This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34332e302f32342d3234203d3e203237373432.roa
File:                     3139302e35332e34332e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier:          NkdCd6UkqIa7JdT4zYso1KYI9M4sxGOju2xv1FfOZ9Y=
Subject key identifier:   D6:38:BA:1E:65:14:FD:A2:6D:67:22:51:CA:A4:B2:E0:86:D1:4F:9F
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       62D2FF248D3CD3FCAACD4B6134DE134B5AFC8E10
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34332e302f32342d3234203d3e203237373432.roa
Signing time:             Tue 06 Jan 2026 20:53:31 +0000
ROA not before:           Tue 06 Jan 2026 20:48:31 +0000
ROA not after:            Tue 05 Jan 2027 20:53:31 +0000
asID:                     27742
IP address blocks:        190.53.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d2:ff:24:8d:3c:d3:fc:aa:cd:4b:61:34:de:13:4b:5a:fc:8e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:31 2026 GMT
            Not After : Jan  5 20:53:31 2027 GMT
        Subject: CN=D638BA1E6514FDA26D672251CAA4B2E086D14F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:57:61:ee:ec:14:bd:a2:0e:fe:f0:37:91:
                    39:6d:30:79:ea:a5:ff:d8:38:3f:fd:77:9f:7e:d6:
                    c8:06:df:2a:d5:05:48:fd:de:16:36:a2:f0:ea:2b:
                    7c:76:a3:63:a0:f4:80:05:26:33:2c:8a:52:1d:b1:
                    e1:19:be:86:89:80:fa:95:4d:21:f4:36:dd:fa:22:
                    69:65:44:5c:0a:e9:1b:21:db:e8:89:a1:77:89:c0:
                    8f:bb:94:aa:3d:ab:29:cb:1d:1a:b5:d1:cd:74:4e:
                    9e:65:9a:2d:8d:49:19:4b:06:41:16:dc:1c:3b:e8:
                    67:27:2a:77:a3:ed:a0:78:28:af:87:8e:63:f9:d2:
                    64:45:11:be:05:0c:c6:45:c4:5e:c0:93:a7:7b:34:
                    5f:bd:af:56:78:73:fb:ae:e0:3c:26:96:eb:44:fa:
                    d1:ad:9f:d8:da:26:6b:6e:53:5c:95:1d:68:b7:cf:
                    31:1b:77:00:32:40:3e:c8:50:61:94:ff:8a:76:c7:
                    40:4b:29:09:e8:a4:25:86:0f:91:b6:cf:9d:0e:b5:
                    a4:c8:01:62:64:13:0e:67:ec:bf:59:7a:66:8a:65:
                    4b:ff:98:c1:66:08:db:4f:82:c3:fd:b5:4b:a3:0c:
                    5d:20:66:6e:a7:de:b4:93:77:d2:5a:ee:c3:3e:78:
                    6a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:38:BA:1E:65:14:FD:A2:6D:67:22:51:CA:A4:B2:E0:86:D1:4F:9F
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34332e302f32342d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:20:8d:a8:4c:ea:00:21:96:2d:11:d7:8c:f4:ce:1d:37:e1:
         7b:d7:7c:ad:1c:70:5d:f7:a0:4f:b1:4e:e9:d8:4c:cf:72:bd:
         71:1e:8f:9a:92:56:83:39:0b:9e:87:81:f1:d6:9c:91:f8:bf:
         02:a2:48:0a:f3:11:6e:4f:3e:da:65:45:f2:9c:75:51:35:62:
         66:87:ed:4c:1d:cf:42:80:d5:a7:3e:b1:0a:fb:a4:64:c6:85:
         4d:99:3f:a2:ad:ae:d4:9e:46:c8:a9:ee:03:e3:e3:76:81:04:
         df:11:53:54:07:52:01:aa:c8:1a:2b:23:1f:60:e2:f2:66:2a:
         d4:98:b0:3e:57:99:a1:d7:5a:be:10:ba:81:ae:ae:e2:b0:a3:
         17:21:b2:9c:5c:28:62:1c:5b:d4:0e:a1:52:d5:c1:96:33:dc:
         ad:31:bd:93:a8:2c:f3:17:f3:58:eb:7c:28:4f:b3:d2:23:ad:
         4a:dc:b3:5b:6a:05:0a:86:d7:25:4b:01:25:a0:c2:2b:dd:0b:
         0c:85:e0:39:67:e7:06:30:6e:05:53:2c:41:fa:79:50:59:5b:
         f0:f0:6e:3a:2a:bb:44:a8:1b:7a:19:78:22:d8:e5:5f:4d:ef:
         75:86:f6:03:c9:e2:05:62:7e:66:09:a8:8b:6b:f0:b7:77:5a:
         9b:a6:63:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:25:38 2026 by rpki-client