This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3139302e3131312e3136302e302f32322d3232203d3e20333938373132.roa
File:                     3139302e3131312e3136302e302f32322d3232203d3e20333938373132.roa (raw, json)
Hash identifier:          2KSI48r/G5DdOaqdCbVr+/TIlBPnVKet8M/rdlVon1k=
Subject key identifier:   0C:9A:59:69:46:54:45:39:8E:90:DA:09:BE:0C:7B:3D:06:18:20:7E
Certificate issuer:       /CN=3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6
Certificate serial:       55397315EEDCB35D1BD8D744197DA2D64E861682
Authority key identifier: 3E:27:77:AB:92:EF:5A:C6:D5:02:E2:9F:09:2B:21:D6:B1:E9:D3:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3139302e3131312e3136302e302f32322d3232203d3e20333938373132.roa
Signing time:             Tue 06 Jan 2026 20:57:34 +0000
ROA not before:           Tue 06 Jan 2026 20:52:34 +0000
ROA not after:            Tue 05 Jan 2027 20:57:34 +0000
asID:                     398712
IP address blocks:        190.111.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:39:73:15:ee:dc:b3:5d:1b:d8:d7:44:19:7d:a2:d6:4e:86:16:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6
        Validity
            Not Before: Jan  6 20:52:34 2026 GMT
            Not After : Jan  5 20:57:34 2027 GMT
        Subject: CN=0C9A5969465445398E90DA09BE0C7B3D0618207E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:69:21:12:f5:71:26:dd:2e:5d:4b:88:90:09:
                    c5:b7:b9:cc:a4:72:53:52:e4:52:0e:9a:32:06:69:
                    bf:95:9f:2c:19:22:9a:d0:2d:45:6d:79:d1:f4:d9:
                    8a:df:d9:43:6a:47:e9:8e:1b:0b:b6:31:76:dc:3e:
                    b6:60:8b:e6:d7:0c:30:ee:28:4b:fe:a3:30:4d:1d:
                    49:b9:43:53:d2:fe:aa:81:47:7f:1e:0d:1a:6f:8d:
                    26:2c:55:15:79:b4:eb:d3:29:ec:5a:5f:23:9e:81:
                    b4:23:94:be:ab:f7:cf:89:69:44:1c:fb:b1:45:1b:
                    ac:3c:be:b3:aa:d4:ea:05:94:ab:1c:cc:70:3d:d6:
                    ae:0b:e9:2d:78:d3:e9:d1:5c:8f:0f:f3:5d:bf:27:
                    e0:04:9f:5f:39:c3:9d:29:21:92:1e:12:dd:bb:44:
                    69:f7:da:bf:72:b3:61:5b:ba:21:bf:ec:4b:c7:eb:
                    5f:4c:51:b1:d0:94:ef:ac:58:7d:47:ca:36:f5:46:
                    70:1a:29:05:ec:ed:6a:a0:dc:b1:e2:6c:cd:af:6c:
                    59:9e:4e:a4:41:48:92:23:88:54:28:95:cc:38:21:
                    60:c0:1f:28:d7:c7:2e:3a:d6:26:50:cf:74:94:77:
                    42:78:da:5e:f8:db:7e:1f:39:8b:e9:1f:5e:0b:1b:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9A:59:69:46:54:45:39:8E:90:DA:09:BE:0C:7B:3D:06:18:20:7E
            X509v3 Authority Key Identifier:
                keyid:3E:27:77:AB:92:EF:5A:C6:D5:02:E2:9F:09:2B:21:D6:B1:E9:D3:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3139302e3131312e3136302e302f32322d3232203d3e20333938373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:d3:0a:fe:aa:4f:e1:24:ed:ad:6e:1c:c3:2d:9d:6f:fc:e6:
         16:e5:b6:fa:89:1f:e5:8f:5f:68:29:fd:d9:f8:94:9d:f3:7a:
         56:24:44:cc:69:9a:07:68:2f:9b:c0:60:4a:02:21:ab:9d:b5:
         78:ec:f4:3e:a5:8d:e8:5c:33:f4:63:82:18:5f:13:70:a9:e0:
         96:14:25:92:cf:73:4d:63:57:76:6c:cc:fb:0f:69:88:0d:48:
         48:c8:85:2a:ee:68:48:da:a9:c8:e3:a7:1a:1d:63:ed:93:27:
         df:aa:b8:fc:c7:37:f8:41:b0:cd:c4:48:e6:ec:ed:d2:87:e4:
         bd:b6:35:6c:87:c3:3a:2a:3b:bd:48:1b:6c:6e:67:0b:e5:5b:
         94:e8:1c:78:2b:aa:18:61:0c:06:6b:ca:18:14:1d:2c:ae:c6:
         98:f7:b1:69:5d:f3:fd:2a:3c:4e:18:5b:24:5f:11:9e:4b:0d:
         5d:45:a6:a6:6e:80:07:69:06:e1:35:fc:4a:b3:56:61:09:43:
         02:cb:28:95:7e:c5:ab:7b:17:26:3d:0c:ac:5e:d0:13:dc:9d:
         e2:e2:c6:eb:52:29:80:5f:a5:82:d9:a3:e1:ab:b9:d8:a2:51:
         78:f3:14:ac:4b:e2:f3:92:3b:e9:44:b3:ad:8d:25:1b:eb:4c:
         4e:a3:ff:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:55:29 2026 by rpki-client