This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3233322e302f32322d3234203d3e20323732383433.roa
File:                     3139302e3138352e3233322e302f32322d3234203d3e20323732383433.roa (raw, json)
Hash identifier:          cM149u3xBw0Nmr8z0zYsyLCRh1Y84Va7OSFyR8AOfs8=
Subject key identifier:   79:58:05:61:D2:C7:75:BE:BF:1B:34:F7:A5:57:A5:E0:44:CF:D8:14
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       62540446203F3CDA75131BEE5D7D3031A30AC314
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3233322e302f32322d3234203d3e20323732383433.roa
Signing time:             Tue 06 Jan 2026 19:25:25 +0000
ROA not before:           Tue 06 Jan 2026 19:20:25 +0000
ROA not after:            Tue 05 Jan 2027 19:25:25 +0000
asID:                     272843
IP address blocks:        190.185.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 20:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:54:04:46:20:3f:3c:da:75:13:1b:ee:5d:7d:30:31:a3:0a:c3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Jan  6 19:20:25 2026 GMT
            Not After : Jan  5 19:25:25 2027 GMT
        Subject: CN=79580561D2C775BEBF1B34F7A557A5E044CFD814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:00:77:c6:1a:b1:8f:58:d8:1f:4b:36:55:
                    1a:93:88:63:07:4d:f2:8e:c8:3a:b8:38:b0:e5:42:
                    b4:6d:b4:10:46:59:8e:6b:b4:92:be:85:88:cb:34:
                    91:2a:ee:63:08:19:e2:59:9f:2d:ef:80:3a:d4:75:
                    ac:9c:3e:52:03:73:17:12:a0:27:1b:75:03:91:45:
                    ec:b3:72:db:b5:87:3b:65:5f:d1:47:79:d9:1c:4a:
                    68:f2:17:bd:b4:a1:a2:53:0b:fb:69:98:fb:a5:a2:
                    97:4d:ce:43:30:1c:58:48:b1:da:53:1a:81:99:75:
                    64:27:f1:00:4a:1b:6b:1c:52:7b:6b:eb:dc:78:6f:
                    86:af:c7:2a:ff:49:4d:71:1e:de:75:c0:1a:52:09:
                    c5:63:56:da:7e:63:4c:e2:40:31:03:4e:e1:f7:8f:
                    e8:d8:4d:bf:81:cd:35:d1:88:a4:42:96:00:de:f5:
                    4e:5a:10:b1:47:55:eb:f8:7a:46:b2:b6:2d:13:b1:
                    cc:3b:5e:24:e3:b5:fd:c7:35:20:37:7a:8c:f1:45:
                    1a:23:45:0e:ed:ad:de:31:f0:63:6b:ff:e0:dc:00:
                    23:e8:f2:72:ac:8e:36:c0:11:1c:38:a4:06:74:03:
                    a5:e6:6d:03:7c:3a:5a:8c:29:b9:1b:27:21:86:8f:
                    ef:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:58:05:61:D2:C7:75:BE:BF:1B:34:F7:A5:57:A5:E0:44:CF:D8:14
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3233322e302f32322d3234203d3e20323732383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:b7:44:4f:99:05:39:f6:7d:5a:e4:36:b1:50:54:b2:d4:b0:
         e6:8a:2d:29:4b:6e:52:7b:61:04:cc:38:e2:34:3a:32:a7:e1:
         b9:8c:79:bc:78:e7:cd:b7:bd:63:64:f9:6a:dc:86:77:a3:da:
         e4:eb:d7:4f:6a:0e:9a:b4:12:be:21:05:54:36:fb:70:a0:f9:
         98:f9:aa:e3:14:6e:17:94:e9:f1:98:1c:05:b1:0e:5f:fb:29:
         86:3e:50:f0:cc:b2:4d:1c:df:eb:6c:f9:29:49:55:f6:e9:61:
         91:cf:24:94:c7:c3:21:8b:bc:73:07:10:a7:f9:a4:73:4e:d4:
         9b:3d:09:97:ce:6f:76:b5:63:64:ca:e6:2c:2f:c8:d6:19:53:
         5e:86:49:db:36:52:5c:55:0e:50:29:c0:b7:5b:64:3c:9f:c4:
         0c:8c:81:f1:53:1d:22:e0:13:a0:95:90:6f:8c:28:c4:84:ce:
         0e:f0:89:ed:99:9c:76:16:c4:ca:9d:c1:65:ee:92:21:ab:45:
         cd:03:9d:26:f5:fa:a9:7b:ed:36:c6:7a:c5:d1:50:66:cb:ed:
         19:11:a9:6f:aa:98:37:f2:62:1e:b4:d6:34:73:8c:9c:3a:ac:
         c2:a1:41:b7:03:66:25:8e:83:b4:a7:48:6f:7e:8b:5a:a8:44:
         8e:8a:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:27:49 2026 by rpki-client