This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3139302e3130332e3139322e302f32322d3234203d3e203237393837.roa
File:                     3139302e3130332e3139322e302f32322d3234203d3e203237393837.roa (raw, json)
Hash identifier:          qqQN4dhBDX1fIcRMmCX+8fTeh53w8tIwxyQj4UsfqcY=
Subject key identifier:   1B:13:19:DE:9B:3A:72:41:35:64:7C:8C:96:55:3B:91:FD:37:0F:2A
Certificate issuer:       /CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
Certificate serial:       68AAFF4B441926039FA70A43AABA421F43719D29
Authority key identifier: 13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3139302e3130332e3139322e302f32322d3234203d3e203237393837.roa
Signing time:             Mon 05 Jan 2026 18:40:00 +0000
ROA not before:           Mon 05 Jan 2026 18:35:00 +0000
ROA not after:            Mon 04 Jan 2027 18:40:00 +0000
asID:                     27987
IP address blocks:        190.103.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 21:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:aa:ff:4b:44:19:26:03:9f:a7:0a:43:aa:ba:42:1f:43:71:9d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
        Validity
            Not Before: Jan  5 18:35:00 2026 GMT
            Not After : Jan  4 18:40:00 2027 GMT
        Subject: CN=1B1319DE9B3A724135647C8C96553B91FD370F2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:c3:54:8e:31:27:26:3b:c3:c9:11:48:06:
                    ff:ab:d0:7f:4c:78:0d:c7:2a:ac:b9:ec:70:04:44:
                    db:69:f9:de:c3:d4:c4:ff:27:6f:2e:59:45:3c:22:
                    88:26:3a:c0:13:51:cf:2d:b0:c6:b2:03:0b:8f:d8:
                    fd:fc:a2:7c:02:ef:e3:f1:2f:92:22:97:48:2e:df:
                    d0:d7:34:d8:eb:39:23:09:72:8b:17:20:20:3d:d1:
                    dd:9a:8b:9f:2b:d6:04:51:54:be:7e:88:46:77:4d:
                    46:d6:1e:20:43:71:e2:4a:f1:21:d1:20:1d:3b:ce:
                    b3:db:5c:66:c4:17:6b:10:f9:fd:06:be:8e:8f:00:
                    24:91:01:3f:db:ac:c9:68:13:d2:4e:23:8f:d0:dd:
                    5a:d6:5a:02:4d:0f:c2:d6:1b:3c:a5:36:06:fb:86:
                    e9:af:68:1e:d5:f9:ce:30:d3:4c:d5:1e:2f:c5:89:
                    f9:d1:b3:f4:ac:8c:38:91:af:e7:8b:56:00:b7:02:
                    74:52:84:55:7d:19:7a:c2:7f:5b:47:1a:d3:42:75:
                    48:04:0e:a6:af:8a:f5:51:95:39:3d:52:3d:23:68:
                    4c:36:39:57:b7:a4:1f:bb:8b:17:d3:b5:39:67:fd:
                    9a:1b:f2:e6:d1:78:ca:73:27:2f:3a:13:66:12:8f:
                    8f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:13:19:DE:9B:3A:72:41:35:64:7C:8C:96:55:3B:91:FD:37:0F:2A
            X509v3 Authority Key Identifier:
                keyid:13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3139302e3130332e3139322e302f32322d3234203d3e203237393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:52:67:00:7a:b6:f4:49:c9:6a:c8:14:36:ce:9c:28:cb:6e:
         71:14:40:26:a8:68:2c:15:d6:7a:a0:db:81:f8:0e:97:e1:23:
         a5:00:54:c9:8f:bf:62:5c:d4:92:43:b2:57:c1:3b:7d:78:de:
         0f:66:ac:35:3f:a7:fd:a1:66:59:dd:8b:4a:00:25:8c:58:6f:
         a2:36:cf:97:80:b5:22:03:94:8b:dc:2b:d4:31:fc:eb:91:f9:
         10:fc:63:38:a2:e3:5c:f0:88:16:f0:cf:20:dd:be:79:44:68:
         88:26:54:16:66:6f:41:24:4d:75:79:eb:58:4e:9e:a9:b4:7d:
         e9:71:09:12:af:a1:a1:0c:1c:3b:84:88:ac:28:fa:29:d4:3c:
         d5:60:de:64:19:c4:0a:ec:84:00:99:88:1a:c1:5e:c2:bb:bd:
         a3:26:37:d0:35:6d:65:e0:46:3c:6c:f4:7f:35:3e:33:d7:24:
         9b:49:ea:86:c8:84:f8:92:32:9d:89:07:0d:43:00:c0:c2:e1:
         9b:62:09:ae:a9:04:a2:73:c8:b3:dd:ed:a9:18:6b:d0:a1:36:
         23:67:4a:48:a3:7c:79:9b:a2:ef:e4:64:f3:96:58:fa:5f:20:
         a9:72:20:27:86:12:14:fa:a5:7b:e4:2b:be:eb:ff:15:05:a1:
         c6:ab:ab:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:13:11 2026 by rpki-client