This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3139312e3130332e302e302f31382d3231203d3e203238303438.roa
File:                     3139312e3130332e302e302f31382d3231203d3e203238303438.roa (raw, json)
Hash identifier:          uyu9vuwHY0UCFhZr9nMWNjAs1w6QLLOlL8Il4hcu+ho=
Subject key identifier:   A3:E9:8F:51:57:01:D9:5F:07:B2:2F:1E:07:60:1B:A1:BC:0B:A4:09
Certificate issuer:       /CN=E545F04AB379D8134DE636206977A39FA5008712
Certificate serial:       7BBB26B217832A1ADE5488885CCDE300751F618A
Authority key identifier: E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3139312e3130332e302e302f31382d3231203d3e203238303438.roa
Signing time:             Tue 06 Jan 2026 20:49:53 +0000
ROA not before:           Tue 06 Jan 2026 20:44:53 +0000
ROA not after:            Tue 05 Jan 2027 20:49:53 +0000
asID:                     28048
IP address blocks:        191.103.0.0/18 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bb:26:b2:17:83:2a:1a:de:54:88:88:5c:cd:e3:00:75:1f:61:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E545F04AB379D8134DE636206977A39FA5008712
        Validity
            Not Before: Jan  6 20:44:53 2026 GMT
            Not After : Jan  5 20:49:53 2027 GMT
        Subject: CN=A3E98F515701D95F07B22F1E07601BA1BC0BA409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1a:b3:61:5a:48:e5:ad:3c:49:d5:cc:58:1d:
                    4f:22:39:7e:1f:43:36:15:4d:e5:ec:e0:7b:ff:dc:
                    b2:8e:64:60:3b:2b:70:d0:0e:d2:09:44:83:ec:46:
                    c5:ca:71:94:c8:17:46:6a:8c:fc:d2:d1:db:2b:55:
                    a6:24:fa:27:17:5f:06:aa:8d:5e:a1:2c:32:c5:44:
                    c5:85:0e:9f:a0:d1:68:56:d5:fb:73:0c:6f:3f:d3:
                    09:aa:80:9a:72:c2:52:4b:29:6a:cd:46:e7:3b:8a:
                    49:ca:be:04:ef:42:60:23:f6:4e:91:e8:61:55:c3:
                    01:1a:7e:0c:c9:45:5e:58:ae:0c:64:76:ec:fb:d7:
                    35:a2:0f:fe:56:7e:43:9e:4f:79:e2:34:8f:38:24:
                    b9:90:36:43:2c:0c:ca:1a:87:40:e7:f8:86:ee:98:
                    44:9a:6d:17:8e:f4:50:c1:ef:be:0e:c8:bf:05:4f:
                    76:1b:bc:53:f2:64:c2:e2:3b:18:4a:34:dd:1f:43:
                    c6:da:41:9f:e6:a3:d8:41:f3:eb:fe:b6:ed:20:47:
                    7b:2e:42:00:f3:a3:6d:ea:cd:79:62:57:94:66:d8:
                    5f:51:0f:02:58:af:b0:42:31:d5:52:3f:ad:85:80:
                    db:75:ef:f6:8b:ff:41:76:51:b0:20:5f:de:07:19:
                    b8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E9:8F:51:57:01:D9:5F:07:B2:2F:1E:07:60:1B:A1:BC:0B:A4:09
            X509v3 Authority Key Identifier:
                keyid:E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3139312e3130332e302e302f31382d3231203d3e203238303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         85:b5:3e:ff:44:fd:ef:7d:5b:fc:33:5e:af:c3:6f:b4:b6:cb:
         50:eb:fe:47:1c:13:75:63:7c:38:d2:0a:df:d0:a1:a2:76:e1:
         7d:0f:5e:98:cb:dd:e3:d7:b0:c9:51:d0:da:3d:28:75:a5:8d:
         6c:8c:24:10:31:27:77:6c:d5:59:9c:8d:da:c5:33:54:d2:d9:
         db:b1:33:71:53:81:d8:c5:b1:41:6b:07:2d:7e:30:d2:ab:20:
         f2:da:7a:68:16:8b:2e:65:3f:4b:ae:f4:fa:69:36:ab:5a:93:
         7c:0b:f0:d5:37:d2:27:86:1a:b5:2d:97:53:d5:6d:f8:e0:bf:
         96:f0:a6:f6:71:f6:11:68:af:94:4d:81:ae:47:79:79:63:b7:
         5a:a2:3b:dd:6d:f2:e3:9b:07:2a:ad:bc:0e:c4:59:be:19:53:
         fa:86:b5:1a:13:58:f8:69:32:79:d1:0a:c9:1e:11:fc:6e:95:
         a8:2d:c5:24:c0:84:9c:27:5b:d3:9a:4a:1a:cb:5d:d5:8d:80:
         e2:40:78:ea:e6:53:86:35:fd:e8:75:30:16:03:2d:b3:7e:83:
         30:28:32:99:66:46:dd:f8:a4:e0:ef:74:56:74:90:30:f7:1d:
         7a:1d:25:b9:39:f1:87:8f:40:59:13:d1:e9:20:16:f8:f8:30:
         86:b4:33:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:45 2026 by rpki-client