This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139312e3130302e302e302f31362d3234203d3e203237363638.roa
File:                     3139312e3130302e302e302f31362d3234203d3e203237363638.roa (raw, json)
Hash identifier:          i2TLJSooe9/QnURRN95dHQJn9ydqU+gQ2ITk+hhoihc=
Subject key identifier:   9D:BF:58:22:E1:27:33:A0:69:30:E3:AF:CB:33:42:58:A6:07:D0:A3
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       0C9591236479AFFC7A92B1C722FCBFC85B3D9AA0
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139312e3130302e302e302f31362d3234203d3e203237363638.roa
Signing time:             Tue 06 Jan 2026 20:49:23 +0000
ROA not before:           Tue 06 Jan 2026 20:44:23 +0000
ROA not after:            Tue 05 Jan 2027 20:49:23 +0000
asID:                     27668
IP address blocks:        191.100.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:95:91:23:64:79:af:fc:7a:92:b1:c7:22:fc:bf:c8:5b:3d:9a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Jan  6 20:44:23 2026 GMT
            Not After : Jan  5 20:49:23 2027 GMT
        Subject: CN=9DBF5822E12733A06930E3AFCB334258A607D0A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:78:85:10:68:56:92:79:dd:db:a0:18:85:
                    06:e0:5d:03:e3:6f:12:fe:f4:6f:76:4c:1d:63:8d:
                    6b:31:c9:e2:b3:e8:8a:10:c9:06:be:88:31:c8:98:
                    be:3c:a1:cb:b6:8e:7f:56:9d:28:fa:f1:e2:da:5a:
                    15:06:ce:8e:a6:9a:44:56:32:d2:e8:29:48:f6:eb:
                    da:6f:d7:e4:de:9b:c7:99:c7:cc:97:77:0d:2f:c0:
                    b2:00:17:64:19:b2:fc:16:e6:2e:47:0a:08:80:e6:
                    a8:9b:17:74:4b:7a:10:ac:71:63:d5:bc:23:7a:20:
                    69:fd:2e:dc:db:ec:13:a9:53:55:82:3b:ed:5e:b9:
                    50:9f:0f:d5:40:be:4d:76:07:a3:fb:13:9b:ca:b4:
                    fb:1a:f9:43:cf:1f:f5:b8:05:d4:a7:87:9d:f0:1a:
                    9e:c7:c4:3a:0f:4e:60:76:46:3f:f0:d6:46:78:1b:
                    8e:de:19:6d:4e:5c:8f:90:9a:c4:db:01:e1:65:51:
                    36:97:bf:42:0e:09:a6:41:85:76:9e:b9:3b:a1:91:
                    bc:30:4e:f4:bc:dc:bb:6e:88:fa:b6:be:f9:d6:4e:
                    8b:9f:90:e0:9e:8c:4e:41:8e:b6:e3:07:1f:d8:b5:
                    53:23:61:94:3c:d8:8e:cd:f9:a8:51:cc:27:24:d2:
                    0b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BF:58:22:E1:27:33:A0:69:30:E3:AF:CB:33:42:58:A6:07:D0:A3
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139312e3130302e302e302f31362d3234203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.100.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8f:bd:a9:b7:77:21:7e:8c:5c:12:c4:60:97:09:c5:54:49:6a:
         02:f9:2b:bb:d6:bb:89:02:ae:1e:0e:a8:ce:a1:03:d5:96:04:
         c8:e8:69:10:f3:25:60:f3:4e:3a:0d:a5:d1:07:22:51:a7:cb:
         a5:b2:00:17:77:7a:35:00:e2:73:ac:4f:b4:ee:4b:d3:32:3a:
         dd:33:d0:b6:36:3b:5c:2a:90:80:70:e6:da:61:9e:d6:b3:99:
         b7:9f:f2:8f:43:e2:27:06:f3:7e:21:b2:4b:b6:c4:8b:61:eb:
         2d:34:11:e6:26:ad:bd:b6:f1:98:00:f9:4e:96:2b:a5:1a:d8:
         c5:90:9f:46:be:59:5c:a0:ef:54:ee:36:53:f5:33:e7:a6:d3:
         c0:46:72:57:82:78:a2:e7:34:30:34:53:af:5b:7e:72:69:93:
         0a:f9:d6:84:70:9c:32:ac:33:d0:c4:6e:cd:92:a9:23:31:57:
         3a:56:af:1a:93:d8:8f:7c:2f:9f:e8:24:3a:e9:c4:b0:19:4a:
         77:7b:d1:75:b0:b6:6f:66:4f:37:15:9a:1a:6b:67:1c:07:ec:
         6b:cf:57:b3:d8:df:6f:7d:bb:8c:89:95:8c:3f:3b:a7:d6:15:
         5f:47:d2:96:25:0d:e4:d9:05:a7:a9:93:10:c0:ea:77:46:07:
         b0:75:ad:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:55:11 2026 by rpki-client