This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/3139302e3136382e302e302f31372d3137203d3e203233303037.roa
File:                     3139302e3136382e302e302f31372d3137203d3e203233303037.roa (raw, json)
Hash identifier:          67bx6nmDDZZW3MQu72IhroqpSL1DofxIsSOya0Hmh2s=
Subject key identifier:   13:53:97:83:62:31:29:42:89:E4:51:2F:6C:92:82:01:36:2E:45:98
Certificate issuer:       /CN=FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5
Certificate serial:       03D85846F4A740F87F2DF7B94579D75D16A03F22
Authority key identifier: FB:F6:06:BE:5C:E9:E7:6D:39:4A:0A:FA:C9:A4:DC:3E:DE:56:75:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/3139302e3136382e302e302f31372d3137203d3e203233303037.roa
Signing time:             Tue 06 Jan 2026 19:06:47 +0000
ROA not before:           Tue 06 Jan 2026 19:01:47 +0000
ROA not after:            Tue 05 Jan 2027 19:06:47 +0000
asID:                     23007
IP address blocks:        190.168.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 09:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d8:58:46:f4:a7:40:f8:7f:2d:f7:b9:45:79:d7:5d:16:a0:3f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5
        Validity
            Not Before: Jan  6 19:01:47 2026 GMT
            Not After : Jan  5 19:06:47 2027 GMT
        Subject: CN=135397836231294289E4512F6C928201362E4598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:13:b8:6e:6d:7e:eb:21:ed:9c:4a:52:9a:3b:
                    9d:52:5a:75:73:19:a6:e6:e6:31:c8:14:6d:9e:7b:
                    32:3c:33:d6:38:a6:3c:3b:f1:2b:d9:7d:02:03:e3:
                    de:e4:bd:92:fb:5c:c4:3b:7e:a6:37:c6:3b:61:5e:
                    d8:2a:d3:38:a7:ed:47:83:08:7a:7f:b0:b3:34:f1:
                    a5:e5:11:88:2d:a2:5c:60:35:f9:26:77:0a:0f:5a:
                    97:f9:a6:8c:99:07:9b:fe:b2:59:aa:e5:5e:a6:e8:
                    a9:62:7f:9d:56:0a:e9:16:b3:63:51:58:93:e8:6b:
                    85:67:f0:04:a3:80:a1:f0:7e:91:e5:20:7d:c2:27:
                    15:e4:68:a0:93:57:57:65:7b:90:68:e7:ec:7d:12:
                    e1:84:9a:34:8a:de:d0:ef:6b:e8:e9:ec:b1:2b:b1:
                    70:d0:2e:9b:72:4f:eb:0f:13:ea:cb:a4:25:2e:c2:
                    ed:f2:8f:cf:85:d5:c1:47:16:2d:b9:6c:70:43:09:
                    9c:31:08:cb:1e:48:ff:3d:b0:24:6a:ee:cb:a4:17:
                    1e:b5:44:4c:23:f3:60:3b:92:11:e3:ec:99:0a:97:
                    0f:61:81:28:c4:4f:ad:b2:c2:a7:77:cc:47:12:ba:
                    d4:ce:10:03:07:bb:55:c4:95:38:f6:96:b2:a9:87:
                    c9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:53:97:83:62:31:29:42:89:E4:51:2F:6C:92:82:01:36:2E:45:98
            X509v3 Authority Key Identifier:
                keyid:FB:F6:06:BE:5C:E9:E7:6D:39:4A:0A:FA:C9:A4:DC:3E:DE:56:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/3139302e3136382e302e302f31372d3137203d3e203233303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.168.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6d:4d:6c:62:2a:c4:15:2d:ec:d1:9a:cf:2c:89:c6:ed:83:00:
         e5:b0:37:91:b4:4d:4e:97:14:14:62:08:49:27:7b:fc:b4:5f:
         9e:26:0a:aa:1a:ac:60:f1:33:16:28:50:87:6c:ea:7f:8c:7c:
         c4:4d:b9:78:01:66:d6:21:1b:13:8e:c3:e9:f0:58:73:18:36:
         97:4d:05:e6:45:70:92:fb:84:5c:6b:14:b8:ff:af:50:ea:83:
         04:55:f1:5c:76:e7:c6:da:f1:b8:b2:5e:d6:9d:77:20:b9:c9:
         13:4a:53:61:a6:0a:e2:18:c6:b3:e5:04:80:dd:7d:d6:eb:32:
         b6:60:c6:07:c1:ba:41:12:2f:40:39:12:f6:2b:be:be:e9:87:
         ac:ac:69:cf:31:da:9f:1c:ce:20:b7:ee:9e:64:c8:fb:57:9f:
         5c:ae:ce:45:80:85:bb:f1:39:f8:68:a4:4b:0a:7c:fb:9f:69:
         7b:ae:39:cf:9f:f0:21:a2:a0:3d:cb:21:7e:bc:af:32:1f:6e:
         5f:a1:6e:c0:3e:32:07:41:2d:96:75:9f:6c:be:5d:bf:06:d4:
         df:e7:3e:c7:c6:93:8b:7a:86:98:22:23:52:2e:20:e6:1e:5c:
         37:d2:a4:d4:70:4b:24:66:e0:a1:fd:e2:db:32:22:16:9a:dc:
         d3:98:81:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:43:35 2026 by rpki-client