This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139302e3130392e3139322e302f31392d3234203d3e203233333833.roa
File:                     3139302e3130392e3139322e302f31392d3234203d3e203233333833.roa (raw, json)
Hash identifier:          hLWl9Dg3VMiYmRwfzlpat4mydG0iZF6pq7UH7sFGZWk=
Subject key identifier:   3F:C8:0C:05:49:EB:4B:C0:D5:BE:28:9E:97:C4:11:E3:AF:51:82:F2
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       4EDC4989D17C02050FD3CCC6AB60033F44F843C6
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139302e3130392e3139322e302f31392d3234203d3e203233333833.roa
Signing time:             Tue 06 Jan 2026 19:19:36 +0000
ROA not before:           Tue 06 Jan 2026 19:14:36 +0000
ROA not after:            Tue 05 Jan 2027 19:19:36 +0000
asID:                     23383
IP address blocks:        190.109.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:dc:49:89:d1:7c:02:05:0f:d3:cc:c6:ab:60:03:3f:44:f8:43:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Jan  6 19:14:36 2026 GMT
            Not After : Jan  5 19:19:36 2027 GMT
        Subject: CN=3FC80C0549EB4BC0D5BE289E97C411E3AF5182F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dd:95:78:85:91:a3:7e:d9:d8:bf:64:e5:db:
                    f2:9c:34:e3:3a:87:b2:f8:17:cd:a9:eb:d9:53:8f:
                    1f:76:db:29:6c:e0:74:4a:f3:69:82:50:04:25:73:
                    b9:c7:3a:e4:e0:12:92:ca:67:61:d2:d2:5b:b1:7b:
                    41:32:56:eb:3e:cb:51:64:5a:e6:d1:8d:cf:83:af:
                    0a:e7:2d:0c:fb:83:da:31:5b:12:a7:3f:61:d2:68:
                    59:39:13:5d:60:9a:74:26:51:83:64:e0:0d:9c:2f:
                    9e:16:67:13:74:54:b2:72:fa:16:c4:f1:1b:83:57:
                    12:54:19:8b:48:cb:77:77:5c:99:12:69:f7:b7:03:
                    e4:cd:25:00:4e:01:54:fe:0e:7c:42:18:41:8f:4f:
                    cf:de:f3:f8:e4:7e:fa:0e:25:4c:05:55:71:37:7e:
                    ad:58:1e:f6:b1:97:f6:c4:e7:e0:c6:ad:a9:e4:34:
                    20:f1:74:11:ab:c8:ee:f9:0e:8b:29:76:b3:98:46:
                    8b:b4:d8:6c:fa:10:3a:88:13:57:ad:2a:b2:93:8a:
                    41:43:a2:b2:cc:d6:55:6b:6b:61:6d:93:f2:5f:a5:
                    33:8e:d3:4b:89:87:ee:4a:8a:ef:c4:cb:f0:0c:e1:
                    2f:bd:8f:b6:1f:07:45:f8:3e:2f:4b:32:51:7b:cd:
                    a9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C8:0C:05:49:EB:4B:C0:D5:BE:28:9E:97:C4:11:E3:AF:51:82:F2
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139302e3130392e3139322e302f31392d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         75:2f:11:ae:7f:ea:2c:f4:41:62:80:78:b6:cb:80:8c:fd:cb:
         bf:d7:43:27:32:44:93:b2:56:e1:ff:3d:da:7c:52:34:71:d4:
         2b:cc:c2:cd:fa:6e:89:93:c2:14:19:6a:c7:53:d8:a1:84:e0:
         7c:5a:64:71:44:a1:af:ad:15:5c:97:e5:92:d8:5c:25:be:e5:
         a5:90:67:5c:c5:11:54:77:31:fd:47:5f:07:f6:b7:5f:b8:fd:
         48:1f:ef:74:be:9a:d9:64:5a:0c:ef:4a:79:14:05:d4:2e:df:
         c6:e9:b9:08:01:49:0a:82:16:b0:83:64:89:3b:54:69:ec:42:
         48:a3:1c:07:0a:2a:f4:7b:bc:8e:78:7c:3d:d2:71:28:cd:5f:
         38:be:24:56:37:59:2f:03:6e:1e:f4:96:a6:8d:bb:33:61:00:
         97:59:b0:6e:9c:e4:5d:a8:d0:43:c5:a0:42:5a:e9:cc:9c:6d:
         09:97:2c:c1:52:a5:f3:e6:40:7f:23:6d:69:ab:74:49:17:0b:
         25:89:ca:f2:a3:3d:6b:5c:4e:53:5f:ed:25:6d:cd:c9:dc:f3:
         20:5b:1b:c0:d7:fe:37:a5:0d:97:9f:2f:08:15:60:48:29:12:
         b1:f5:39:ab:09:e3:b8:73:ac:1e:96:ac:91:37:55:71:86:e8:
         e9:5a:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:56:23 2026 by rpki-client