This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e34302e302f32312d3234203d3e203237373733.roa
File:                     3139302e39392e34302e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier:          OePGmYrtgajM442P5mWNVE8EgZYpoRdqHAVMTBqqJH0=
Subject key identifier:   F4:69:C1:C7:41:5C:42:C4:6B:44:2C:73:63:D4:3A:71:62:E5:A4:F7
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       202B1F6D9CA5CA6B6CC31477F1817E69962B4DC5
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e34302e302f32312d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 20:53:23 +0000
ROA not before:           Tue 06 Jan 2026 20:48:23 +0000
ROA not after:            Tue 05 Jan 2027 20:53:23 +0000
asID:                     27773
IP address blocks:        190.99.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 07:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2b:1f:6d:9c:a5:ca:6b:6c:c3:14:77:f1:81:7e:69:96:2b:4d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:23 2026 GMT
            Not After : Jan  5 20:53:23 2027 GMT
        Subject: CN=F469C1C7415C42C46B442C7363D43A7162E5A4F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:34:ee:33:f3:18:f0:17:40:49:f5:0f:84:
                    c7:69:a4:c6:40:82:17:f1:fe:50:b8:c3:93:fd:14:
                    6a:a0:1f:86:4b:75:2d:b1:65:da:f2:63:74:6f:2b:
                    3a:8f:4e:d6:b8:c4:3d:43:67:b1:40:6b:d2:e8:e5:
                    88:55:94:f2:ee:ba:c5:db:93:bf:81:c3:fd:a3:9d:
                    90:6e:42:47:a9:7d:ea:dc:b1:ac:be:15:6e:9e:6f:
                    fa:62:a9:a9:29:23:ad:9b:9a:d6:20:2e:57:3e:84:
                    49:02:68:46:1e:4d:43:14:77:4e:c5:6d:2e:5f:46:
                    e2:09:c2:16:4a:7a:a0:77:23:d5:83:dc:a8:62:53:
                    67:aa:e5:09:05:86:08:ef:a1:4e:38:14:64:31:12:
                    c1:da:1c:37:58:dc:c4:65:53:04:67:cb:ea:59:17:
                    35:1e:c2:07:ed:01:a7:c4:7d:88:23:bd:83:7a:29:
                    fb:84:f2:54:12:f6:e3:61:ac:f1:ef:61:cd:a1:4d:
                    72:f8:4a:6e:01:c0:90:35:ee:40:a3:df:6b:de:66:
                    4c:10:94:5a:45:d3:f9:a1:ae:44:87:35:51:d4:5b:
                    08:13:a9:6f:c7:d1:fb:e9:7c:f4:50:98:27:10:d4:
                    7c:3c:5e:ff:f7:40:b1:cb:fe:f2:04:53:0b:de:09:
                    9a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:69:C1:C7:41:5C:42:C4:6B:44:2C:73:63:D4:3A:71:62:E5:A4:F7
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e39392e34302e302f32312d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:61:5f:f3:bc:11:ee:22:03:64:fe:56:f7:e3:50:b6:b7:4e:
         91:bc:e4:fb:53:1c:81:09:53:db:10:e1:f0:f7:3a:fd:3e:6e:
         90:bf:62:42:07:90:cf:ac:31:f3:a2:37:dc:21:3b:14:6a:9a:
         0a:c4:3e:72:43:d9:c6:f1:25:f1:e3:d3:b0:a0:d2:72:a7:8f:
         56:3c:68:ba:c0:94:aa:31:d9:0c:10:39:28:1e:55:12:2c:cb:
         0e:88:3a:78:47:25:af:58:d7:f7:69:d3:cb:c5:87:6b:83:6f:
         78:03:a2:10:14:28:dd:9f:2e:20:9f:bc:fe:e5:29:a8:3b:5e:
         2a:35:75:2b:20:97:4b:38:69:92:47:05:95:ac:87:08:66:34:
         f1:ef:6f:82:95:8d:3b:9c:05:16:6c:c2:35:3c:37:ae:ca:19:
         5d:e7:9d:eb:7e:9f:e5:5f:5f:70:27:e5:86:d3:a7:33:2a:d6:
         0b:1f:46:4c:1b:87:b9:46:99:93:90:02:63:24:92:78:27:cc:
         23:9d:04:e1:23:a6:f2:c6:1a:03:21:71:48:0d:7b:e0:8d:e0:
         57:c2:59:ad:bf:7d:6e:99:4d:7b:89:3d:b9:64:87:66:41:a3:
         1c:31:fe:80:74:b5:e0:15:d1:3e:bd:1b:21:64:ce:74:17:de:
         30:98:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 06:47:52 2026 by rpki-client