This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e3138372e302e302f31362d3234203d3e203139393035.roa
File:                     3139302e3138372e302e302f31362d3234203d3e203139393035.roa (raw, json)
Hash identifier:          aWwFvVVWfhiPZMXewvtceiEVhVlrazwXhhWVs24jLfQ=
Subject key identifier:   AF:42:47:54:FD:9A:D7:71:04:06:4D:58:0B:6F:E2:CD:2D:68:70:48
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       5E75C64DB9C000857E3937228A885100FEA9AF80
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e3138372e302e302f31362d3234203d3e203139393035.roa
Signing time:             Tue 06 Jan 2026 19:36:09 +0000
ROA not before:           Tue 06 Jan 2026 19:31:09 +0000
ROA not after:            Tue 05 Jan 2027 19:36:09 +0000
asID:                     19905
IP address blocks:        190.187.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:75:c6:4d:b9:c0:00:85:7e:39:37:22:8a:88:51:00:fe:a9:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Jan  6 19:31:09 2026 GMT
            Not After : Jan  5 19:36:09 2027 GMT
        Subject: CN=AF424754FD9AD77104064D580B6FE2CD2D687048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:85:a9:c3:86:fe:92:95:5a:c0:76:07:b5:9d:
                    cd:35:34:05:e9:4c:fd:79:23:3f:8e:61:5f:c0:39:
                    21:d8:e4:6e:df:40:55:e8:d6:44:40:29:88:74:e1:
                    f7:08:b1:60:c9:74:39:2e:51:7a:17:48:70:ea:6c:
                    3d:b0:e9:14:2e:d9:5d:41:1b:b2:9f:41:39:67:51:
                    a1:fc:c1:78:92:b3:ab:b8:d8:01:d5:a9:ec:bd:e4:
                    bf:15:22:25:d7:9b:77:9e:88:30:c1:86:62:13:33:
                    e2:44:cb:b3:6b:22:e6:73:cb:a1:71:cb:ca:15:a7:
                    19:4f:1b:68:d8:4f:ad:79:c3:b6:4c:eb:ed:6b:aa:
                    e7:11:aa:29:d8:fa:59:21:31:ef:47:0e:fa:5e:e0:
                    59:62:ee:0f:7a:e0:fb:7c:c0:f3:fe:79:ab:f2:8c:
                    1a:ec:06:59:e5:3f:e3:49:5b:c5:a7:34:6c:bd:17:
                    aa:17:b9:0a:d2:ff:7b:0b:82:fe:99:f6:74:c9:d7:
                    90:80:05:de:73:12:6c:a1:2c:1d:2e:10:1f:e0:f5:
                    b9:08:1e:64:79:80:65:b3:1b:3a:22:28:bd:98:38:
                    03:ab:77:25:aa:fa:80:8b:7c:02:ac:a9:be:16:ed:
                    bf:55:bc:0c:8b:9b:f6:cc:b3:f3:c2:32:a1:35:8d:
                    fe:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:42:47:54:FD:9A:D7:71:04:06:4D:58:0B:6F:E2:CD:2D:68:70:48
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e3138372e302e302f31362d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.187.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4e:ef:5f:46:94:11:79:38:a1:72:2a:2a:2e:81:9e:5b:23:2d:
         21:6b:a4:d2:40:33:4d:c6:2b:87:5e:96:3b:30:9d:e0:2a:b0:
         df:03:ba:c0:b3:30:1a:d2:2d:6a:c5:d5:e4:4f:2f:30:dc:1b:
         22:35:1b:41:47:df:36:6f:7f:3a:c6:f3:70:67:75:a2:33:ff:
         79:60:b3:3c:eb:66:b5:3b:26:6c:5e:71:5b:43:30:2d:e7:47:
         48:fe:b3:53:d3:2b:76:de:79:a0:2b:9e:07:84:10:e4:35:99:
         ad:93:6b:1d:5c:00:e0:23:7b:ae:e4:7a:ec:3b:39:54:7c:46:
         dc:15:d2:58:79:04:f7:10:dd:d2:a0:91:44:24:a7:25:4a:db:
         e4:d4:41:fa:7a:cc:c0:f7:3e:72:6c:36:81:22:0d:06:ae:b4:
         03:89:89:09:44:14:09:05:1c:b0:79:cb:90:38:0a:ca:fe:72:
         cb:b3:e1:f2:e1:8c:24:9b:92:3e:6d:c0:3e:91:8e:8e:eb:fb:
         60:e2:70:49:8f:57:1d:6c:78:2f:3e:80:69:04:da:19:51:8f:
         95:84:38:b3:3d:38:cf:43:c5:3f:a7:70:22:ba:65:7b:1e:c2:
         33:42:4e:ac:dc:ef:26:13:de:c1:f3:e8:b7:47:2c:a7:b1:2f:
         63:8d:48:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:49 2026 by rpki-client