This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3139302e3130392e3232342e302f31392d3231203d3e203532343935.roa
File:                     3139302e3130392e3232342e302f31392d3231203d3e203532343935.roa (raw, json)
Hash identifier:          4fRLx3E2PAkbU5DUIOjV+X28EveMpoigTCvJPDK3AeQ=
Subject key identifier:   0A:3B:8B:09:87:B2:FF:20:37:46:81:74:74:7F:BC:02:A9:94:1A:4C
Certificate issuer:       /CN=3E4116CCBE654DC11AAAE503A49C372DC9517AF2
Certificate serial:       3FD849916281E2172E65448FF498AFB7EEFD3E97
Authority key identifier: 3E:41:16:CC:BE:65:4D:C1:1A:AA:E5:03:A4:9C:37:2D:C9:51:7A:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3139302e3130392e3232342e302f31392d3231203d3e203532343935.roa
Signing time:             Tue 06 Jan 2026 19:34:07 +0000
ROA not before:           Tue 06 Jan 2026 19:29:07 +0000
ROA not after:            Tue 05 Jan 2027 19:34:07 +0000
asID:                     52495
IP address blocks:        190.109.224.0/19 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d8:49:91:62:81:e2:17:2e:65:44:8f:f4:98:af:b7:ee:fd:3e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E4116CCBE654DC11AAAE503A49C372DC9517AF2
        Validity
            Not Before: Jan  6 19:29:07 2026 GMT
            Not After : Jan  5 19:34:07 2027 GMT
        Subject: CN=0A3B8B0987B2FF2037468174747FBC02A9941A4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:4d:8d:ea:3e:76:bd:29:43:db:1d:d1:0f:
                    fd:c5:30:83:f0:db:0e:17:cd:0f:93:d5:62:29:0c:
                    2f:b3:bc:c4:26:10:73:a2:d4:ce:37:22:ba:b5:9c:
                    36:4c:1d:ad:14:3a:38:d9:b3:67:cd:70:75:f4:f1:
                    f0:dc:bc:d0:ab:02:e0:83:ba:8f:e6:87:f5:87:1b:
                    bf:2d:a8:bd:81:75:26:db:f7:8e:f4:35:ba:e7:5f:
                    d3:5c:66:81:0a:e0:80:4f:81:78:67:78:ff:a2:de:
                    ad:fe:0b:fa:48:d6:27:55:69:72:34:a7:d3:b0:67:
                    8c:25:f1:a6:99:af:dd:d0:ea:07:86:d3:91:51:d1:
                    3d:a1:65:68:d7:3e:fc:f1:aa:d3:c1:76:90:81:9e:
                    96:12:49:09:92:4b:8a:4c:2e:15:bf:2a:02:94:52:
                    f4:d1:ba:45:82:98:6c:8b:68:9a:63:cf:ef:e7:ac:
                    54:e2:53:b7:ca:15:ee:ff:20:3d:81:14:87:78:6f:
                    4b:c1:89:7f:42:17:f0:5a:63:82:42:6a:74:ea:81:
                    90:84:18:de:15:5b:5b:f1:3e:9f:0c:c3:fb:3b:6b:
                    13:5e:c8:83:9b:7c:8d:e8:f4:4c:6e:07:7d:c8:32:
                    79:ed:e6:d1:ea:3f:a2:44:0a:d8:b6:7e:12:f7:4b:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3B:8B:09:87:B2:FF:20:37:46:81:74:74:7F:BC:02:A9:94:1A:4C
            X509v3 Authority Key Identifier:
                keyid:3E:41:16:CC:BE:65:4D:C1:1A:AA:E5:03:A4:9C:37:2D:C9:51:7A:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3139302e3130392e3232342e302f31392d3231203d3e203532343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         72:b0:9f:fa:cd:f4:58:5e:59:e1:03:aa:af:8a:5e:54:ab:fd:
