This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139322e3134312e3234342e302f32322d3234203d3e20323635353430.roa
File:                     3139322e3134312e3234342e302f32322d3234203d3e20323635353430.roa (raw, json)
Hash identifier:          aF9OM7qClUiX/VUBiEel2iTyeMAGvJ5D8NUlVBf3g3E=
Subject key identifier:   27:84:3A:2B:1D:7C:46:D4:8D:06:5A:8E:62:4B:EF:33:90:84:3B:00
Certificate issuer:       /CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Certificate serial:       065C199440CAA5062C0B62BABC260D8A091B750D
Authority key identifier: FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139322e3134312e3234342e302f32322d3234203d3e20323635353430.roa
Signing time:             Tue 06 Jan 2026 19:42:42 +0000
ROA not before:           Tue 06 Jan 2026 19:37:42 +0000
ROA not after:            Tue 05 Jan 2027 19:42:42 +0000
asID:                     265540
IP address blocks:        192.141.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5c:19:94:40:ca:a5:06:2c:0b:62:ba:bc:26:0d:8a:09:1b:75:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
        Validity
            Not Before: Jan  6 19:37:42 2026 GMT
            Not After : Jan  5 19:42:42 2027 GMT
        Subject: CN=27843A2B1D7C46D48D065A8E624BEF3390843B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6a:fa:15:96:e1:55:5e:5b:90:db:1a:7b:c9:
                    6f:bc:ee:2a:7e:cb:65:96:90:3d:b5:57:c1:96:32:
                    3c:ae:17:37:3f:db:64:d0:e2:c3:b8:b9:07:00:05:
                    2a:e8:25:69:f6:e1:58:15:a7:9a:6c:3c:48:cf:83:
                    0e:3a:26:5d:0e:3f:23:ea:d9:59:2d:a4:0c:fe:89:
                    82:e8:eb:3f:f3:5e:c6:57:60:c9:bf:74:43:20:56:
                    cb:6c:ed:0a:46:80:87:53:a3:90:2c:65:d2:0b:18:
                    67:36:0b:3c:7d:b4:fe:ba:eb:b6:39:04:f6:a3:ee:
                    35:35:e5:f7:22:9e:6e:33:c0:87:1c:6e:17:9f:db:
                    7d:dd:07:e5:30:da:4d:57:cb:99:59:93:df:40:b0:
                    96:56:02:28:91:7b:6d:78:b0:a4:02:64:e7:98:04:
                    a9:71:28:1b:5d:97:1d:13:bf:3c:30:fe:57:bc:6b:
                    65:c1:59:24:e0:cd:4e:ea:2d:f4:c0:42:fb:4f:36:
                    5d:76:7e:17:4b:72:14:4d:df:2e:f4:c1:76:65:41:
                    9f:5b:01:61:85:7b:81:1c:77:45:bd:39:90:8d:96:
                    6e:d0:69:f2:4b:8b:8e:0a:01:f6:4b:5d:46:88:37:
                    17:3a:86:e1:c0:0c:e2:fe:d8:63:0e:1b:f5:61:a3:
                    4d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:84:3A:2B:1D:7C:46:D4:8D:06:5A:8E:62:4B:EF:33:90:84:3B:00
            X509v3 Authority Key Identifier:
                keyid:FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139322e3134312e3234342e302f32322d3234203d3e20323635353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:23:dd:47:7e:f9:b5:74:e8:19:32:65:ed:9c:e9:9e:79:1d:
         4b:52:63:c0:56:f4:bc:9a:df:10:ea:80:31:f1:05:60:6e:64:
         3a:58:d4:f7:96:d2:c5:0b:23:14:74:61:43:90:32:fd:9c:40:
         31:92:d3:29:10:ba:48:2a:2d:eb:a5:84:2e:79:59:42:ce:f8:
         e4:af:c5:82:e8:30:e3:dc:6c:80:d0:c6:42:5e:08:4d:a2:45:
         45:c4:bd:c9:46:4b:fd:02:0e:89:6d:f3:28:92:aa:74:90:52:
         28:bc:e5:ef:c7:ee:ad:8b:a6:f8:03:38:71:4f:22:72:e2:9c:
         c6:ef:bf:c1:d8:8e:fe:fb:6d:72:8c:7a:ca:42:6c:3a:94:d1:
         0a:5d:d6:41:ad:d4:ec:0b:ab:d8:ef:c1:4d:92:08:c5:7b:7d:
         2a:6d:ff:1f:70:38:85:56:e8:a2:20:16:76:1b:06:fc:f2:2b:
         7a:db:7d:9e:fc:1c:4e:6c:8c:ba:61:83:af:66:ce:1e:f9:5a:
         05:34:10:1c:9d:54:ec:0c:a7:91:b4:a7:49:5a:59:ec:18:ff:
         13:9d:9d:1b:8c:32:29:1b:85:48:27:bb:c3:31:7b:2f:0e:56:
         27:45:af:6d:b9:97:27:04:e9:3b:f5:ad:0c:a1:56:5b:d6:fc:
         7d:f3:f3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:40 2026 by rpki-client