This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e302e302f31372d3234203d3e2036343731.roa
File:                     3139302e3135312e302e302f31372d3234203d3e2036343731.roa (raw, json)
Hash identifier:          +GWrEKIWnP51/uqn6ismU/UMRRzWnZMSAc3mRtffslc=
Subject key identifier:   56:48:38:9E:C1:BA:C7:5B:3A:08:0B:66:74:8C:6B:AF:46:A4:1B:E2
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       328C2DBADA30A30919781EC3ED9DEEBBE1C8E17A
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e302e302f31372d3234203d3e2036343731.roa
Signing time:             Tue 06 Jan 2026 20:48:16 +0000
ROA not before:           Tue 06 Jan 2026 20:43:16 +0000
ROA not after:            Tue 05 Jan 2027 20:48:16 +0000
asID:                     6471
IP address blocks:        190.151.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8c:2d:ba:da:30:a3:09:19:78:1e:c3:ed:9d:ee:bb:e1:c8:e1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Jan  6 20:43:16 2026 GMT
            Not After : Jan  5 20:48:16 2027 GMT
        Subject: CN=5648389EC1BAC75B3A080B66748C6BAF46A41BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:31:64:9e:c7:2e:ac:55:6e:cd:ce:31:cf:
                    e9:8a:d2:01:da:da:b7:d1:9a:c6:44:ef:eb:d9:aa:
                    f9:7d:ca:76:be:09:f4:a9:51:38:88:d6:4c:42:f2:
                    0a:84:2c:e1:ba:12:5c:c1:69:6c:4c:fc:d1:82:6e:
                    a3:0a:7a:2b:dd:52:00:c3:88:51:9a:e1:8b:45:48:
                    88:62:aa:c2:69:d6:57:06:b6:e0:ba:e1:6a:c8:49:
                    5d:93:c6:15:7f:3f:0d:44:b3:fc:0c:fa:4e:0c:5d:
                    3e:eb:83:6f:47:25:6f:1a:e7:f8:38:b8:ba:f6:b3:
                    1e:62:43:a2:b6:d0:5d:03:72:fa:df:bf:94:e8:58:
                    39:4c:e0:60:0b:fe:20:ca:c7:0f:23:4a:15:89:64:
                    e4:04:14:cd:b2:ca:31:43:72:2f:04:d5:0d:ed:65:
                    18:e3:af:7e:4a:71:b7:6a:50:50:89:69:38:0a:c7:
                    a7:f9:31:ef:53:82:48:f5:10:a6:fd:c2:48:11:57:
                    a5:3d:78:9c:86:4a:ae:2b:a0:6e:94:b5:ec:a3:fd:
                    07:70:e9:20:48:b9:ea:82:e7:bb:94:7f:17:95:6e:
                    09:5c:3b:e3:64:6e:a4:d7:2b:d0:d8:bf:6f:90:9f:
                    39:c3:68:be:d3:13:e8:e1:e9:8d:30:31:b6:47:9d:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:48:38:9E:C1:BA:C7:5B:3A:08:0B:66:74:8C:6B:AF:46:A4:1B:E2
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e302e302f31372d3234203d3e2036343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         58:d8:6e:58:a6:10:03:f4:88:93:4a:3e:16:18:e3:62:3e:f7:
         d2:5f:7f:81:7b:9d:7c:f0:88:e8:5b:fc:ea:41:95:76:48:0c:
         f8:d9:06:d0:0e:24:9c:a4:51:6a:60:32:62:8f:fb:1a:ef:aa:
         fa:aa:2d:26:1b:18:a3:e9:b2:cf:ee:b2:e3:0c:18:41:fe:13:
         bd:f4:7f:c6:4c:2c:0b:12:f9:77:ec:e0:69:07:f9:e5:1c:58:
         fa:1e:f5:6e:da:57:11:e9:f6:39:fe:93:8e:d7:b7:f1:30:0c:
         20:39:75:6e:2d:a5:c1:50:35:0b:f9:17:01:98:7f:65:b5:32:
         9a:d6:73:59:05:c9:9b:8e:e9:dc:3e:78:04:fe:77:ce:a7:c8:
         8f:06:67:32:e6:d2:63:03:91:a7:53:87:3b:dc:d3:02:db:6b:
         3a:7a:2e:ff:03:de:2d:ec:e9:a6:8c:29:92:3e:5e:f4:73:9a:
         ce:38:4e:2e:7e:c1:b1:f1:cb:55:a2:93:0e:b8:f9:57:54:0e:
         05:e8:7f:3d:a6:45:ab:f9:67:23:75:bb:89:f0:a0:73:92:7b:
         c0:71:8a:e7:88:f7:eb:e4:2e:7f:1f:24:e7:43:3f:46:dd:ec:
         0a:7b:5e:56:98:01:01:fc:8f:bf:6d:6b:64:7c:75:5b:7a:c6:
         0d:52:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:04:51 2026 by rpki-client