This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e37322e302f32312d3234203d3e203237373733.roa
File:                     3139302e3135302e37322e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier:          yrnjnNW4Sh3qLKZafD0G8FFklvFTdqfQXm43eO1+CoU=
Subject key identifier:   3A:76:32:E2:17:67:22:F2:9A:72:53:E8:E2:AA:2C:D4:E5:C8:C2:5D
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       3B49CDE4F9E702607C4C231C28F9D330A92053B1
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e37322e302f32312d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 20:53:13 +0000
ROA not before:           Tue 06 Jan 2026 20:48:13 +0000
ROA not after:            Tue 05 Jan 2027 20:53:13 +0000
asID:                     27773
IP address blocks:        190.150.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:49:cd:e4:f9:e7:02:60:7c:4c:23:1c:28:f9:d3:30:a9:20:53:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:13 2026 GMT
            Not After : Jan  5 20:53:13 2027 GMT
        Subject: CN=3A7632E2176722F29A7253E8E2AA2CD4E5C8C25D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9d:bc:3f:b4:c0:d2:94:6d:2f:73:04:bd:41:
                    41:0a:31:2c:e6:b2:8f:28:08:c7:ee:f0:20:8f:58:
                    76:e6:99:d6:f5:77:d7:0e:be:e5:18:f6:4d:29:32:
                    58:8a:9e:5c:11:db:a3:85:1f:43:46:00:69:aa:72:
                    46:a3:b5:77:8f:e2:ae:0c:19:a5:7a:d2:ef:aa:9a:
                    e0:14:7d:63:8e:da:b3:2e:a5:a7:f7:6b:97:13:90:
                    f3:59:1c:74:89:2c:85:32:5d:00:0b:86:cb:fd:55:
                    48:b4:1b:4c:13:96:ca:55:a8:23:f5:2d:0c:0c:4c:
                    82:85:97:9d:e2:3b:1f:a5:7a:7e:0e:43:52:92:d5:
                    dd:4a:89:42:38:c3:b1:de:b7:48:e9:d8:e4:8b:e6:
                    e3:4a:c0:fa:ff:13:a0:a8:ca:e9:79:0e:c5:55:a6:
                    f0:a6:26:1a:71:85:d2:70:be:82:a9:bf:b0:02:b1:
                    ef:32:17:d1:61:c1:37:ce:ed:b6:be:ba:62:44:4e:
                    b8:5e:be:c9:f7:86:1d:4d:8f:c6:07:a0:4c:5f:b5:
                    0c:98:88:5d:1e:ec:6f:77:6c:15:20:ec:6a:fd:f0:
                    ee:24:16:ae:20:35:ba:db:01:63:57:e7:ad:15:13:
                    dd:a3:70:5a:15:82:79:46:76:66:7c:46:4e:73:51:
                    4e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:76:32:E2:17:67:22:F2:9A:72:53:E8:E2:AA:2C:D4:E5:C8:C2:5D
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e37322e302f32312d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:4a:aa:c2:47:65:e7:70:06:b7:65:22:7a:6f:0b:f4:d3:2b:
         ff:ba:88:b7:06:27:28:5b:d2:7e:5a:b5:c4:ac:9f:50:b5:7e:
         01:d4:06:83:5c:d3:68:bd:ef:fa:41:0a:e3:ae:d8:f3:b9:ec:
         36:3e:60:ae:01:72:dc:7c:b6:d9:10:13:b1:d8:40:47:17:b5:
         af:25:0b:90:36:00:50:8b:95:10:dd:76:fa:1b:3b:a8:45:ef:
         d0:10:a0:d5:86:e4:23:28:7e:a6:1a:5e:b0:d7:c5:53:e1:3e:
         16:b2:b2:d0:98:be:93:49:94:92:1f:87:db:9b:2c:8b:20:b2:
         95:2f:f1:7c:ca:f2:b6:7a:19:d5:4e:96:5f:12:17:81:96:71:
         d9:b7:fb:6d:10:bf:f3:26:e5:96:00:da:e4:50:82:fc:14:8c:
         38:de:88:47:2a:73:5a:48:17:c5:35:8a:3f:76:8b:7d:62:37:
         32:2a:74:ad:ad:48:00:2a:32:49:93:95:53:94:76:67:ec:7a:
         9b:a2:04:ee:a0:bd:09:e7:29:06:6a:de:53:da:77:9b:ca:55:
         22:f1:55:ab:6e:b6:3f:43:89:17:ff:d9:2a:b1:68:9e:e0:dc:
         bb:b6:b6:8c:88:c1:86:47:bb:9c:02:09:91:ba:bf:c3:c4:08:
         e1:a5:bd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 19:00:44 2026 by rpki-client