This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34342e302f32332d3234203d3e203237373432.roa
File:                     3139302e35332e34342e302f32332d3234203d3e203237373432.roa (raw, json)
Hash identifier:          wESEWk45c+Zy28Rosqhl+iANEyVe+NGB8ll32CMPeqk=
Subject key identifier:   A0:CE:07:8B:5F:B0:33:1D:5F:25:4E:25:D4:2A:BF:0C:0B:06:F3:34
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       26403B5E45D15DCB65D3CEEBBBE307C8F29ECDFC
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34342e302f32332d3234203d3e203237373432.roa
Signing time:             Tue 06 Jan 2026 20:53:21 +0000
ROA not before:           Tue 06 Jan 2026 20:48:21 +0000
ROA not after:            Tue 05 Jan 2027 20:53:21 +0000
asID:                     27742
IP address blocks:        190.53.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 08:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:40:3b:5e:45:d1:5d:cb:65:d3:ce:eb:bb:e3:07:c8:f2:9e:cd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:21 2026 GMT
            Not After : Jan  5 20:53:21 2027 GMT
        Subject: CN=A0CE078B5FB0331D5F254E25D42ABF0C0B06F334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:ca:73:f8:28:b5:87:9a:60:76:d1:1b:09:
                    85:4e:16:d5:d2:7b:33:ce:bf:a7:cc:79:84:b4:ba:
                    f1:46:15:07:fb:86:85:30:1e:a1:fa:cc:eb:12:e3:
                    3f:23:d2:80:b0:b3:77:9a:a0:07:52:cc:9f:d4:00:
                    e2:e1:03:68:51:0b:b1:ca:a8:33:7b:b7:05:33:bd:
                    9c:7e:60:b6:79:a5:c5:da:62:e6:e9:7e:9b:c7:c6:
                    33:82:4c:76:f2:4b:89:73:c7:0f:03:a3:68:97:d9:
                    d0:c5:4a:2b:bc:ec:f5:8e:b7:83:8a:10:e3:70:0f:
                    d2:e9:77:86:04:70:fb:0b:9e:58:f4:60:a3:8d:d4:
                    d2:bb:ed:d3:f1:3c:52:c4:0a:db:8a:d7:0b:cd:6a:
                    69:2e:02:a2:96:1d:6e:3c:6f:4f:b7:9a:54:a4:6a:
                    a5:de:da:7f:c4:13:25:9c:da:7b:f4:04:a4:b7:0a:
                    b8:8f:3c:24:1d:a2:cb:82:ec:6c:eb:63:05:14:5d:
                    1c:e2:44:b0:78:6c:bc:af:52:d7:22:66:35:9c:12:
                    54:80:3a:98:b7:71:15:dd:f9:53:49:83:a3:97:f6:
                    7e:45:33:2e:fe:bf:44:ba:e7:09:3f:8d:09:df:27:
                    f0:6a:f7:37:c6:2f:3a:14:73:c0:51:e5:23:e5:44:
                    c2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CE:07:8B:5F:B0:33:1D:5F:25:4E:25:D4:2A:BF:0C:0B:06:F3:34
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34342e302f32332d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:71:dc:b9:6e:1e:bf:74:3f:fc:ba:58:2c:d1:6c:ab:f4:ea:
         30:bf:5d:68:12:33:e0:96:78:d2:bc:ba:89:24:87:f2:6a:35:
         02:2b:60:24:b3:0b:d0:e9:15:d7:21:c5:2b:2b:cf:60:ce:a1:
         ae:46:fc:cd:02:e4:c7:78:04:55:7b:9b:43:bf:67:3f:97:ef:
         7a:2a:cc:b1:68:97:69:55:57:a2:65:0a:47:cd:04:a2:43:43:
         92:de:c4:7a:df:b0:31:9a:8f:94:02:1a:c5:d8:ec:28:3d:59:
         74:88:38:f1:d9:68:8e:dc:38:92:d3:be:0c:16:cb:30:85:7d:
         a1:9a:f4:eb:3d:e3:06:04:41:b1:eb:6b:62:9c:84:5b:0d:07:
         68:ec:19:e1:ec:77:2e:19:ef:53:b2:9a:7b:7e:38:63:4d:57:
         3a:22:e1:29:07:3d:53:3f:80:81:fc:06:63:44:04:46:78:06:
         69:ca:1a:a6:e9:d9:c5:0a:a4:96:a6:4b:84:c1:21:eb:5b:ae:
         18:31:93:b4:27:56:17:e6:01:b8:73:db:f8:49:e4:dc:29:87:
         24:83:c3:e3:38:b5:93:bd:37:2a:18:51:6c:cb:e9:7d:4a:fa:
         df:52:42:aa:6e:28:55:f9:42:55:a9:0a:19:43:02:82:79:aa:
         af:0d:aa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 11:33:51 2026 by rpki-client