This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3139312e302e302f31362d3234203d3e203139393035.roa
File:                     3133322e3139312e302e302f31362d3234203d3e203139393035.roa (raw, json)
Hash identifier:          MJbvdwwn7poiwKQkRILB9+BWBPfuPHctNcp0N/IN6HA=
Subject key identifier:   00:90:45:0D:84:99:AD:CC:22:3B:93:99:0D:2D:D8:1A:9B:DD:E9:C0
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       184BCCF3A2C3B6BE5BC1CD2A6335EC5B1091D291
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3139312e302e302f31362d3234203d3e203139393035.roa
Signing time:             Tue 06 Jan 2026 19:14:17 +0000
ROA not before:           Tue 06 Jan 2026 19:09:17 +0000
ROA not after:            Tue 05 Jan 2027 19:14:17 +0000
asID:                     19905
IP address blocks:        132.191.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4b:cc:f3:a2:c3:b6:be:5b:c1:cd:2a:63:35:ec:5b:10:91:d2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Jan  6 19:09:17 2026 GMT
            Not After : Jan  5 19:14:17 2027 GMT
        Subject: CN=0090450D8499ADCC223B93990D2DD81A9BDDE9C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d6:27:22:3f:65:58:9b:71:af:94:b4:ae:e0:
                    0c:a7:8c:af:00:f1:34:c4:7a:53:50:a9:12:de:61:
                    1c:95:1b:20:a2:00:8c:7f:4b:7c:47:5f:b1:d3:57:
                    91:b1:e1:02:c4:05:e7:84:41:56:e9:43:b7:05:22:
                    ad:12:20:47:dc:d9:96:db:d5:d4:aa:ef:7a:80:14:
                    b0:2a:f3:ed:cd:e8:07:67:f7:f7:1c:85:3c:ec:f3:
                    dc:fd:93:74:5d:99:12:db:75:96:bc:a1:29:e3:a3:
                    30:45:11:f8:64:41:f8:91:44:31:86:d0:4e:ca:d8:
                    ea:69:4b:76:a3:88:ff:1a:f8:4b:5c:04:12:c5:0f:
                    b6:7c:aa:e3:55:c8:c4:4f:a5:32:ae:66:2b:a5:73:
                    a3:34:60:35:e0:ae:ef:09:6f:12:d0:74:ba:f3:eb:
                    c1:b8:3d:1a:0a:66:97:e2:3e:f1:d7:2f:0b:cf:cc:
                    db:14:10:65:ee:21:5d:00:40:60:d1:b1:87:1d:c7:
                    58:fb:aa:3f:15:54:20:f1:1b:f8:36:9a:ed:4b:9d:
                    43:a7:18:e4:a5:a0:04:b4:df:7e:87:e6:89:5c:09:
                    48:4b:3c:f9:16:6d:67:58:40:41:c0:1c:c6:23:ee:
                    ad:70:bc:0c:84:81:14:02:05:8b:48:43:3d:a2:11:
                    81:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:90:45:0D:84:99:AD:CC:22:3B:93:99:0D:2D:D8:1A:9B:DD:E9:C0
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3139312e302e302f31362d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:27:df:70:b9:51:70:c2:14:15:d2:16:de:c7:be:39:f5:f7:
         de:db:38:4f:c9:20:a3:8b:c7:a3:39:59:7a:fc:31:84:7a:fc:
         b3:bb:c3:0f:dd:2b:7b:3f:5d:d7:ab:a9:4e:1c:6d:3a:2d:ca:
         96:41:23:c1:6c:eb:a2:6f:6b:2e:a0:01:69:e6:2b:70:45:15:
         89:2c:e3:69:36:c7:b1:7e:bf:f9:8d:85:a7:c6:7c:f5:b8:ef:
         b8:98:b4:9c:8e:ff:f4:a9:ba:5b:a5:d6:37:d5:f7:0d:e3:1b:
         b8:e7:42:20:47:70:c4:54:45:10:f6:78:7b:2a:f5:b9:b7:66:
         87:d7:2c:37:fd:fa:b3:31:19:a3:3d:f4:25:3a:96:6f:fe:b1:
         b0:0a:28:4f:1e:e7:22:0f:13:84:95:5f:fa:e0:59:aa:ff:4e:
         1b:64:45:f8:1f:01:c5:6a:e5:30:0a:95:37:d1:86:5b:3e:10:
         e9:f8:b8:ae:c7:49:20:34:30:f3:2b:83:c0:03:f2:50:5f:54:
         d6:fc:96:9c:9f:f2:a9:4a:80:41:32:99:f6:fb:5e:c7:95:7a:
         7a:ea:ea:53:bf:f1:e9:0d:10:3b:dd:0d:f0:57:aa:b9:63:d3:
         71:36:40:d5:c9:8c:3c:4b:2d:5c:fc:64:9d:85:08:fd:49:04:
         f5:c0:7a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:26:42 2026 by rpki-client