This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36312e302f32342d3234203d3e20323632393239.roa
File:                     3139312e3130322e36312e302f32342d3234203d3e20323632393239.roa (raw, json)
Hash identifier:          zZDaZt/VKT4LfllzKITeajwVP2xa1mEcOuun+xVYsKI=
Subject key identifier:   96:76:4F:3A:C1:26:92:18:45:D2:77:87:1E:5F:BC:CE:EE:55:C5:6E
Certificate issuer:       /CN=D3B81DF8275FF8695370D4498DDC3A40FEE98F99
Certificate serial:       657B27AD5C74470007FFF04956A540583F33FC4A
Authority key identifier: D3:B8:1D:F8:27:5F:F8:69:53:70:D4:49:8D:DC:3A:40:FE:E9:8F:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36312e302f32342d3234203d3e20323632393239.roa
Signing time:             Tue 06 Jan 2026 19:34:51 +0000
ROA not before:           Tue 06 Jan 2026 19:29:51 +0000
ROA not after:            Tue 05 Jan 2027 19:34:51 +0000
asID:                     262929
IP address blocks:        191.102.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7b:27:ad:5c:74:47:00:07:ff:f0:49:56:a5:40:58:3f:33:fc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3B81DF8275FF8695370D4498DDC3A40FEE98F99
        Validity
            Not Before: Jan  6 19:29:51 2026 GMT
            Not After : Jan  5 19:34:51 2027 GMT
        Subject: CN=96764F3AC126921845D277871E5FBCCEEE55C56E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:0d:40:32:82:76:d2:e0:8b:3e:33:86:b4:
                    fa:f5:bf:27:66:b0:79:58:e0:90:39:0d:42:5d:34:
                    53:f5:31:2a:a9:8e:eb:7b:d3:95:86:78:cf:72:e6:
                    65:f2:09:69:cc:7d:e1:5d:4d:5a:c1:8f:25:61:37:
                    7a:cc:3a:00:69:1a:65:14:da:52:31:26:ce:90:b1:
                    35:1f:8b:38:62:73:4d:44:52:e3:07:92:d4:ec:2c:
                    ee:0c:6a:b2:39:5a:59:e8:2f:e5:a6:13:e6:75:94:
                    16:da:20:46:eb:9a:70:12:bd:10:76:c8:29:4b:90:
                    ee:6c:7b:5c:a9:05:24:11:99:17:fa:8b:7f:db:88:
                    5c:9c:66:7e:5c:7d:63:b3:8d:4e:3d:25:d5:13:ba:
                    e0:0a:91:f5:63:22:e0:e3:4e:71:54:50:68:ff:d0:
                    d7:49:39:46:11:e2:02:57:d7:f7:e3:e2:17:79:c8:
                    05:d3:b1:24:fc:16:51:92:9a:62:af:53:f5:a2:76:
                    bc:1c:31:f4:30:6d:ab:30:ae:b0:1a:ca:d2:4b:fe:
                    96:6b:5e:f5:14:c2:d0:77:58:1a:e1:6c:cf:0d:61:
                    42:ab:29:b1:37:d5:5a:c1:24:74:3f:20:2d:0a:c7:
                    cb:83:a6:c9:de:54:22:7d:8f:0d:30:dd:9c:0a:60:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:76:4F:3A:C1:26:92:18:45:D2:77:87:1E:5F:BC:CE:EE:55:C5:6E
            X509v3 Authority Key Identifier:
                keyid:D3:B8:1D:F8:27:5F:F8:69:53:70:D4:49:8D:DC:3A:40:FE:E9:8F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36312e302f32342d3234203d3e20323632393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:11:39:e2:0d:97:70:47:3b:d4:24:4f:0f:ac:8c:d6:ce:b0:
