This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35362e302f32312d3234203d3e203237373733.roa
File:                     3139302e3135302e35362e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier:          1tpYxnxu31VidvuHRgOAWAgfRBQT5YbybOlG10a3fMs=
Subject key identifier:   1E:8A:F3:53:88:A1:D8:E9:D4:6B:32:3F:7C:EE:A9:6D:B1:BE:6C:C7
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       77AB4C37C1576E2DDD71086F58DD7B91A64E4C59
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35362e302f32312d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 20:53:14 +0000
ROA not before:           Tue 06 Jan 2026 20:48:14 +0000
ROA not after:            Tue 05 Jan 2027 20:53:14 +0000
asID:                     27773
IP address blocks:        190.150.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ab:4c:37:c1:57:6e:2d:dd:71:08:6f:58:dd:7b:91:a6:4e:4c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:14 2026 GMT
            Not After : Jan  5 20:53:14 2027 GMT
        Subject: CN=1E8AF35388A1D8E9D46B323F7CEEA96DB1BE6CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1b:fc:08:01:6c:56:b0:5e:c6:2f:d2:8e:7a:
                    72:25:c5:1c:76:ef:56:6f:4b:6a:17:72:d3:8a:a9:
                    cb:83:ba:95:7c:ae:90:fe:0f:27:77:98:2a:f5:18:
                    85:e7:d6:23:1a:9f:5d:04:7a:4c:92:e4:c6:66:65:
                    a9:17:43:8f:2f:ee:fb:96:b3:8c:f9:34:26:ba:fb:
                    99:66:3c:ca:ac:9b:8b:ad:55:7b:21:ca:73:a1:93:
                    95:f5:b2:d6:84:a0:e0:a2:04:4a:25:e1:98:51:f3:
                    3d:47:da:e5:2f:51:65:56:e3:26:80:13:2f:13:81:
                    51:bf:4c:66:af:4f:17:5f:2c:23:50:9e:c2:c7:28:
                    6a:ea:58:f2:36:c9:d9:a6:7e:6a:29:45:fc:ee:48:
                    52:06:2f:17:b8:4f:5b:2a:78:80:a1:14:e5:ed:04:
                    24:37:aa:d5:bb:ad:66:39:ac:ef:7e:0c:74:68:64:
                    e2:a9:b4:21:ef:24:44:18:59:82:bf:e6:5b:9e:86:
                    5b:4a:b1:aa:25:7d:35:ec:a6:60:3e:58:20:d6:fa:
                    b4:96:89:21:17:f0:5a:06:81:cf:b8:bb:9c:43:22:
                    38:0b:0c:34:3a:3b:bd:59:2f:7d:03:3e:48:77:ca:
                    a0:a1:24:8a:ce:4f:bf:a4:d9:06:68:e2:4e:9b:da:
                    4d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8A:F3:53:88:A1:D8:E9:D4:6B:32:3F:7C:EE:A9:6D:B1:BE:6C:C7
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e35362e302f32312d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:5e:fc:dc:f8:e9:9e:40:08:83:e0:fd:0c:91:c3:20:ea:52:
         0f:ee:a6:9d:2b:34:93:b6:f4:64:a7:a4:4e:6f:24:40:be:f0:
         fb:a8:d4:c9:fb:ac:08:6b:1c:2a:17:d2:5d:1c:fb:fb:a8:24:
         58:b7:82:69:bf:ed:fb:ae:a5:0d:c2:7b:6b:2c:38:21:13:9c:
         6b:5f:70:ba:fd:6f:1b:4b:a3:67:4e:2f:fd:0b:4a:49:6b:da:
         32:3c:5e:2b:65:f1:d5:bf:99:ca:90:44:03:08:28:8d:70:73:
         da:ec:bc:64:d2:3e:55:12:0f:30:8d:a7:e0:75:a2:d2:3c:3c:
         72:e4:e8:a0:9f:de:a7:41:ff:6c:45:e2:15:01:d0:8f:2a:4d:
         17:50:e3:8d:00:58:cc:82:01:00:ad:2a:33:b5:ea:cf:a8:6e:
         5e:ca:6a:0a:cb:af:d4:91:e7:ed:6e:d1:30:e7:80:a7:c7:e0:
         44:54:0c:49:c3:c0:4d:16:5d:35:67:2b:50:6c:d5:e4:06:2f:
         59:82:82:dc:32:6e:f6:63:d1:4f:00:bf:93:1b:63:5d:80:a6:
         4c:b8:1f:ec:6e:2a:74:80:08:98:94:40:23:83:1a:ff:43:ad:
         83:78:49:2d:91:e6:a3:04:46:bb:b7:c7:a5:7c:3c:89:30:e3:
         ca:36:eb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:59:48 2026 by rpki-client