This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35382e302f32332d3234203d3e203238303936.roa
File:                     3139302e392e35382e302f32332d3234203d3e203238303936.roa (raw, json)
Hash identifier:          ksjtKIHcUvbNnkZyb+M9kCdA+r36Q3u+itO8tfikv5M=
Subject key identifier:   2A:CA:63:40:75:59:48:97:FA:2B:C0:75:A2:95:4B:CE:6E:F1:98:BF
Certificate issuer:       /CN=3097EEAE62A8D1441BC16E818D96E6882345B703
Certificate serial:       4E0040EE136FAD3BBE6FD5C9026D6E506D213B41
Authority key identifier: 30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35382e302f32332d3234203d3e203238303936.roa
Signing time:             Tue 06 Jan 2026 19:28:36 +0000
ROA not before:           Tue 06 Jan 2026 19:23:36 +0000
ROA not after:            Tue 05 Jan 2027 19:28:36 +0000
asID:                     28096
IP address blocks:        190.9.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:00:40:ee:13:6f:ad:3b:be:6f:d5:c9:02:6d:6e:50:6d:21:3b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3097EEAE62A8D1441BC16E818D96E6882345B703
        Validity
            Not Before: Jan  6 19:23:36 2026 GMT
            Not After : Jan  5 19:28:36 2027 GMT
        Subject: CN=2ACA634075594897FA2BC075A2954BCE6EF198BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:d2:74:a0:ea:32:74:e0:64:cc:77:3c:db:
                    c2:83:49:7e:32:5d:a2:dc:0b:a8:59:ef:0d:10:16:
                    46:51:36:f1:cc:7a:8f:36:38:c9:b4:5c:27:f7:ae:
                    a8:da:c0:6c:68:1e:5d:1e:a7:d6:0c:cd:59:4b:d2:
                    ce:e4:b2:28:53:a1:eb:d6:16:a8:01:3c:52:61:2f:
                    74:02:18:5b:b5:c9:16:b6:d9:fb:bd:ec:4f:59:4e:
                    cc:a3:44:15:f2:a7:d8:28:fd:ab:37:75:6b:4a:01:
                    9a:85:69:d8:19:90:87:98:b2:9f:7f:79:a8:ba:1a:
                    71:f5:f5:d0:f0:46:f1:36:13:79:ad:d6:97:8c:1a:
                    65:fc:3a:ea:9a:3d:00:45:bc:8c:87:09:7f:c9:b3:
                    ff:ff:2e:41:81:69:e4:f8:4f:ec:91:33:d0:21:93:
                    bc:17:78:0d:7e:50:9a:1f:1f:c9:af:8d:b1:f6:b8:
                    d4:e9:5b:94:db:cd:f7:1b:62:27:ca:c3:c3:a2:f7:
                    7d:9f:b3:75:38:95:ba:24:19:1d:36:d4:97:21:0d:
                    2d:b7:2e:d2:e6:67:98:70:2b:31:ef:95:26:8a:92:
                    2f:8b:24:30:07:ff:0a:86:90:05:32:d3:d2:95:78:
                    a9:78:31:b8:2c:e2:da:92:ec:c0:83:b5:0d:56:ff:
                    70:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CA:63:40:75:59:48:97:FA:2B:C0:75:A2:95:4B:CE:6E:F1:98:BF
            X509v3 Authority Key Identifier:
                keyid:30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e35382e302f32332d3234203d3e203238303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:fe:88:c0:38:72:96:4f:69:13:68:f7:f7:f5:ea:d3:38:
         65:bb:fb:88:17:8f:f3:da:55:3c:c1:2b:b3:19:67:de:45:8c:
         56:40:8c:15:33:c1:4a:97:80:cb:1e:43:67:ca:89:3c:76:ef:
         7b:45:87:55:18:8e:25:0a:0b:5f:6e:77:ec:08:89:e1:04:43:
         fd:2e:15:23:2b:82:1d:67:0a:2c:3a:16:d8:36:d8:77:61:90:
         ae:92:ea:04:14:4e:75:8f:7e:d0:2c:ff:3e:bd:bc:06:94:71:
         d4:10:8c:58:f9:fb:1a:e6:5c:47:96:1d:c4:57:73:52:60:f6:
         67:4d:40:a7:84:91:06:c1:99:6b:57:50:c8:f3:cc:89:82:5f:
         d7:2e:b1:12:62:1d:18:ce:a0:0e:1b:92:ac:bd:cd:0e:be:6c:
         dd:54:d9:c4:8a:a3:84:29:2d:74:0d:f1:64:ac:7a:1f:b8:ea:
         6a:fe:16:5b:aa:0f:40:87:8e:9c:e5:10:44:5a:7e:4b:9c:82:
         29:76:7b:64:e4:43:59:19:cf:04:8e:20:b0:5c:0d:f9:cb:48:
         b4:ad:10:c3:46:ec:7c:11:3c:19:64:67:f9:eb:f9:34:bd:22:
         e4:b6:b0:7d:0f:7d:a3:3f:9e:ca:cd:0f:bf:6f:80:97:7e:53:
         7c:2d:89:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:42:47 2026 by rpki-client