This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35362e302f32312d3234203d3e203238303936.roa
File:                     3139302e392e35362e302f32312d3234203d3e203238303936.roa (raw, json)
Hash identifier:          bgfpp3fKJR9d/mNDv9eoFJ+U8hQgjnZmoCy/uxLdY4E=
Subject key identifier:   9B:E2:3B:30:11:1A:84:3F:FC:83:E7:A7:62:82:50:CF:9D:2C:7E:25
Certificate issuer:       /CN=3097EEAE62A8D1441BC16E818D96E6882345B703
Certificate serial:       0D154CB2D6CA85650615963ABADCCC5BDA9369C4
Authority key identifier: 30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35362e302f32312d3234203d3e203238303936.roa
Signing time:             Tue 06 Jan 2026 19:28:35 +0000
ROA not before:           Tue 06 Jan 2026 19:23:35 +0000
ROA not after:            Tue 05 Jan 2027 19:28:35 +0000
asID:                     28096
IP address blocks:        190.9.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:15:4c:b2:d6:ca:85:65:06:15:96:3a:ba:dc:cc:5b:da:93:69:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3097EEAE62A8D1441BC16E818D96E6882345B703
        Validity
            Not Before: Jan  6 19:23:35 2026 GMT
            Not After : Jan  5 19:28:35 2027 GMT
        Subject: CN=9BE23B30111A843FFC83E7A7628250CF9D2C7E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:33:79:fa:81:6e:ea:2f:27:3a:28:a1:71:
                    d5:93:8d:be:c9:4e:2c:2a:eb:28:97:e6:97:c9:dd:
                    79:74:38:2e:dc:69:96:f9:8e:37:7f:73:27:5e:31:
                    53:03:3a:e1:49:6d:2d:9f:8a:44:48:11:b8:a8:04:
                    93:a1:92:8f:c5:64:76:b1:53:fe:d9:f6:40:b8:01:
                    25:33:da:c3:3e:75:a5:a4:74:c9:94:5f:8a:16:e5:
                    87:3f:d4:1e:9e:97:79:f6:08:f1:da:eb:6d:50:56:
                    11:17:0b:4c:19:f8:a1:0e:67:f0:08:74:cd:68:a8:
                    40:87:cc:63:f2:dc:47:69:1c:43:d2:93:c5:f5:9c:
                    f8:c0:88:e1:da:e3:f2:93:e4:75:2d:c7:dd:1b:95:
                    e0:0a:b4:52:d9:dc:87:0d:da:f8:f2:b1:92:7a:b3:
                    68:20:7b:87:22:2d:dc:26:4c:9d:31:bb:f0:4d:cd:
                    f3:ec:ea:df:cd:5d:6a:f0:e2:58:07:d9:c1:53:ca:
                    63:b7:33:2c:99:73:51:3f:47:ac:5e:31:8d:92:d5:
                    1b:2f:a9:ec:7f:60:6e:0a:91:ec:4c:75:d1:29:e5:
                    23:2b:f9:39:6d:c8:33:f7:76:34:d9:45:3d:d6:7f:
                    b1:9e:e4:cc:63:0c:8c:84:11:e2:d9:ca:c9:26:f9:
                    b4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E2:3B:30:11:1A:84:3F:FC:83:E7:A7:62:82:50:CF:9D:2C:7E:25
            X509v3 Authority Key Identifier:
                keyid:30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35362e302f32312d3234203d3e203238303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:aa:2a:f2:56:68:29:5e:03:69:a3:0d:2e:9f:89:51:a0:64:
         51:fc:fb:ff:e0:19:c4:18:a8:e0:e8:9f:aa:94:5a:b7:85:07:
         e8:c7:b6:46:12:f9:c3:b4:41:58:4e:be:7f:19:c4:a6:09:30:
         b5:74:fa:d9:bc:83:45:73:dd:c3:f6:85:80:75:11:50:97:e4:
         ad:6a:51:07:35:c8:42:9f:bd:9f:b1:31:12:b8:93:55:7d:08:
         30:dd:30:7c:06:b4:e7:d2:94:17:5c:06:5e:d2:30:70:cb:f8:
         c4:1c:ea:14:57:50:52:7a:c1:a4:3b:28:8a:1d:2f:6f:10:58:
         b4:89:e5:66:34:a7:12:5f:cf:35:50:b6:f4:16:80:97:e5:16:
         da:ad:25:83:56:3e:b5:0f:59:96:0d:de:60:09:d0:cf:6b:67:
         43:cc:db:29:b0:67:5b:69:d8:ae:62:d1:c6:bc:da:6e:a2:be:
         75:59:8b:cc:1b:70:99:12:c4:90:17:28:0e:6f:4d:30:eb:c8:
         17:a1:f7:61:6f:eb:b1:29:ea:02:3e:e7:d6:5a:ed:c0:cd:cf:
         19:92:61:8a:18:46:94:50:5d:88:fa:d7:08:c9:1c:b4:2a:49:
         c4:93:65:aa:5d:34:bd:81:73:d3:63:db:7b:ed:98:d7:91:9d:
         ae:60:13:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:42:46 2026 by rpki-client