This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3139312e39382e3132382e302f31382d3234203d3e203237383433.roa
File:                     3139312e39382e3132382e302f31382d3234203d3e203237383433.roa (raw, json)
Hash identifier:          EOgmgIicaKSsTzLc22OisD4RgSboNj53EC2cbmwbGcM=
Subject key identifier:   2B:2D:E5:03:71:50:71:BD:DE:28:06:C2:6A:E6:D6:DC:0A:CB:C1:7F
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       14BE34B974845E84B7E4DEE019FE05E376D1EF9F
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3139312e39382e3132382e302f31382d3234203d3e203237383433.roa
Signing time:             Tue 06 Jan 2026 19:03:52 +0000
ROA not before:           Tue 06 Jan 2026 18:58:52 +0000
ROA not after:            Tue 05 Jan 2027 19:03:52 +0000
asID:                     27843
IP address blocks:        191.98.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:be:34:b9:74:84:5e:84:b7:e4:de:e0:19:fe:05:e3:76:d1:ef:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Jan  6 18:58:52 2026 GMT
            Not After : Jan  5 19:03:52 2027 GMT
        Subject: CN=2B2DE503715071BDDE2806C26AE6D6DC0ACBC17F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:49:74:a3:46:11:3f:a9:82:5c:ca:ee:f1:dd:
                    c8:2c:fd:e8:8c:6d:74:55:7f:b0:9c:80:3a:6c:b1:
                    a3:34:e6:66:e8:bd:18:74:32:1d:d5:c9:72:14:2b:
                    fa:d8:ba:cd:7b:e8:24:4b:f4:24:31:cf:f8:4b:ed:
                    01:15:9a:c0:b2:3c:91:ae:0f:80:33:0d:1e:d0:a7:
                    9a:8a:ea:81:b0:79:04:66:0f:fe:93:ef:77:86:82:
                    eb:6e:06:52:18:47:c7:f5:cd:f5:f5:9f:35:d5:50:
                    32:be:de:65:a4:f4:79:20:0d:f6:4d:7d:71:25:03:
                    7f:a0:f5:db:7a:f1:ca:db:38:84:2e:be:a0:ad:2c:
                    3f:3d:08:2f:6c:ba:52:33:a6:8b:f3:18:e0:dc:06:
                    22:17:a6:f6:4b:b1:a2:45:e3:ed:f1:a2:a6:88:c6:
                    25:89:fd:45:e4:27:04:96:85:55:c8:5c:89:74:1c:
                    3c:82:f2:0c:d8:f1:f9:7b:57:cf:22:e0:43:38:0f:
                    13:77:c7:65:ec:30:e3:ea:ae:11:de:a3:67:1f:20:
                    27:8a:05:1b:6f:fd:18:5f:39:68:d2:d9:01:85:df:
                    42:f9:36:7e:35:a9:a1:fd:9c:63:b7:c2:41:e2:77:
                    71:52:f7:74:42:91:ec:73:9c:f2:22:e0:d3:61:34:
                    10:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2D:E5:03:71:50:71:BD:DE:28:06:C2:6A:E6:D6:DC:0A:CB:C1:7F
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3139312e39382e3132382e302f31382d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:ed:61:13:f4:33:04:40:5d:03:ba:e2:1f:b7:61:7c:c5:46:
         4f:e2:ff:7e:ce:16:17:1d:c3:0f:ac:1a:5d:0a:4c:24:54:2a:
         63:47:09:c4:4a:8e:b8:b3:f5:06:25:a9:e1:bc:f3:51:d2:bd:
         fa:4f:30:2c:fd:ee:ed:7d:1d:78:dd:ca:12:52:f1:0f:96:a3:
         67:fc:b2:cc:87:38:42:3b:a1:4b:34:32:3c:80:64:2a:32:ef:
         b9:03:1f:1c:3f:a6:78:6b:83:c0:3e:2d:8e:59:3f:aa:d2:5c:
         e0:81:5a:93:a5:f9:c2:a1:be:7f:f2:07:68:60:af:72:11:a3:
         9e:f9:ca:ae:30:d1:95:a0:e1:67:12:b7:e7:cb:09:0d:80:54:
         77:f1:a8:69:0a:ba:4e:4e:58:16:57:ce:17:5e:98:71:3e:ef:
         35:c0:d2:55:a0:4c:b9:73:1e:d3:fa:5f:8d:b6:10:c7:c2:46:
         b1:96:3e:f8:a5:70:45:63:e8:cc:8a:0e:4b:20:b9:71:dc:9e:
         97:e8:b5:fe:3e:55:eb:a9:1e:26:d9:89:02:9a:94:71:d0:2b:
         2d:ee:4b:fc:84:24:63:73:1e:02:68:d2:1a:63:05:4f:b1:a2:
         44:84:77:68:4e:6d:59:a1:ee:9b:f4:bf:a6:28:bd:bc:b7:41:
         2b:ea:84:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:32:58 2026 by rpki-client