This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34392e302f32342d3234203d3e20323635383331.roa
File:                     3139322e3134312e34392e302f32342d3234203d3e20323635383331.roa (raw, json)
Hash identifier:          NkH3/khii13lbVdvAQZvLPVjfCcBb8pbbF30lvVshu8=
Subject key identifier:   78:FD:3B:92:6B:4E:E4:56:EC:32:F2:64:A8:A0:80:95:C5:8F:D4:88
Certificate issuer:       /CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
Certificate serial:       18FE326B6883AFFDF652A14593883C5284CCF2EB
Authority key identifier: 9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34392e302f32342d3234203d3e20323635383331.roa
Signing time:             Tue 06 Jan 2026 19:01:53 +0000
ROA not before:           Tue 06 Jan 2026 18:56:53 +0000
ROA not after:            Tue 05 Jan 2027 19:01:53 +0000
asID:                     265831
IP address blocks:        192.141.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fe:32:6b:68:83:af:fd:f6:52:a1:45:93:88:3c:52:84:cc:f2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
        Validity
            Not Before: Jan  6 18:56:53 2026 GMT
            Not After : Jan  5 19:01:53 2027 GMT
        Subject: CN=78FD3B926B4EE456EC32F264A8A08095C58FD488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:7a:e6:4c:ff:b0:54:b9:7d:30:0c:1d:22:
                    80:a1:e9:48:f2:3e:01:fd:8a:aa:2e:5c:2b:32:83:
                    44:e4:72:84:59:52:98:0b:f1:b2:8b:c2:6a:ac:33:
                    a5:80:26:df:93:52:d0:3b:fb:66:45:63:03:2e:f8:
                    2b:91:48:7d:87:46:0d:06:07:c9:67:7f:49:f1:c2:
                    ee:3d:62:10:50:1a:dd:90:ab:2d:87:eb:d5:0d:c6:
                    a9:d6:1b:a3:3d:6e:2c:1d:eb:dc:a6:63:d1:53:b5:
                    f7:4e:5d:d9:ef:02:fc:8e:31:3d:4c:4a:5a:0c:7a:
                    b2:d7:06:97:5b:cb:bb:77:7f:0d:aa:7b:88:f2:eb:
                    cd:be:8a:08:d8:74:75:8e:d4:38:41:64:95:94:c8:
                    e5:a4:d6:ea:ef:bf:41:27:29:27:82:0e:94:c1:f4:
                    ec:26:1c:7a:6c:1a:ac:dc:c1:32:e8:13:4a:4a:c4:
                    31:ea:d3:05:5f:9f:d4:ce:6b:5b:88:51:ba:72:a5:
                    f6:d2:f6:b0:00:9b:8a:3b:e9:ba:aa:44:43:a4:14:
                    0d:ac:f9:21:46:79:12:06:0c:a6:3c:e2:23:e3:91:
                    5f:fe:d0:c3:88:a1:46:cb:56:23:c4:65:49:c1:5f:
                    3d:6d:91:ca:55:e8:39:9c:9d:ee:86:26:a7:2a:bb:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FD:3B:92:6B:4E:E4:56:EC:32:F2:64:A8:A0:80:95:C5:8F:D4:88
            X509v3 Authority Key Identifier:
                keyid:9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34392e302f32342d3234203d3e20323635383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:0e:d7:29:b7:67:dd:08:62:3e:e5:f9:a3:23:33:0f:e0:e1:
         c5:10:a4:dc:a4:ff:09:87:ab:f5:1d:16:3e:c5:10:c4:14:c4:
         57:7f:53:87:da:bc:4e:7e:67:71:85:d1:39:8f:d8:52:36:6d:
         41:7c:50:40:a9:04:61:f8:4b:fa:79:5e:fb:d8:26:11:83:7c:
         b1:48:b6:f2:04:74:be:e8:d0:92:34:41:69:0d:3b:ab:8e:77:
         12:b4:b1:06:a7:46:62:41:63:a1:33:dc:80:df:8d:65:af:47:
         32:8a:3b:99:b5:36:44:b0:86:f6:12:27:4b:e5:c2:b1:3a:ab:
         1a:1e:a3:54:af:f4:2a:17:51:54:4e:19:bb:4c:72:32:2e:cc:
         8e:f1:cc:39:1d:48:92:9d:f3:a3:0d:a8:14:9d:85:d2:36:08:
         a8:ca:b3:61:58:2a:4d:2b:02:b1:e4:0f:6b:87:83:a8:94:b9:
         22:44:e8:a7:e7:b0:57:9f:3e:b9:fe:5e:8d:4c:b5:ce:49:c5:
         07:ae:c0:8d:88:26:5c:c1:34:a9:a7:45:ff:2e:26:32:a0:61:
         f2:36:4f:a1:40:92:ce:e6:e2:e5:78:ac:be:f0:f0:1b:29:c1:
         e8:27:a3:9f:72:d2:30:07:93:17:07:50:d4:4c:fa:9c:08:d9:
         28:fc:99:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:55 2026 by rpki-client