This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3139312e3130322e35362e302f32322d3234203d3e203238333137.roa
File:                     3139312e3130322e35362e302f32322d3234203d3e203238333137.roa (raw, json)
Hash identifier:          9WKvkR6iFm4xMRlB/XGp/oLbAGxEsHsNmjFqSxwFhwU=
Subject key identifier:   5E:32:48:15:5D:0A:EC:11:75:DB:6B:3F:1F:13:9E:F2:68:99:8B:A2
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       4CF9DD9183FE0693660F49DE94584025AC7BB2AC
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3139312e3130322e35362e302f32322d3234203d3e203238333137.roa
Signing time:             Tue 06 Jan 2026 19:34:56 +0000
ROA not before:           Tue 06 Jan 2026 19:29:56 +0000
ROA not after:            Tue 05 Jan 2027 19:34:56 +0000
asID:                     28317
IP address blocks:        191.102.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f9:dd:91:83:fe:06:93:66:0f:49:de:94:58:40:25:ac:7b:b2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Jan  6 19:29:56 2026 GMT
            Not After : Jan  5 19:34:56 2027 GMT
        Subject: CN=5E3248155D0AEC1175DB6B3F1F139EF268998BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:97:2e:b3:65:b4:52:99:00:9b:92:07:22:
                    f3:34:b8:7c:94:8e:71:f3:12:bc:36:c8:02:cd:74:
                    ee:ff:50:84:46:ce:5c:b0:27:ce:14:90:0f:ea:a0:
                    77:f8:4f:08:5e:f2:c1:92:d3:9c:43:90:57:a3:29:
                    a6:48:77:4c:dc:1a:bf:4f:07:b7:c0:36:72:4f:a2:
                    3f:e6:9f:6f:d7:81:68:b0:5c:76:28:b5:95:16:0c:
                    8a:4c:3b:9a:74:88:55:36:d3:f2:47:df:c1:db:37:
                    a3:be:ce:96:af:cb:9c:96:5c:d9:e7:65:10:64:be:
                    c1:86:6c:6b:bd:6f:9c:e8:9e:27:25:44:2e:45:ce:
                    d4:b9:56:17:50:bf:47:94:ef:ed:7a:29:34:7a:01:
                    15:b2:e5:27:b6:f6:25:3f:79:10:f7:e0:f3:82:07:
                    52:03:71:e2:07:93:73:bd:73:aa:82:1e:2e:ee:42:
                    4a:f8:3a:31:3a:1d:d3:63:e6:32:6e:9c:b4:f0:9f:
                    5e:30:46:28:2e:a6:52:f8:fa:bd:be:2f:02:ce:fe:
                    85:a2:49:66:ae:52:99:e3:c5:bd:6e:4c:63:20:b3:
                    bb:b1:7b:da:b6:f6:81:6e:98:31:7e:ed:5f:ca:66:
                    fe:b9:71:ae:7d:9c:90:75:f8:bc:d8:ce:ab:78:2a:
                    a6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:32:48:15:5D:0A:EC:11:75:DB:6B:3F:1F:13:9E:F2:68:99:8B:A2
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3139312e3130322e35362e302f32322d3234203d3e203238333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:b7:c5:a9:c2:46:9f:87:b9:b7:57:69:93:e5:07:e3:a1:1c:
         e7:1a:d4:9c:ac:b0:77:a7:2a:24:66:64:e3:c1:c4:9f:ea:11:
         e0:ad:ba:9e:6f:ef:71:2a:17:31:b7:7f:1b:70:f3:a6:6d:c9:
         79:d4:34:3f:13:44:f1:62:b1:ce:67:99:d6:bd:3d:57:84:fe:
         22:7e:09:6e:96:c7:ae:84:01:88:84:37:e3:c2:c4:50:36:7f:
         e6:ae:44:af:4a:50:5b:5d:fe:0d:64:7f:c4:ce:f8:d9:15:95:
         7c:11:8a:3b:db:9f:43:22:55:8d:bd:fe:da:c8:7d:d6:4f:57:
         c7:74:bf:74:d8:05:60:b2:ec:88:1c:97:33:fe:02:b9:79:a6:
         48:a6:d0:2d:bd:21:3e:c6:e6:d6:6f:c0:ad:7b:ff:a9:43:83:
         50:2b:bc:9d:5f:b2:7d:a6:82:fe:01:b8:0f:fc:e7:23:cd:3f:
         81:6a:33:aa:f7:e8:2f:f4:60:5f:8a:74:99:d1:f1:ef:5f:c1:
         1d:23:22:03:91:c2:e4:7f:a9:48:b7:23:90:9f:68:4e:90:64:
         8b:f1:68:56:75:8c:6e:39:44:db:29:17:1a:af:6e:32:b5:0f:
         c0:72:3a:39:1f:d0:bf:d3:b7:43:83:61:17:9a:b4:f7:a6:bd:
         e2:28:3f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:39:09 2026 by rpki-client