This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3134352e302f32342d3234203d3e20323732383433.roa
File:                     3139302e3138352e3134352e302f32342d3234203d3e20323732383433.roa (raw, json)
Hash identifier:          hJ/KMf2B9BaYiKwU+LDqUewdFJu+JHduhdx8sA+gtKU=
Subject key identifier:   30:55:08:E5:1C:FA:06:F1:70:5A:27:74:AE:C7:79:A9:7B:20:CD:4E
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       180B7D53047D9AE67748CB5950987B67D5E42961
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3134352e302f32342d3234203d3e20323732383433.roa
Signing time:             Tue 06 Jan 2026 19:25:24 +0000
ROA not before:           Tue 06 Jan 2026 19:20:24 +0000
ROA not after:            Tue 05 Jan 2027 19:25:24 +0000
asID:                     272843
IP address blocks:        190.185.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 14:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0b:7d:53:04:7d:9a:e6:77:48:cb:59:50:98:7b:67:d5:e4:29:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Jan  6 19:20:24 2026 GMT
            Not After : Jan  5 19:25:24 2027 GMT
        Subject: CN=305508E51CFA06F1705A2774AEC779A97B20CD4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b2:a5:26:3c:15:c4:9e:55:fc:dd:e4:d5:87:
                    05:92:88:4f:54:2c:6e:d3:cf:25:e2:46:07:12:f0:
                    56:2c:fc:28:81:7b:96:25:b8:05:c2:96:ab:05:47:
                    3a:7e:eb:1f:f6:b1:46:fb:22:6e:1a:af:16:9a:67:
                    bd:31:3c:84:8b:f3:22:e6:5a:5a:e3:be:96:4f:8e:
                    ed:7d:e2:4e:3e:0d:cb:f7:b4:97:9c:08:a9:1d:9a:
                    2a:b9:9e:dc:ce:36:41:af:71:ea:34:bc:e6:eb:dd:
                    03:d0:e4:3c:ec:5e:17:a2:1b:43:d0:6d:44:33:7e:
                    8c:c0:7a:db:df:cc:b1:3a:50:c6:f3:b6:d4:68:bf:
                    83:79:17:21:c1:d1:e6:1c:3b:73:8f:14:d1:50:a0:
                    e2:c2:1b:92:30:fe:c3:e0:80:8a:d2:d9:26:0c:8c:
                    80:c3:4c:6d:81:ec:31:c2:ec:13:6f:21:0b:3f:10:
                    b2:c4:49:8d:48:97:22:44:ec:19:90:05:59:42:ca:
                    eb:7f:67:f8:09:8c:9b:16:3b:f4:e9:ea:15:58:4c:
                    e9:a1:2a:d8:c6:95:44:16:22:b1:30:60:86:35:5c:
                    04:26:55:f5:95:fc:53:dc:de:11:4c:d4:ff:60:d6:
                    83:03:2b:53:62:a6:c6:23:2d:20:44:6c:94:91:f4:
                    52:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:55:08:E5:1C:FA:06:F1:70:5A:27:74:AE:C7:79:A9:7B:20:CD:4E
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3134352e302f32342d3234203d3e20323732383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:a5:50:8d:c7:a4:58:85:70:d3:04:7f:5b:2d:2b:1b:cf:f3:
         6e:26:93:f4:17:2a:2f:20:94:50:1c:20:a8:85:3a:8a:5f:b4:
         8e:9c:74:da:84:c3:67:cb:80:e8:0b:c2:2f:2e:fc:d3:1f:3b:
         0a:1d:26:d2:9b:f1:2f:17:c6:51:57:af:11:c1:63:d3:6a:34:
         96:9b:0f:98:a0:fa:fe:ae:f8:12:95:48:80:4d:b5:c6:2b:20:
         d0:15:56:a1:2c:b0:56:4f:38:71:36:fe:0f:27:35:4f:a3:4f:
         1e:a7:d4:05:62:55:2d:87:45:b8:24:ad:a5:9d:60:57:cd:26:
         8c:69:b1:24:80:a0:98:05:dd:50:35:94:44:07:3d:6c:93:7c:
         ce:bd:c0:d4:55:d2:cd:5f:f2:5f:af:ee:1b:a9:9c:89:2c:6c:
         36:5f:d7:85:b4:e6:da:14:40:29:51:f1:1e:94:92:af:ca:b8:
         12:78:a6:87:a3:db:c1:c3:8f:89:5e:0c:2d:bd:5e:a8:bb:5d:
         2e:f0:e1:57:8b:35:68:43:cf:66:63:92:53:a7:07:2f:d4:6d:
         f8:d2:64:c1:dc:1d:30:36:d6:4a:77:7e:4a:df:01:d1:42:3d:
         f3:cc:d3:cb:ee:08:95:9e:b4:38:67:66:2e:00:c1:46:1b:81:
         ca:d4:67:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:05:39 2026 by rpki-client