This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3234302e302f32312d3234203d3e203237373733.roa
File:                     3139302e3135302e3234302e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier:          3bj5TtSqT3x6KLNat050Yd08xAm/Uk8pJSoHkgfGuHE=
Subject key identifier:   BC:29:F0:F0:E5:D4:F5:B3:54:00:CB:5A:9F:59:B2:6D:30:9A:BA:06
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       053AE1EE9A553E703E4D359F71FB584B0C91CCDE
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3234302e302f32312d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 20:53:19 +0000
ROA not before:           Tue 06 Jan 2026 20:48:19 +0000
ROA not after:            Tue 05 Jan 2027 20:53:19 +0000
asID:                     27773
IP address blocks:        190.150.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 13:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3a:e1:ee:9a:55:3e:70:3e:4d:35:9f:71:fb:58:4b:0c:91:cc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:19 2026 GMT
            Not After : Jan  5 20:53:19 2027 GMT
        Subject: CN=BC29F0F0E5D4F5B35400CB5A9F59B26D309ABA06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:16:6a:fc:53:8c:e4:ad:dc:46:c4:a4:50:
                    57:90:bc:c0:58:82:e6:a9:7f:07:b4:fd:92:35:78:
                    f8:56:ee:8b:57:ee:c9:67:2b:15:c3:87:3c:bb:34:
                    2e:c8:c6:fa:1b:7c:e4:9c:80:60:33:8c:c8:1a:65:
                    8b:4b:0d:5b:af:0f:cf:38:6d:28:2f:5c:10:36:d4:
                    85:41:64:6b:2b:15:ae:78:cd:1e:da:dd:56:82:e2:
                    d5:1d:67:cc:0e:2c:90:ee:40:99:00:14:db:75:1f:
                    64:5b:a5:91:1d:ad:c3:8d:f8:bc:a6:71:d6:40:d1:
                    bd:fa:f5:e8:ad:a6:0d:44:89:f4:84:31:38:25:38:
                    3c:95:50:df:e5:bd:2f:79:90:f5:22:1a:cb:61:04:
                    75:06:64:c6:89:af:93:43:04:d1:81:ea:28:a7:67:
                    30:0d:7d:89:c7:c7:1c:ba:0b:fe:8e:fc:93:73:19:
                    13:0d:2e:09:0c:40:4e:7f:75:2b:5c:2e:b9:05:e8:
                    29:c6:72:16:da:cb:f7:1f:1b:b9:54:2e:84:85:35:
                    37:e9:5f:4a:28:b0:41:18:8f:bd:cf:58:f0:20:21:
                    26:7f:c6:f9:85:7c:63:b7:9a:cb:04:98:45:a3:a8:
                    d5:a6:ee:e1:7e:eb:a0:47:53:ab:32:8b:43:33:66:
                    79:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:29:F0:F0:E5:D4:F5:B3:54:00:CB:5A:9F:59:B2:6D:30:9A:BA:06
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3234302e302f32312d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:22:d2:63:6a:94:a9:b2:5e:ef:55:f2:72:1b:80:30:a8:ca:
         e6:9b:92:d6:df:3d:0c:20:e1:9f:b8:59:20:ed:09:3d:df:b1:
         e3:2d:bd:ab:0b:39:48:6a:8a:76:09:c4:a4:c6:1e:f0:7f:b6:
         08:2e:7b:76:79:ac:9a:26:a2:27:4a:c6:74:ef:4f:a4:6b:a2:
         00:6b:9e:09:d9:81:4b:16:0d:52:2a:ad:df:7f:02:9e:4f:e2:
         c1:a1:48:aa:ea:81:30:d0:f1:1a:15:51:9c:84:e1:8a:87:f9:
         d9:7f:2d:c4:80:2d:74:11:24:80:5a:2a:24:8c:c9:49:9b:06:
         14:e0:27:9e:11:df:3d:96:72:23:13:0c:ce:9a:84:7d:4f:02:
         15:9b:82:ad:2e:38:3f:75:8d:02:9f:c0:ad:56:fa:83:25:17:
         dd:79:e9:9c:8c:e7:8b:b5:d2:f9:86:ea:dc:86:a2:f7:80:6a:
         08:8d:bf:5e:ec:26:69:27:5e:86:bc:8d:2a:6a:26:ec:bb:38:
         ec:5e:41:30:f4:d0:3b:50:05:18:55:2f:9f:7f:47:9e:a6:b5:
         fa:c9:c7:6d:96:39:94:8f:9b:92:bc:5e:0b:64:b0:e2:be:d3:
         85:1d:64:0d:b7:98:1f:13:a7:07:e2:6f:10:f8:15:6f:c6:67:
         64:71:e0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:38:13 2026 by rpki-client