This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3139322e3134302e3132362e302f32342d3234203d3e20323635373331.roa
File:                     3139322e3134302e3132362e302f32342d3234203d3e20323635373331.roa (raw, json)
Hash identifier:          9Whkde0tNjNo3u5uJfaeXvNLyg+VvM6jZ45EgfO5DOg=
Subject key identifier:   E7:29:95:C5:9E:B5:E7:F0:FD:33:74:67:91:F5:AA:D9:39:16:9E:44
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       6E2DDB2575A85923C1682B33F72DEA2E35A3B118
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3139322e3134302e3132362e302f32342d3234203d3e20323635373331.roa
Signing time:             Mon 17 Nov 2025 11:52:47 +0000
ROA not before:           Mon 17 Nov 2025 11:47:47 +0000
ROA not after:            Mon 16 Nov 2026 11:52:47 +0000
asID:                     265731
IP address blocks:        192.140.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 03:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2d:db:25:75:a8:59:23:c1:68:2b:33:f7:2d:ea:2e:35:a3:b1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Nov 17 11:47:47 2025 GMT
            Not After : Nov 16 11:52:47 2026 GMT
        Subject: CN=E72995C59EB5E7F0FD33746791F5AAD939169E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:24:4b:cc:3e:02:63:c4:ba:2b:fd:be:fb:0b:
                    4d:9d:a4:0c:1d:ba:9c:6e:80:77:c9:86:f9:a7:04:
                    a3:a4:58:b1:5c:bd:0a:80:91:11:88:83:02:af:a8:
                    2b:3e:55:2a:d6:b7:1a:5c:54:2a:5f:2f:ec:e5:da:
                    c0:0c:0e:30:d1:d6:9b:26:2b:8b:ed:c6:7a:fd:d2:
                    c3:d6:ed:97:e7:e1:91:7b:6c:f0:58:98:38:cd:a6:
                    9b:25:e8:ab:3f:2b:97:03:d2:c1:df:b1:c2:e9:77:
                    5b:93:a4:e8:c2:42:e1:03:c3:9a:1c:ea:49:6d:6f:
                    46:34:85:77:ec:96:53:02:e2:0e:fc:dd:8a:12:ed:
                    7b:27:0b:f3:02:07:36:5f:24:9b:67:9e:51:db:55:
                    32:2f:ef:51:46:4e:4f:8c:15:c8:3e:4c:20:74:8a:
                    3a:4b:68:6e:f7:80:63:ea:78:53:6e:de:d6:a7:9f:
                    ac:b9:3f:5b:25:dc:0b:2c:e9:37:2f:00:a8:7f:7a:
                    2f:4f:49:85:06:1d:49:31:11:97:6d:d9:72:71:bc:
                    d5:45:2f:cc:9a:8b:ef:e4:a3:f8:b7:08:53:3a:ed:
                    ba:4a:63:cc:8e:4a:6b:c4:dd:95:ea:c8:e6:ea:e6:
                    b1:04:c3:39:6a:77:e6:34:e1:69:4f:12:cf:61:44:
                    f7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:29:95:C5:9E:B5:E7:F0:FD:33:74:67:91:F5:AA:D9:39:16:9E:44
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3139322e3134302e3132362e302f32342d3234203d3e20323635373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:85:bc:1c:ae:f5:be:ff:d8:d9:e3:7f:95:55:c5:6b:cd:02:
         4d:ba:f6:3b:9c:12:1b:e5:cd:68:ce:ea:c9:0b:c6:10:3e:42:
         cd:7d:02:4d:53:ab:86:3a:e1:38:05:ba:24:af:26:5c:d1:1a:
         84:e5:f1:38:0a:5f:ef:50:e9:f1:69:57:a7:19:6a:8d:d3:77:
         40:a3:92:39:db:37:3a:b8:70:ff:f9:e9:ce:ee:76:b1:24:52:
         c1:a0:97:b0:2a:f9:13:06:a6:9c:81:18:af:11:2d:c3:d3:c1:
         ac:ca:11:43:65:39:92:a6:dc:31:f4:1f:ef:5d:da:0e:e3:4e:
         37:71:33:28:cd:62:16:69:df:21:e1:b6:21:16:61:70:35:0b:
         e9:8a:8b:dc:74:26:d0:6c:fd:b2:de:65:4e:e7:fd:f4:33:18:
         82:3b:93:f2:5c:c0:44:92:f5:ee:42:cf:a1:5f:c7:65:51:02:
         72:6b:c1:fb:69:d4:55:7d:da:79:41:23:83:8b:10:4a:83:77:
         4b:8c:21:cd:03:3b:fa:6f:17:6b:cb:2b:c8:c9:bd:b2:b6:de:
         a8:52:94:74:87:9c:6f:e8:42:3b:f5:24:96:56:83:35:c2:38:
         99:04:19:05:81:4a:b3:8b:44:27:fe:2a:54:7b:cf:c6:95:92:
         7f:1d:bb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:41:55 2025 by rpki-client