         25:30:e1:86:56:90:5f:22:dc:41:2c:4d:27:aa:ca:03:d4:d8:
         91:a0:56:9c:60:5a:41:12:f6:64:b2:8c:87:c1:8e:30:a3:eb:
         3f:a0:5d:5d:4f:33:b1:0e:eb:3c:6e:54:b6:e0:87:01:27:19:
         6a:46:92:28:55:c0:c7:ee:27:64:bb:14:32:3e:98:f3:9a:3c:
         ec:9f:6d:6e:c5:85:ee:b8:d7:be:04:3f:ec:11:15:9a:c7:d2:
         7d:12:a3:53:3b:4b:bd:ea:bf:32:2d:bf:cd:60:89:06:05:b6:
         df:24:cb:9e:a7:d2:9d:19:5b:45:90:79:a2:dc:66:dd:f7:8a:
         62:b6:fa:e9:37:34:36:cb:e5:34:bd:81:8a:2a:a9:0e:c8:65:
         58:d4:dc:d3:cf:a7:2b:21:b4:51:22:b5:46:43:14:b3:4a:1c:
         7d:51:18:65:72:1c:eb:5d:4d:a4:be:83:76:f9:16:ae:d7:13:
         6d:3b:31:a4:f5:aa:41:e8:c7:50:1d:40:13:eb:80:73:65:1f:
         c6:17:7d:bb:07:54:4a:cd:16:65:30:80:90:14:4c:a1:f7:ab:
         30:c7:3b:cf:ff:f6:87:1f:f1:cf:d6:27:b8:b0:ef:cc:e6:f2:
         fc:38:b9:ae
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUP9hJkWKB4hcuZUSP9Jivt+79PpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U0MTE2Q0NCRTY1NERDMTFBQUFFNTAzQTQ5QzM3MkRD
OTUxN0FGMjAeFw0yNjAxMDYxOTI5MDdaFw0yNzAxMDUxOTM0MDdaMDMxMTAvBgNV
BAMTKDBBM0I4QjA5ODdCMkZGMjAzNzQ2ODE3NDc0N0ZCQzAyQTk5NDFBNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5k2N6j52vSlD2x3RD/3FMIPw
2w4XzQ+T1WIpDC+zvMQmEHOi1M43Irq1nDZMHa0UOjjZs2fNcHX08fDcvNCrAuCD
uo/mh/WHG78tqL2BdSbb9470NbrnX9NcZoEK4IBPgXhneP+i3q3+C/pI1idVaXI0
p9OwZ4wl8aaZr93Q6geG05FR0T2hZWjXPvzxqtPBdpCBnpYSSQmSS4pMLhW/KgKU
UvTRukWCmGyLaJpjz+/nrFTiU7fKFe7/ID2BFId4b0vBiX9CF/BaY4JCanTqgZCE
GN4VW1vxPp8Mw/s7axNeyIObfI3o9ExuB33IMnnt5tHqP6JECti2fhL3S3J5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUCjuLCYey/yA3RoF0dH+8AqmUGkwwHwYDVR0j
BBgwFoAUPkEWzL5lTcEaquUDpJw3LclRevIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wM0JERjcwMjYxNDY3OEU5QzJDMDVGRjVDOUJBQzYwMDI0
QTQwRkM5Nzg5OEFBQzA2NDQ5RjY4RTNGNEM3MjYwLzAvM0U0MTE2Q0NCRTY1NERD
MTFBQUFFNTAzQTQ5QzM3MkRDOTUxN0FGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRTQxMTZDQ0JFNjU0REMxMUFB
QUU1MDNBNDlDMzcyREM5NTE3QUYyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDNCREY3MDI2MTQ2NzhFOUMyQzA1RkY1QzlCQUM2MDAyNEE0MEZDOTc4
OThBQUMwNjQ0OUY2OEUzRjRDNzI2MC8wLzMxMzkzMDJlMzEzMDM5MmUzMjMyMzQy
ZTMwMmYzMTM5MmQzMjMxMjAzZDNlMjAzNTMyMzQzOTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvm3g
MA0GCSqGSIb3DQEBCwUAA4IBAQBysJ/6zfRYXlnhA6qvil5Uq/0lMOGGVpBfItxB
LE0nqsoD1NiRoFacYFpBEvZksoyHwY4wo+s/oF1dTzOxDus8blS24IcBJxlqRpIo
VcDH7idkuxQyPpjzmjzsn21uxYXuuNe+BD/sERWax9J9EqNTO0u96r8yLb/NYIkG
BbbfJMuep9KdGVtFkHmi3Gbd94pitvrpNzQ2y+U0vYGKKqkOyGVY1NzTz6crIbRR
IrVGQxSzShx9URhlchzrXU2kvoN2+Rau1xNtOzGk9apB6MdQHUAT64BzZR/GF327
B1RKzRZlMICQFEyh96swxzvP//aHH/HP1ie4sO/M5vL8OLmu
-----END CERTIFICATE-----
Generated at Mon Jan 12 09:09:36 2026 by rpki-client