         1c:67:96:74:5d:23:06:10:da:d2:b8:9b:35:b5:a2:55:06:7e:
         1c:7e:6f:12:41:a5:64:e9:46:42:d9:27:bd:7b:40:a5:ea:64:
         4e:b4:0b:5e:e0:09:77:fc:3a:ae:25:56:d5:b0:84:75:e3:ed:
         cb:97:51:31:9e:0f:87:46:16:67:55:e3:45:30:d1:06:ae:59:
         0c:a5:bd:48:80:20:e4:6f:8b:a8:64:07:01:4b:52:3a:90:e9:
         b3:ef:11:a7:09:ca:fc:42:1e:c9:64:93:6f:68:8e:a7:3c:66:
         47:60:b7:3f:12:78:01:48:7f:79:8a:05:86:dc:63:fc:7b:f9:
         ab:ff:03:5f:da:e7:77:1e:62:ec:01:e1:6c:8c:4d:4d:09:d6:
         d7:3e:9f:f1:5e:d4:0d:2b:98:39:55:20:43:94:f2:ab:74:6e:
         6c:03:45:91:4e:4f:6a:0b:25:7f:95:0f:71:5f:a3:23:f3:9b:
         fc:83:2f:1a:f4:4e:fa:55:4f:43:74:a8:d4:30:5a:ab:44:6f:
         44:89:ce:e9:a8:b6:37:f6:b1:a4:ea:27:ee:36:8d:ef:bc:2a:
         ae:a6:a6:e4:fe:a1:0a:61:01:c9:36:22:17:78:38:7a:bd:a6:
         1f:f2:8d:df
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZXsnrVx0RwAH//BJVqVAWD8z/EowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNCODFERjgyNzVGRjg2OTUzNzBENDQ5OEREQzNBNDBG
RUU5OEY5OTAeFw0yNjAxMDYxOTI5NTFaFw0yNzAxMDUxOTM0NTFaMDMxMTAvBgNV
BAMTKDk2NzY0RjNBQzEyNjkyMTg0NUQyNzc4NzFFNUZCQ0NFRUU1NUM1NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAVQ1AMoJ20uCLPjOGtPr1vydm
sHlY4JA5DUJdNFP1MSqpjut705WGeM9y5mXyCWnMfeFdTVrBjyVhN3rMOgBpGmUU
2lIxJs6QsTUfizhic01EUuMHktTsLO4MarI5WlnoL+WmE+Z1lBbaIEbrmnASvRB2
yClLkO5se1ypBSQRmRf6i3/biFycZn5cfWOzjU49JdUTuuAKkfVjIuDjTnFUUGj/
0NdJOUYR4gJX1/fj4hd5yAXTsST8FlGSmmKvU/WidrwcMfQwbaswrrAaytJL/pZr
XvUUwtB3WBrhbM8NYUKrKbE31VrBJHQ/IC0Kx8uDpsneVCJ9jw0w3ZwKYJkzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlnZPOsEmkhhF0neHHl+8zu5VxW4wHwYDVR0j
BBgwFoAU07gd+Cdf+GlTcNRJjdw6QP7pj5kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NDgwNkY4MTQzODVBQUQ5NkZBRTkyNjEyOTIzQzA3OTYw
NDYxRkY3QzhEQjQ0MUU1M0EwRUFDNDUzRjVBNDUwLzAvRDNCODFERjgyNzVGRjg2
OTUzNzBENDQ5OEREQzNBNDBGRUU5OEY5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EM0I4MURGODI3NUZGODY5NTM3
MEQ0NDk4RERDM0E0MEZFRTk4Rjk5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzQ4MDZGODE0Mzg1QUFEOTZGQUU5MjYxMjkyM0MwNzk2MDQ2MUZGN0M4
REI0NDFFNTNBMEVBQzQ1M0Y1QTQ1MC8wLzMxMzkzMTJlMzEzMDMyMmUzNjMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2Y9
MA0GCSqGSIb3DQEBCwUAA4IBAQAzETniDZdwRzvUJE8PrIzWzrAcZ5Z0XSMGENrS
uJs1taJVBn4cfm8SQaVk6UZC2Se9e0Cl6mROtAte4Al3/DquJVbVsIR14+3Ll1Ex
ng+HRhZnVeNFMNEGrlkMpb1IgCDkb4uoZAcBS1I6kOmz7xGnCcr8Qh7JZJNvaI6n
PGZHYLc/EngBSH95igWG3GP8e/mr/wNf2ud3HmLsAeFsjE1NCdbXPp/xXtQNK5g5
VSBDlPKrdG5sA0WRTk9qCyV/lQ9xX6Mj85v8gy8a9E76VU9DdKjUMFqrRG9Eic7p
qLY39rGk6ifuNo3vvCqupqbk/qEKYQHJNiIXeDh6vaYf8o3f
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:43 2026 by rpki-client