This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/3139312e39372e33322e302f32302d3234203d3e203532333232.roa
File:                     3139312e39372e33322e302f32302d3234203d3e203532333232.roa (raw, json)
Hash identifier:          TbPwiDhFgQYG0zvF/EjcLrlqNBLk9RrweoETJRphT8Q=
Subject key identifier:   8E:E1:3C:7D:70:F7:10:E0:81:39:9F:00:C0:AB:1E:CA:98:88:7D:96
Certificate issuer:       /CN=C29F087109B76309AE65BC7A7F7BAE0D3175209C
Certificate serial:       2A3717E98704063B743EE7352F242AABCF4B929C
Authority key identifier: C2:9F:08:71:09:B7:63:09:AE:65:BC:7A:7F:7B:AE:0D:31:75:20:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/3139312e39372e33322e302f32302d3234203d3e203532333232.roa
Signing time:             Tue 06 Jan 2026 20:58:38 +0000
ROA not before:           Tue 06 Jan 2026 20:53:38 +0000
ROA not after:            Tue 05 Jan 2027 20:58:38 +0000
asID:                     52322
IP address blocks:        191.97.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:37:17:e9:87:04:06:3b:74:3e:e7:35:2f:24:2a:ab:cf:4b:92:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C29F087109B76309AE65BC7A7F7BAE0D3175209C
        Validity
            Not Before: Jan  6 20:53:38 2026 GMT
            Not After : Jan  5 20:58:38 2027 GMT
        Subject: CN=8EE13C7D70F710E081399F00C0AB1ECA98887D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4c:3b:27:29:8e:5d:28:74:e9:d4:04:45:3c:
                    7a:15:58:21:de:be:97:03:f8:ce:b0:31:6a:8c:95:
                    15:4d:8b:4d:ce:be:c9:f2:c8:4b:0e:26:be:23:da:
                    18:70:1d:1e:a3:26:b7:ae:22:f4:f4:be:b3:7b:59:
                    79:bf:ec:bf:ca:bc:cf:e6:ad:a0:50:d7:0e:4f:76:
                    6f:14:bb:90:86:dc:4f:37:58:5e:81:3d:08:3c:82:
                    42:9c:8b:3f:ed:e9:fe:8b:57:3b:0a:cc:c0:3b:f0:
                    8e:ca:35:8f:5a:b6:f0:30:6d:7a:b8:54:65:24:41:
                    51:a1:38:a4:63:d3:a7:ba:b9:b1:77:f7:5f:0b:93:
                    5c:23:07:68:99:24:f4:0d:19:c0:bd:24:b3:bb:5c:
                    f7:2d:0c:8f:13:94:3f:60:af:0c:f0:8a:53:3e:da:
                    5c:be:14:db:dd:8e:ae:ce:62:f6:4b:af:1d:35:dd:
                    e3:5a:0d:ec:c9:23:70:7a:84:d9:dd:dd:c0:23:87:
                    cd:fd:1e:86:fc:07:3b:7f:37:6b:0c:57:ae:8a:3f:
                    8b:33:8a:78:26:6c:cd:36:3c:d0:3d:a2:ba:04:2c:
                    3d:b1:e7:ec:95:97:85:a3:46:39:74:72:aa:f3:e4:
                    11:7d:bb:a9:20:0a:39:22:a3:6b:73:f6:a7:ad:df:
                    9d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E1:3C:7D:70:F7:10:E0:81:39:9F:00:C0:AB:1E:CA:98:88:7D:96
            X509v3 Authority Key Identifier:
                keyid:C2:9F:08:71:09:B7:63:09:AE:65:BC:7A:7F:7B:AE:0D:31:75:20:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C29F087109B76309AE65BC7A7F7BAE0D3175209C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C37CA7E71577E7E86E7A213DC193C7D5A250CFAF83FF0570553691DD700529D/0/3139312e39372e33322e302f32302d3234203d3e203532333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b8:70:90:f3:2d:8c:bc:fb:a6:0d:be:8a:e3:6d:7f:38:58:d1:
         43:fe:49:88:14:8f:6c:f9:09:9d:f2:46:a9:95:15:36:b5:5f:
         b2:4d:73:25:e5:38:cf:f5:35:7c:e9:dc:c4:9f:75:f8:8d:67:
         aa:0f:5e:ef:d3:62:36:96:88:2b:67:3a:28:c6:20:91:ce:c1:
         d4:7e:88:fa:bc:f0:6b:12:de:e6:92:d2:3f:a1:a5:4e:a9:ef:
         ce:3a:72:53:3d:82:d2:42:68:1d:c4:86:85:da:0f:53:37:d8:
         40:d3:25:60:6f:1c:6e:4b:cc:c8:23:3d:ff:0b:0b:0d:60:67:
         4b:32:71:87:e4:d8:7b:9c:c1:18:3a:58:4a:4b:58:c7:40:51:
         95:e4:f5:2e:16:3e:1b:fd:6e:01:5d:07:0f:9e:ca:67:09:00:
         9a:af:7a:41:9a:52:35:b8:08:13:8e:02:82:62:37:43:e7:3f:
         92:1f:9c:80:e7:35:f1:17:77:78:87:9d:12:5a:6c:e2:b9:cf:
         74:39:6b:dc:22:d9:b0:e8:81:e3:67:ba:89:a3:ea:1f:b3:09:
         74:5d:d0:d1:33:f2:10:6f:2c:8c:b4:55:b4:15:c4:ac:31:2d:
         90:b2:a6:47:6f:78:6e:d3:cb:fe:2a:ef:9a:e2:02:f0:f2:e8:
         a4:8f:f1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:35 2026 by rpki-client