This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3139322e302f32312d3234203d3e203237373733.roa
File:                     3139302e3135302e3139322e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier:          Sr/ZT2Pmmo0Pi48cHO8zVjyUqqBb/aHG1cMt6G3Mxa4=
Subject key identifier:   9F:04:8B:D3:95:FB:2C:BE:9C:73:92:46:76:68:BB:53:EF:83:D6:EF
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       3C945C8C32C4F149B5F342930D3933B6D86C9809
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3139322e302f32312d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 20:53:22 +0000
ROA not before:           Tue 06 Jan 2026 20:48:22 +0000
ROA not after:            Tue 05 Jan 2027 20:53:22 +0000
asID:                     27773
IP address blocks:        190.150.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:94:5c:8c:32:c4:f1:49:b5:f3:42:93:0d:39:33:b6:d8:6c:98:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:22 2026 GMT
            Not After : Jan  5 20:53:22 2027 GMT
        Subject: CN=9F048BD395FB2CBE9C7392467668BB53EF83D6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:21:9e:9a:22:8d:50:96:49:22:8b:d3:53:19:
                    46:e3:29:1a:bc:7d:cb:67:bc:a0:f2:15:5d:1f:e0:
                    d9:51:54:c0:47:2e:6b:65:dc:24:61:1f:02:4f:84:
                    08:1b:e0:1d:fa:0e:0e:20:30:b2:3a:5c:f2:49:b3:
                    4d:59:60:01:90:e7:5e:e4:c3:8f:d5:94:51:1e:35:
                    e3:59:f1:8e:2e:aa:d7:50:5d:46:9a:9b:03:fe:58:
                    18:fe:60:51:9f:bd:e2:98:a7:98:d3:ac:46:d8:cf:
                    3d:03:29:f2:5e:4b:2f:47:ae:ff:37:a4:90:d9:35:
                    1e:0e:52:85:8c:d7:d5:60:9c:e3:0a:64:e7:7b:c8:
                    63:6f:19:99:c4:54:8b:f4:03:04:97:ce:1e:c6:e4:
                    e3:b8:df:ad:07:eb:24:1f:9a:13:44:3b:8b:27:ff:
                    52:a9:73:4b:96:2a:3d:51:42:b3:8e:9d:c0:fc:81:
                    53:44:74:51:e3:75:82:2e:ea:27:1b:36:28:d3:48:
                    12:aa:d9:27:98:da:9e:9d:59:a4:3f:3b:62:ce:a4:
                    d4:a2:21:9e:15:6d:1c:44:46:0f:f8:76:22:70:d2:
                    20:9e:55:73:bc:74:c7:21:e7:0c:d5:c7:c4:ec:60:
                    b5:a0:21:53:1c:1d:73:52:4b:17:4d:7e:f3:de:f5:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:04:8B:D3:95:FB:2C:BE:9C:73:92:46:76:68:BB:53:EF:83:D6:EF
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3139322e302f32312d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:45:d4:9b:22:52:c6:a1:92:35:ff:44:d9:01:ec:67:41:53:
         32:bc:74:a1:e8:64:cc:3e:79:45:b8:3b:03:b3:7a:10:1a:cb:
         90:f8:40:1e:f5:eb:7b:cc:16:52:09:0e:1d:5c:c9:52:56:69:
         da:38:42:a2:6c:ef:9d:65:18:c8:5c:fc:a5:90:c9:95:de:42:
         5e:7e:5b:0b:8d:6e:71:fc:3b:bf:ac:73:30:69:8e:5c:48:0d:
         8e:ac:1b:03:70:d6:ad:02:e0:dd:d1:85:32:11:3d:f1:d4:2b:
         5f:cf:3a:74:cd:51:a4:b1:60:25:27:c0:c2:3d:84:27:29:95:
         d4:7e:73:34:cc:a4:86:da:a0:ae:9c:31:1f:db:00:6d:49:47:
         dd:34:46:a3:cd:31:1e:69:a3:89:a0:b7:8b:09:02:8f:54:53:
         12:fb:73:95:19:4c:06:49:86:16:c7:9d:2c:d1:46:9e:a2:0c:
         01:8a:db:54:ca:7c:82:4e:9d:55:a5:f8:fa:e7:b9:10:57:73:
         14:21:bd:a1:7f:e3:54:cd:8f:60:67:3c:ab:58:ef:ff:ff:14:
         7f:81:d4:0b:9d:0e:76:de:43:7c:b4:aa:34:a3:2e:5e:d1:aa:
         34:a2:f8:b2:ab:86:d4:6c:89:27:78:a4:e8:2f:57:ca:4b:8e:
         9c:39:93:ef
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPJRcjDLE8Um180KTDTkztthsmAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNjAxMDYyMDQ4MjJaFw0yNzAxMDUyMDUzMjJaMDMxMTAvBgNV
BAMTKDlGMDQ4QkQzOTVGQjJDQkU5QzczOTI0Njc2NjhCQjUzRUY4M0Q2RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5IZ6aIo1Qlkkii9NTGUbjKRq8
fctnvKDyFV0f4NlRVMBHLmtl3CRhHwJPhAgb4B36Dg4gMLI6XPJJs01ZYAGQ517k
w4/VlFEeNeNZ8Y4uqtdQXUaamwP+WBj+YFGfveKYp5jTrEbYzz0DKfJeSy9Hrv83
pJDZNR4OUoWM19VgnOMKZOd7yGNvGZnEVIv0AwSXzh7G5OO4360H6yQfmhNEO4sn
/1Kpc0uWKj1RQrOOncD8gVNEdFHjdYIu6icbNijTSBKq2SeY2p6dWaQ/O2LOpNSi
IZ4VbRxERg/4diJw0iCeVXO8dMch5wzVx8TsYLWgIVMcHXNSSxdNfvPe9f7PAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUnwSL05X7LL6cc5JGdmi7U++D1u8wHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMxMzkzMDJlMzEzNTMwMmUzMTM5MzIy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM3MzczNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvpbA
MA0GCSqGSIb3DQEBCwUAA4IBAQAhRdSbIlLGoZI1/0TZAexnQVMyvHSh6GTMPnlF
uDsDs3oQGsuQ+EAe9et7zBZSCQ4dXMlSVmnaOEKibO+dZRjIXPylkMmV3kJeflsL
jW5x/Du/rHMwaY5cSA2OrBsDcNatAuDd0YUyET3x1Ctfzzp0zVGksWAlJ8DCPYQn
KZXUfnM0zKSG2qCunDEf2wBtSUfdNEajzTEeaaOJoLeLCQKPVFMS+3OVGUwGSYYW
x50s0UaeogwBittUynyCTp1Vpfj657kQV3MUIb2hf+NUzY9gZzyrWO///xR/gdQL
nQ523kN8tKo0oy5e0ao0oviyq4bUbIkneKToL1fKS46cOZPv
-----END CERTIFICATE-----
Generated at Fri Jan 23 19:00:54 2026 by rpki-client