This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e39362e302f31392d3234203d3e203237373733.roa
File:                     3139302e3135302e39362e302f31392d3234203d3e203237373733.roa (raw, json)
Hash identifier:          A5Rk63cQVPo+fg9zLxSW9NMHEvmPRV6ZzvtVt8aJAkU=
Subject key identifier:   20:0E:D7:E0:28:BF:A3:A9:87:46:90:1C:C7:37:36:E0:02:06:85:4F
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       08528F254A93918C558BBD748F934ED1C2EFE428
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e39362e302f31392d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 20:53:11 +0000
ROA not before:           Tue 06 Jan 2026 20:48:11 +0000
ROA not after:            Tue 05 Jan 2027 20:53:11 +0000
asID:                     27773
IP address blocks:        190.150.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 21:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:52:8f:25:4a:93:91:8c:55:8b:bd:74:8f:93:4e:d1:c2:ef:e4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:11 2026 GMT
            Not After : Jan  5 20:53:11 2027 GMT
        Subject: CN=200ED7E028BFA3A98746901CC73736E00206854F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:6f:dd:d9:51:16:38:70:79:91:1c:bb:8a:
                    60:31:b6:96:db:b0:82:1a:da:d5:02:4a:d0:3a:bc:
                    c0:e1:a7:d4:a8:10:80:f7:01:8c:72:6f:14:d3:ee:
                    72:3e:3d:78:4f:87:f5:d6:c8:25:5d:d5:38:8c:48:
                    73:ce:53:46:30:df:cc:b8:72:bd:ac:65:e2:59:a7:
                    54:89:b7:7f:d0:67:bb:d0:fd:0b:4b:bd:54:be:de:
                    eb:41:e3:36:a3:96:26:7b:c0:90:9a:ca:73:ea:fc:
                    18:b2:66:09:e2:23:d1:11:cc:e7:30:91:61:8e:33:
                    b5:5c:4f:a8:2f:a9:a0:a4:67:63:c9:a1:7a:e6:fb:
                    54:40:cd:06:49:03:e9:3e:14:1e:97:08:81:05:17:
                    19:fd:d0:af:26:cb:7b:62:10:5a:3c:2e:f1:ef:45:
                    57:74:aa:85:9a:3a:b2:99:b4:93:a2:70:5e:6c:36:
                    7a:7d:88:93:7c:ef:70:dd:a2:f0:57:07:bb:86:b5:
                    1a:41:fe:b1:2d:1a:b4:20:ca:0d:3f:28:dc:80:3e:
                    c5:d0:d6:b8:fe:69:34:c9:c5:54:5f:bb:f6:67:29:
                    c0:62:b9:ab:5a:89:8c:e4:64:15:a4:79:e4:78:95:
                    a8:1f:ca:c4:6f:44:25:3f:58:da:27:1c:eb:ad:46:
                    d0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0E:D7:E0:28:BF:A3:A9:87:46:90:1C:C7:37:36:E0:02:06:85:4F
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e39362e302f31392d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         80:3f:36:ea:37:70:c3:03:81:a5:f5:28:6f:e6:5d:a9:05:55:
         57:15:11:59:10:74:7e:20:57:41:90:e6:9c:1d:78:73:42:86:
         21:3a:61:24:12:ec:2e:5d:3a:b4:f3:ae:42:0d:d1:fe:38:d4:
         e4:69:62:7b:86:c7:fd:7a:f8:58:66:62:02:8f:66:b3:e8:5d:
         f3:98:20:25:a4:6f:d2:a5:c1:ac:3a:08:e1:3e:89:d0:e6:d6:
         cc:60:af:ff:13:45:62:76:e3:76:7d:bb:33:63:cf:c9:aa:03:
         70:9b:f5:51:c6:59:a3:f5:d1:00:b4:09:72:ca:db:0f:5a:18:
         c6:89:c1:62:9b:5d:74:35:ac:e0:58:89:47:e5:64:29:03:30:
         51:77:d4:b0:c6:0e:c8:59:f3:48:3a:38:60:c4:f7:32:bc:d8:
         0e:07:c9:d3:28:4b:12:a7:0e:da:64:b2:12:fd:ae:7b:a8:8e:
         f8:27:1b:b4:44:db:69:68:5e:14:52:80:af:b5:6f:1f:94:17:
         e9:fd:4d:be:9b:7e:4e:be:6b:d5:4d:f6:07:70:42:34:80:bf:
         c7:fe:76:50:52:6f:b6:99:5c:53:81:f2:d7:ca:f3:81:fe:4e:
         03:af:af:38:d7:1d:c8:58:8b:ab:13:56:d7:5a:bf:39:a0:4e:
         04:e5:53:6b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCFKPJUqTkYxVi710j5NO0cLv5CgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNjAxMDYyMDQ4MTFaFw0yNzAxMDUyMDUzMTFaMDMxMTAvBgNV
BAMTKDIwMEVEN0UwMjhCRkEzQTk4NzQ2OTAxQ0M3MzczNkUwMDIwNjg1NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz2W/d2VEWOHB5kRy7imAxtpbb
sIIa2tUCStA6vMDhp9SoEID3AYxybxTT7nI+PXhPh/XWyCVd1TiMSHPOU0Yw38y4
cr2sZeJZp1SJt3/QZ7vQ/QtLvVS+3utB4zajliZ7wJCaynPq/BiyZgniI9ERzOcw
kWGOM7VcT6gvqaCkZ2PJoXrm+1RAzQZJA+k+FB6XCIEFFxn90K8my3tiEFo8LvHv
RVd0qoWaOrKZtJOicF5sNnp9iJN873DdovBXB7uGtRpB/rEtGrQgyg0/KNyAPsXQ
1rj+aTTJxVRfu/ZnKcBiuataiYzkZBWkeeR4lagfysRvRCU/WNonHOutRtABAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIA7X4Ci/o6mHRpAcxzc24AIGhU8wHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMxMzkzMDJlMzEzNTMwMmUzOTM2MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzNzM3MzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBb6WYDAN
BgkqhkiG9w0BAQsFAAOCAQEAgD826jdwwwOBpfUob+ZdqQVVVxURWRB0fiBXQZDm
nB14c0KGITphJBLsLl06tPOuQg3R/jjU5Glie4bH/Xr4WGZiAo9ms+hd85ggJaRv
0qXBrDoI4T6J0ObWzGCv/xNFYnbjdn27M2PPyaoDcJv1UcZZo/XRALQJcsrbD1oY
xonBYptddDWs4FiJR+VkKQMwUXfUsMYOyFnzSDo4YMT3MrzYDgfJ0yhLEqcO2mSy
Ev2ue6iO+CcbtETbaWheFFKAr7VvH5QX6f1Nvpt+Tr5r1U32B3BCNIC/x/52UFJv
tplcU4Hy18rzgf5OA6+vONcdyFiLqxNW11q/OaBOBOVTaw==
-----END CERTIFICATE-----
Generated at Fri Jan 23 18:58:54 2026 by rpki-client