:       75E48ADA6C6AD68E669BCC30F4D805AC6D7BF57C
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3139302e3134322e302e302f31362d3234203d3e203231383236.roa
Signing time:             Tue 06 Jan 2026 19:37:44 +0000
ROA not before:           Tue 06 Jan 2026 19:32:44 +0000
ROA not after:            Tue 05 Jan 2027 19:37:44 +0000
asID:                     21826
IP address blocks:        190.142.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e4:8a:da:6c:6a:d6:8e:66:9b:cc:30:f4:d8:05:ac:6d:7b:f5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
        Validity
            Not Before: Jan  6 19:32:44 2026 GMT
            Not After : Jan  5 19:37:44 2027 GMT
        Subject: CN=F2468FD91F319442FACD2D5140742E40F52B5DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:92:cf:fc:b9:bd:71:e7:88:59:d0:a7:10:
                    e2:ba:88:85:f3:f9:70:31:15:b1:d2:78:89:2e:fb:
                    26:ba:13:ee:73:f9:96:5d:7a:3d:1f:dd:5c:7d:8a:
                    4c:0c:dc:99:49:b9:94:90:2a:82:e8:04:58:70:35:
                    3d:7e:46:5e:1d:48:5c:9e:6d:37:a0:2d:49:e1:27:
                    04:23:a6:62:fd:54:65:a5:b1:d0:23:5d:7c:e3:b5:
                    76:d3:0a:56:8c:a2:ad:f6:3d:b1:92:01:8c:2e:40:
                    16:e3:f8:ec:f7:5a:5a:b8:27:ee:15:ba:66:e4:a6:
                    0f:e4:9b:b2:d5:ca:05:47:10:21:17:37:ce:b0:82:
                    f7:fe:98:6c:c4:13:50:c1:ff:6d:53:77:22:08:70:
                    24:82:e6:ae:39:88:ff:83:ce:30:a4:99:74:0c:21:
                    0c:4e:41:3a:ad:4c:df:b5:39:6b:62:1d:72:d2:c2:
                    96:c0:c2:6b:2d:32:4c:51:3f:ea:c5:48:38:74:74:
                    ef:17:bd:88:35:4a:6f:e3:59:05:b9:a0:1e:5d:33:
                    09:de:aa:7e:22:84:af:97:2a:ea:64:02:2c:45:a3:
                    1d:aa:7d:b1:4f:89:4f:10:02:ac:3f:1d:52:0f:e5:
                    b8:66:e5:f7:eb:6d:e0:2b:d2:30:d7:ca:4a:2f:46:
                    49:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:46:8F:D9:1F:31:94:42:FA:CD:2D:51:40:74:2E:40:F5:2B:5D:C2
            X509v3 Authority Key Identifier:
                keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3139302e3134322e302e302f31362d3234203d3e203231383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.142.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         18:5b:83:d3:b7:2e:78:6c:1e:a5:2d:af:83:f8:97:95:63:e1:
         0c:47:92:e9:6f:e3:92:c5:7c:ac:5a:0b:1e:b7:ae:6a:1f:11:
         39:78:61:d8:6f:e7:bc:43:86:3d:96:b5:16:e4:6d:40:3c:31:
         ca:3c:11:9c:f0:d5:32:e0:90:f8:57:af:ad:16:94:c4:4f:18:
         24:64:ff:a4:ea:74:3c:9b:03:dc:25:0f:26:d2:6b:58:bd:6b:
         d7:8c:b7:0a:44:23:c5:6c:fc:26:6e:18:dc:56:e5:f3:6e:fb:
         a6:ca:65:f6:a1:01:5d:50:db:3e:85:69:a7:11:66:bd:83:d3:
         88:4b:c7:3b:71:27:e8:7a:e4:9b:7a:5d:e9:22:a6:ff:d0:ec:
         9f:65:9b:42:2a:f2:ae:19:5d:39:f7:7e:b6:fe:a5:f8:03:cf:
         92:6e:90:ed:b2:66:aa:0e:8d:bc:c2:91:fe:21:05:22:d5:34:
         6e:4b:4e:a2:a9:96:e6:ec:87:83:7b:74:70:77:d4:c5:91:e4:
         45:91:45:51:07:ef:26:b7:98:41:54:8a:1c:21:78:d8:08:40:
         c3:e6:d2:d5:ee:7a:21:fb:ee:37:08:3a:b6:25:73:3b:b6:9b:
         c7:27:7e:e1:52:93:c7:ab:99:e2:11:5f:7d:41:8b:43:34:4b:
         46:b3:c8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:42 2026 by rpki-client