This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9A13F2839E6FD8E1F59A2966EFEE510A56444801F3C5A9D5A2EE31E3C8895AE1/0/3230362e31352e3132382e302f32342d3234203d3e20323732393633.roa
File:                     3230362e31352e3132382e302f32342d3234203d3e20323732393633.roa (raw, json)
Hash identifier:          J6i5YWrlTUpUHSgEhcIUmDgxAZJU8ayFxYHyy1UIgKQ=
Subject key identifier:   A7:E8:A9:95:C9:80:21:36:83:2B:CE:10:89:F7:82:F9:94:27:4B:8F
Certificate issuer:       /CN=8494B3BB1D3F55ED9ABF93969BA0B295194553C0
Certificate serial:       2FB2EA627F775DF7E225B722D3E5F6C5D9DDCA5B
Authority key identifier: 84:94:B3:BB:1D:3F:55:ED:9A:BF:93:96:9B:A0:B2:95:19:45:53:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8494B3BB1D3F55ED9ABF93969BA0B295194553C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9A13F2839E6FD8E1F59A2966EFEE510A56444801F3C5A9D5A2EE31E3C8895AE1/0/3230362e31352e3132382e302f32342d3234203d3e20323732393633.roa
Signing time:             Tue 06 Jan 2026 19:32:36 +0000
ROA not before:           Tue 06 Jan 2026 19:27:36 +0000
ROA not after:            Tue 05 Jan 2027 19:32:36 +0000
asID:                     272963
IP address blocks:        206.15.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9A13F2839E6FD8E1F59A2966EFEE510A56444801F3C5A9D5A2EE31E3C8895AE1/0/8494B3BB1D3F55ED9ABF93969BA0B295194553C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9A13F2839E6FD8E1F59A2966EFEE510A56444801F3C5A9D5A2EE31E3C8895AE1/0/8494B3BB1D3F55ED9ABF93969BA0B295194553C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8494B3BB1D3F55ED9ABF93969BA0B295194553C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b2:ea:62:7f:77:5d:f7:e2:25:b7:22:d3:e5:f6:c5:d9:dd:ca:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8494B3BB1D3F55ED9ABF93969BA0B295194553C0
        Validity
            Not Before: Jan  6 19:27:36 2026 GMT
            Not After : Jan  5 19:32:36 2027 GMT
        Subject: CN=A7E8A995C9802136832BCE1089F782F994274B8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9e:b6:06:7e:99:38:1b:45:cf:90:4f:92:0c:
                    fc:4b:14:67:b3:11:54:21:fb:c8:fb:96:6a:4d:a9:
                    25:37:4e:99:a9:71:24:06:c9:b1:9e:59:bc:46:f4:
                    22:41:eb:5a:84:23:9e:af:ed:a6:63:80:18:76:73:
                    20:9b:c1:36:bb:78:86:89:5d:74:16:4d:19:53:a1:
                    f3:42:33:7e:2c:0a:cc:0d:b0:a0:d3:0a:d6:af:fd:
                    c2:9a:75:a8:68:70:ac:a2:04:c3:d1:5d:98:21:bf:
                    b1:8b:da:12:fe:46:bc:41:e0:28:06:b5:b5:32:3e:
                    ee:6c:0f:8f:55:34:39:30:09:c6:b8:e1:17:3d:78:
                    57:fb:9e:87:1a:ee:9e:02:4d:bf:69:c7:48:d6:dd:
                    58:db:58:7b:13:5f:0a:0c:17:3e:3d:d2:25:d1:02:
                    11:e9:d7:4f:99:06:c6:d0:76:ab:3f:e8:40:b1:dd:
                    b6:11:13:f6:04:33:23:7a:65:a9:e9:5d:a0:ed:0d:
                    56:dc:ff:f1:48:49:cd:5a:6e:48:4b:c7:93:5a:fc:
                    14:b9:49:1d:2a:95:95:fe:71:d6:eb:c8:ef:f8:30:
                    26:cb:69:f1:95:77:db:e1:e3:4a:a8:df:e1:c5:f4:
                    f4:3f:7d:00:5e:31:50:8a:57:61:74:7b:8a:4c:dd:
                    83:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E8:A9:95:C9:80:21:36:83:2B:CE:10:89:F7:82:F9:94:27:4B:8F
            X509v3 Authority Key Identifier:
                keyid:84:94:B3:BB:1D:3F:55:ED:9A:BF:93:96:9B:A0:B2:95:19:45:53:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9A13F2839E6FD8E1F59A2966EFEE510A56444801F3C5A9D5A2EE31E3C8895AE1/0/8494B3BB1D3F55ED9ABF93969BA0B295194553C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8494B3BB1D3F55ED9ABF93969BA0B295194553C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9A13F2839E6FD8E1F59A2966EFEE510A56444801F3C5A9D5A2EE31E3C8895AE1/0/3230362e31352e3132382e302f32342d3234203d3e20323732393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.15.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:0b:9e:6f:5a:7b:fc:9f:10:bb:ad:55:06:cb:72:57:4e:11:
         03:c9:51:64:45:26:30:05:e2:60:98:db:91:36:e9:63:f9:20:
         46:2c:8e:22:c1:c3:28:d6:98:aa:24:c7:92:c1:d9:8e:c2:7e:
         32:80:b5:88:1a:28:12:02:9c:88:3e:c8:f7:83:b4:ad:78:11:
         ad:cc:ce:a8:96:22:59:18:f4:c3:36:ce:44:c9:d9:5a:6d:85:
         4f:e6:09:9f:5a:57:3b:de:d0:56:c8:68:72:11:61:5d:b6:ca:
         a4:01:86:46:42:17:c4:2a:ac:74:8f:83:c9:fb:d1:35:44:ca:
         ff:e8:c3:19:60:02:0d:87:51:e5:3c:6c:8b:a9:93:4c:8b:a7:
         e4:54:bf:d1:87:e2:61:24:36:1d:94:a8:4f:fa:b1:d4:5f:6c:
         90:23:00:d7:42:de:94:06:f7:33:c0:aa:0a:37:01:95:e0:33:
         11:49:5d:ad:a3:95:d8:f6:ff:32:ae:1d:bd:08:32:58:4b:49:
         1b:25:ce:9b:d0:2b:d7:58:72:c5:aa:5f:1d:b3:ae:dd:e5:92:
         8a:33:57:e6:aa:2f:a1:8c:54:d8:95:a7:30:e4:8f:1e:11:7d:
         a3:b0:73:cf:09:a3:26:ed:50:b6:b0:b2:e8:01:03:75:1f:ec:
         21:e1:55:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:59:09 2026 by rpki-client