This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e36382e302f32332d3234203d3e203237373733.roa
File:                     3139302e3135302e36382e302f32332d3234203d3e203237373733.roa (raw, json)
Hash identifier:          KsO4YNsqV+Gs+Qd2xoPLxnygmFf3xiCFhHFhlgSsMRI=
Subject key identifier:   E3:DA:F5:B8:56:9C:5D:04:5A:C7:1C:5C:C0:DE:7C:65:8F:CC:25:EA
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       1BF6D9C9F0F1010F1907A5B1923C9FC430AA8A01
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e36382e302f32332d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 20:53:10 +0000
ROA not before:           Tue 06 Jan 2026 20:48:10 +0000
ROA not after:            Tue 05 Jan 2027 20:53:10 +0000
asID:                     27773
IP address blocks:        190.150.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f6:d9:c9:f0:f1:01:0f:19:07:a5:b1:92:3c:9f:c4:30:aa:8a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:10 2026 GMT
            Not After : Jan  5 20:53:10 2027 GMT
        Subject: CN=E3DAF5B8569C5D045AC71C5CC0DE7C658FCC25EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:5c:40:db:85:9c:ba:41:c8:19:67:fa:06:
                    25:ae:fc:42:90:ce:65:4c:3f:ea:ef:00:9b:d9:3b:
                    7f:9e:b4:d7:0e:13:37:fa:3d:e6:1e:3f:45:56:af:
                    b6:5c:77:b4:3f:33:23:0f:aa:77:63:be:ec:1f:67:
                    b7:80:9d:5b:41:eb:3b:1f:8f:3b:b4:a2:fa:36:3e:
                    a9:4e:a4:4b:62:ac:01:fc:4c:7f:27:d9:65:c3:f8:
                    0b:18:35:7e:22:9a:49:e4:61:19:e3:1c:17:1d:5c:
                    a6:a8:8a:9e:60:b8:86:c4:b9:b8:5c:59:6e:2b:07:
                    a2:1e:e4:55:78:63:6e:9a:4f:8f:14:e8:d7:f6:0f:
                    fd:b3:fc:a3:21:ef:cf:59:47:c8:e0:25:e2:c5:84:
                    87:78:20:c6:e1:3c:30:2b:78:56:70:2e:75:1a:a2:
                    21:29:ed:69:52:94:68:66:f8:a2:24:61:60:7d:8d:
                    f4:e7:a5:5b:8c:b4:36:88:33:ae:36:a0:72:e0:0c:
                    51:42:eb:3f:59:1a:5c:1e:47:b4:b3:a6:af:4f:43:
                    9d:92:02:bb:60:f8:ba:8b:67:f5:ef:26:40:85:66:
                    48:7d:c6:61:a4:d6:7d:2b:86:d9:cd:35:aa:bb:50:
                    4a:82:2e:69:f5:1f:aa:aa:9d:10:49:06:9d:b9:21:
                    76:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DA:F5:B8:56:9C:5D:04:5A:C7:1C:5C:C0:DE:7C:65:8F:CC:25:EA
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e36382e302f32332d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:d8:ad:e0:0c:e0:de:ea:a0:14:5e:ad:b0:a2:8d:36:4d:09:
         cc:4c:bf:fa:ce:f3:0d:49:28:3c:19:e9:5e:54:d1:98:8b:97:
         4e:cb:87:28:4b:e7:89:6e:49:0f:41:54:39:19:5e:cf:62:f5:
         05:50:d4:df:5d:09:ea:dc:3c:dd:7e:a3:f8:28:9c:37:14:97:
         64:aa:18:cb:4b:b9:6d:6e:49:84:a7:8b:64:8a:25:44:49:a0:
         b7:31:49:6f:60:fd:67:94:bd:50:c1:27:3a:96:ed:de:ea:7f:
         e5:ae:66:ad:e6:17:2e:05:2f:04:b2:06:a5:c6:8a:16:aa:b7:
         32:b0:5c:2e:d6:4a:01:b8:b0:0f:c8:4f:11:ad:d3:04:db:99:
         cb:fe:46:5b:62:85:f5:7e:49:8a:4c:d5:65:c9:9f:f5:a0:88:
         b4:8c:46:82:62:cc:2c:45:5f:e5:30:e6:cd:6c:d0:3e:44:de:
         50:f7:0f:56:49:5f:5c:5f:eb:3c:54:43:64:f9:be:05:15:05:
         5e:6a:bd:49:da:4b:a5:00:bd:e3:aa:1a:32:22:b0:74:33:27:
         65:6c:f4:7a:4c:24:ae:ba:3c:96:4e:34:29:c4:26:b3:e4:39:
         d4:e8:24:ee:ce:bf:56:1c:9a:fe:d0:22:58:5f:ef:d4:07:5b:
         71:08:ca:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:58:50 2026 by rpki-client