This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e37302e302f32342d3234203d3e203237373733.roa
File:                     3139302e3135302e37302e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          nR5zXue3ws4hkXpkjMx/vZByFb0eqzpByZws/urN8nI=
Subject key identifier:   15:92:67:89:BD:04:9E:C0:4F:3F:34:5D:10:83:74:1E:A4:9D:99:52
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       4D318B229573D315E7628069EE2A0DC68111212D
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e37302e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 20:53:07 +0000
ROA not before:           Tue 06 Jan 2026 20:48:07 +0000
ROA not after:            Tue 05 Jan 2027 20:53:07 +0000
asID:                     27773
IP address blocks:        190.150.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:31:8b:22:95:73:d3:15:e7:62:80:69:ee:2a:0d:c6:81:11:21:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:07 2026 GMT
            Not After : Jan  5 20:53:07 2027 GMT
        Subject: CN=15926789BD049EC04F3F345D1083741EA49D9952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:16:91:a9:7c:eb:9f:9e:6b:91:6d:7f:6d:0d:
                    c0:ff:0f:83:c6:68:1b:09:62:a9:9d:ac:3b:fa:e4:
                    51:62:ca:86:ec:4c:1a:aa:d6:ca:fe:2a:6e:11:96:
                    54:72:21:07:e6:be:96:1a:8f:de:d4:09:78:f8:70:
                    e0:04:cc:a6:df:6b:ad:16:71:7b:70:d5:70:db:0a:
                    4f:09:86:8d:b0:59:47:80:7b:a1:63:6d:30:62:78:
                    d4:bb:6a:13:03:ed:f1:09:8c:0c:78:27:43:e1:a9:
                    d1:44:c6:a0:4b:f3:04:d3:33:4e:19:7b:ad:b1:be:
                    05:c1:f7:00:f1:a1:81:b5:6e:d1:d1:f5:b6:6d:e4:
                    f3:8b:e1:82:95:9b:6e:b8:61:d2:6e:03:67:29:a7:
                    0d:df:bc:83:d1:52:5e:bb:2c:63:b2:c8:9b:6f:e1:
                    29:f4:5c:90:07:28:66:63:76:1c:fb:92:45:97:48:
                    b6:93:dd:ff:92:d6:ae:3c:d3:ec:93:32:4a:62:b6:
                    1d:8f:25:00:2e:42:07:b1:94:51:f7:88:2a:9c:1b:
                    25:52:c4:9d:17:02:7a:8f:c6:01:fb:10:6f:96:94:
                    bd:ad:f4:67:04:1a:cb:71:81:c4:0a:00:ba:35:7c:
                    e2:35:c8:97:97:5f:3e:bb:a6:91:fa:db:13:29:dd:
                    85:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:92:67:89:BD:04:9E:C0:4F:3F:34:5D:10:83:74:1E:A4:9D:99:52
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e37302e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:41:c4:4c:ba:f5:38:82:57:db:7c:a8:75:07:91:38:68:bf:
         3c:19:d7:0e:56:f6:3c:99:cb:10:00:ac:1a:1f:06:bc:0a:a8:
         9b:65:d5:8f:41:01:3a:56:a9:14:5c:45:bf:74:dd:07:d0:ae:
         be:98:dc:76:84:50:27:47:ce:8b:72:59:8a:f1:0a:f4:bd:e4:
         36:83:ac:5c:62:68:74:b9:50:cc:0b:42:60:b3:4e:95:12:31:
         06:a0:00:d4:46:6e:9a:22:1a:55:c6:13:03:58:86:02:a9:9b:
         d3:70:90:d3:4a:c1:66:18:b6:89:0c:61:6d:8f:51:98:63:92:
         c3:d8:27:88:b1:e8:8e:e4:dc:53:8a:3a:5c:05:a5:df:91:89:
         f3:b0:52:96:26:83:be:38:eb:98:74:55:c6:64:de:f3:3d:3e:
         e8:fe:85:ad:e4:7d:8e:76:90:a3:55:a3:e2:52:e2:f0:26:dd:
         08:16:a2:6c:a4:a3:68:f8:d7:06:a0:fb:09:2e:a0:95:61:d9:
         1a:f7:4b:e7:f5:3d:c0:2d:17:d0:ea:66:a9:34:b9:4f:8a:8d:
         05:31:22:1d:20:56:d9:f2:54:d5:aa:64:ae:c1:78:83:fd:90:
         3b:a4:b5:13:3a:c2:e1:8b:74:03:83:49:16:87:d1:7c:5e:df:
         36:87:2b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:58:55 2026 by rpki-client