This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e302e302f31392d3234203d3e203237373733.roa
File:                     3139302e3135302e302e302f31392d3234203d3e203237373733.roa (raw, json)
Hash identifier:          ls2VV7rll6jG6bmF66ppcJ9xvHtoHv1SEX+kaxVaoHI=
Subject key identifier:   AF:47:17:0A:11:0A:CA:38:0B:92:72:A1:D9:03:4C:E2:3F:5B:7E:31
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       3F909F4BF8114F64A6DA8B6628EE5CA3DD1A988F
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e302e302f31392d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 20:53:28 +0000
ROA not before:           Tue 06 Jan 2026 20:48:28 +0000
ROA not after:            Tue 05 Jan 2027 20:53:28 +0000
asID:                     27773
IP address blocks:        190.150.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 13:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:90:9f:4b:f8:11:4f:64:a6:da:8b:66:28:ee:5c:a3:dd:1a:98:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:28 2026 GMT
            Not After : Jan  5 20:53:28 2027 GMT
        Subject: CN=AF47170A110ACA380B9272A1D9034CE23F5B7E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:00:e0:de:1f:4d:50:f6:c7:e6:83:dc:cc:ce:
                    18:92:93:73:a0:88:ff:c0:46:f1:e4:ef:fa:29:8a:
                    d6:da:87:d2:0e:25:40:76:a5:89:eb:67:c2:e4:53:
                    42:c0:94:94:40:00:88:06:be:f8:84:20:63:8b:18:
                    30:b0:02:89:5f:3e:c9:b3:ba:49:65:d9:06:47:de:
                    27:5f:06:3f:a5:76:26:1f:97:fd:e9:0f:cb:69:10:
                    b8:5a:4c:fb:ab:06:5f:78:bc:37:40:bd:18:65:09:
                    95:cd:2f:ac:f3:88:88:24:ae:7d:9c:ab:85:80:30:
                    c0:d2:4c:8d:bf:61:cf:48:86:ef:de:71:c5:17:ae:
                    a1:77:a1:60:1d:bb:14:98:1e:0d:fc:d6:4f:8e:52:
                    75:ba:1c:eb:17:4b:44:b0:b6:d3:bc:ae:af:a0:a8:
                    b6:63:47:d7:7c:a0:6d:db:0d:62:20:ea:a6:84:07:
                    49:c5:6d:d5:43:29:2f:0c:e5:2e:7f:fb:eb:32:8b:
                    45:e7:12:7c:e5:b5:d7:e1:e7:ca:57:b6:da:49:78:
                    07:96:8d:ef:ef:a1:3c:64:d9:d1:01:65:5c:ac:8a:
                    d4:ca:01:f9:5e:86:a4:7c:ff:61:8e:07:4f:c9:69:
                    61:3b:4c:2a:5f:8c:84:58:72:3f:89:8e:07:eb:f1:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:47:17:0A:11:0A:CA:38:0B:92:72:A1:D9:03:4C:E2:3F:5B:7E:31
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e302e302f31392d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:1c:f2:84:9b:7b:2d:8a:01:b1:4f:02:39:aa:6b:90:63:34:
         2d:5c:0a:5f:98:49:e9:4f:38:00:40:65:b6:95:fd:8c:19:64:
         3c:ad:c1:ac:ba:59:9f:4e:49:0d:ec:98:ba:72:c2:a0:ae:76:
         e2:49:70:b8:6d:93:16:53:99:8a:ef:88:0c:9f:73:d4:3e:e7:
         8c:95:9c:5d:af:d3:0f:7a:ee:35:6e:a1:ae:38:43:01:c7:fa:
         cb:bd:86:05:10:32:d4:cc:85:a0:68:d9:d1:45:66:d3:00:9e:
         c7:7a:96:32:ee:6f:a4:12:0f:7b:c0:05:3a:f6:86:b3:6e:1e:
         a1:45:6a:b1:d0:88:dd:85:df:f9:aa:30:03:36:80:bb:75:a0:
         8b:e7:a1:0a:7f:57:4e:0c:45:bd:8e:4e:fb:68:13:b5:ff:85:
         24:13:a8:84:5d:df:e4:8a:2b:4d:23:bc:e2:02:89:55:0d:d4:
         70:93:c2:81:da:98:34:99:77:31:60:6f:88:1f:a5:96:db:f6:
         21:13:98:c2:28:dc:2f:80:1c:70:a1:4a:29:81:6b:ac:bb:d3:
         1d:f4:b7:d3:e0:0b:36:1d:d8:8b:12:9e:96:8e:aa:23:8a:92:
         fb:ce:4f:33:55:b2:f6:02:98:34:10:82:b9:f5:68:47:a6:29:
         7c:a8:1e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:16:25 2026 by rpki-client