This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3138372e3139312e38302e302f32322d3234203d3e203139333733.roa
File:                     3138372e3139312e38302e302f32322d3234203d3e203139333733.roa (raw, json)
Hash identifier:          uXHwsPEhfI3JDnPd4RBasgyHnavwefhsvKpS2Ue8PeI=
Subject key identifier:   8B:C6:2B:40:D0:AD:E4:F2:F8:D6:E5:3B:E4:07:58:83:00:06:41:6C
Certificate issuer:       /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial:       4973EE1A867FB461713F7ED7B1DC6847D5F174C9
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3138372e3139312e38302e302f32322d3234203d3e203139333733.roa
Signing time:             Sun 18 Jan 2026 07:25:48 +0000
ROA not before:           Sun 18 Jan 2026 07:20:48 +0000
ROA not after:            Sun 17 Jan 2027 07:25:48 +0000
asID:                     19373
IP address blocks:        187.191.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:73:ee:1a:86:7f:b4:61:71:3f:7e:d7:b1:dc:68:47:d5:f1:74:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
        Validity
            Not Before: Jan 18 07:20:48 2026 GMT
            Not After : Jan 17 07:25:48 2027 GMT
        Subject: CN=8BC62B40D0ADE4F2F8D6E53BE40758830006416C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9d:55:21:87:f3:b8:30:ae:fd:84:83:b7:6a:
                    81:92:91:b1:77:ff:c9:1c:09:2b:16:21:5a:b5:6d:
                    cb:6e:9c:a5:ec:93:23:0d:a8:e3:eb:80:81:76:04:
                    85:4d:d6:e5:0f:2a:b6:7b:c7:e7:b6:b0:21:8a:36:
                    db:2b:ec:c7:51:c9:f3:96:3a:a7:89:71:26:6d:34:
                    0d:8e:14:e1:8f:d4:e7:26:a2:a0:9f:69:52:3d:9e:
                    08:a9:d5:27:1c:93:85:41:30:c0:09:d9:03:e5:f4:
                    0c:67:a3:44:10:2d:35:56:43:d1:8c:1f:a5:bf:16:
                    f1:04:a9:1d:03:27:f7:df:58:b9:04:53:1b:8d:b7:
                    cc:86:5a:97:3c:ac:6f:30:34:53:4d:16:12:41:6e:
                    24:c5:d3:68:8b:6b:6e:79:67:f3:fc:0c:90:05:15:
                    d6:0f:47:28:76:5c:8f:2e:37:0f:31:fa:43:fe:36:
                    41:8e:5d:08:bf:73:cd:87:96:62:58:b0:f6:1b:6a:
                    e7:32:e1:a3:56:f3:40:a4:e8:25:f8:b2:25:0e:7c:
                    5f:fe:93:66:ef:f7:77:8c:14:0a:da:52:23:b9:ac:
                    2a:0d:80:58:91:1d:46:c6:f6:5c:27:cb:3f:df:ad:
                    cb:bd:6f:06:56:b8:98:24:07:ed:ea:37:48:fa:57:
                    51:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C6:2B:40:D0:AD:E4:F2:F8:D6:E5:3B:E4:07:58:83:00:06:41:6C
            X509v3 Authority Key Identifier:
                keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3138372e3139312e38302e302f32322d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.191.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:25:66:6b:6b:7b:06:c5:52:b2:e9:ae:bd:6b:71:0f:75:24:
         d4:c3:26:12:e3:a5:88:25:17:a8:58:b5:6d:1e:d2:5f:f2:fe:
         00:b2:f1:8b:64:9b:56:92:8c:cd:30:74:84:56:25:27:fc:04:
         4d:1d:ef:a8:a0:99:12:46:a3:f8:ee:53:8b:c0:00:ac:41:01:
         6b:c9:45:5c:0e:85:6b:4d:94:bc:6e:b1:a0:7e:3a:ee:3f:16:
         49:31:ae:93:45:24:5b:2a:2f:d5:84:d3:9e:af:cf:e5:a0:9c:
         b0:9a:a3:37:ec:f7:3c:b0:0e:5d:e2:c3:62:59:8f:c5:03:f7:
         97:37:c9:46:05:2c:f6:71:38:15:c0:5c:d3:c1:a4:74:1f:d5:
         06:d2:44:9c:45:8d:2b:80:5d:55:f1:4f:20:53:9f:bd:96:8f:
         29:9a:ee:7f:5b:b3:d2:14:c1:71:b5:3d:55:1d:da:b8:8f:08:
         bc:bc:b3:5a:ea:81:3f:81:fa:ba:19:f5:4f:53:4d:b0:13:6b:
         4f:cd:8c:49:f1:35:e0:40:40:b8:6f:04:bb:cf:b0:a3:fa:f2:
         b1:dc:eb:d1:70:2f:cd:cd:9d:31:1e:7a:7b:1f:6d:11:af:0c:
         59:91:a0:03:5d:74:8e:03:fe:f4:ce:4d:78:1a:08:50:41:2a:
         80:8d:14:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:10 2026 by rpki-client