This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/3138372e3130322e3139362e302f32332d3234203d3e20323731393134.roa
File:                     3138372e3130322e3139362e302f32332d3234203d3e20323731393134.roa (raw, json)
Hash identifier:          pjwzEqGySJ2rECoIoDbuGt/FaNsNO/yyplxYP9C3/Yc=
Subject key identifier:   28:7E:2D:3C:82:73:31:5C:CA:06:17:9A:91:4A:FF:CD:42:DA:E9:C7
Certificate issuer:       /CN=20AE62643C64442088545A3D5BA49A68A414B159
Certificate serial:       5F4E5B14900E5FA8440085BE6BF6B6F4C6D9A4C4
Authority key identifier: 20:AE:62:64:3C:64:44:20:88:54:5A:3D:5B:A4:9A:68:A4:14:B1:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AE62643C64442088545A3D5BA49A68A414B159.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/3138372e3130322e3139362e302f32332d3234203d3e20323731393134.roa
Signing time:             Tue 06 Jan 2026 20:49:44 +0000
ROA not before:           Tue 06 Jan 2026 20:44:44 +0000
ROA not after:            Tue 05 Jan 2027 20:49:44 +0000
asID:                     271914
IP address blocks:        187.102.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/20AE62643C64442088545A3D5BA49A68A414B159.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/20AE62643C64442088545A3D5BA49A68A414B159.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AE62643C64442088545A3D5BA49A68A414B159.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4e:5b:14:90:0e:5f:a8:44:00:85:be:6b:f6:b6:f4:c6:d9:a4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20AE62643C64442088545A3D5BA49A68A414B159
        Validity
            Not Before: Jan  6 20:44:44 2026 GMT
            Not After : Jan  5 20:49:44 2027 GMT
        Subject: CN=287E2D3C8273315CCA06179A914AFFCD42DAE9C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:37:fc:61:22:69:dd:1a:fc:ce:3e:a7:1a:
                    20:45:ec:54:c8:b8:fe:e8:aa:d3:5b:5f:ff:37:d6:
                    4e:2f:2f:89:f1:4b:7e:bc:8b:13:79:9a:75:35:97:
                    0c:5f:8f:41:e7:71:5b:49:8d:76:26:9a:9b:09:81:
                    d9:ef:fb:29:01:b6:3d:3e:dd:19:94:65:c2:6e:54:
                    8e:43:ce:5f:b1:5d:2a:92:7a:c7:40:c2:cf:6a:20:
                    99:6f:6e:f0:90:99:b7:a6:8b:57:e6:02:f3:e1:7f:
                    96:26:1e:20:69:51:61:89:c4:fc:b0:64:77:18:95:
                    1f:3b:fe:d5:4e:45:c8:9a:69:b8:88:a8:3b:43:7f:
                    a2:d1:ad:07:7a:15:cb:fb:07:91:15:db:3f:43:e1:
                    98:bf:1a:60:02:88:db:c1:e3:30:65:fc:5e:7f:36:
                    33:fb:f6:28:37:cf:e1:03:b6:3a:98:29:ee:4f:b9:
                    41:f1:19:9c:b0:54:2d:5b:9c:63:aa:5d:f8:65:c6:
                    d8:bd:48:fd:e6:42:00:06:63:b1:83:c3:88:c7:dd:
                    69:8c:b8:a0:07:fa:5e:f8:6c:9b:d4:ab:71:ce:31:
                    41:8a:b7:96:e8:18:27:60:0e:b3:31:4b:15:40:4b:
                    43:78:d0:ef:df:46:fe:0d:02:44:e0:13:54:33:ea:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7E:2D:3C:82:73:31:5C:CA:06:17:9A:91:4A:FF:CD:42:DA:E9:C7
            X509v3 Authority Key Identifier:
                keyid:20:AE:62:64:3C:64:44:20:88:54:5A:3D:5B:A4:9A:68:A4:14:B1:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/20AE62643C64442088545A3D5BA49A68A414B159.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AE62643C64442088545A3D5BA49A68A414B159.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/3138372e3130322e3139362e302f32332d3234203d3e20323731393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:66:95:27:02:0e:97:8f:c9:76:0c:ad:31:35:5a:bc:71:ff:
         42:33:5c:b5:36:cc:37:8e:45:75:45:e3:ca:57:a8:a6:9a:18:
         5b:6c:f2:fa:a3:e4:56:cd:72:e8:41:16:5e:57:b0:e9:15:d9:
         7a:09:e3:54:b3:0d:c1:d3:15:61:53:85:25:a8:c3:cc:04:69:
         27:05:ac:25:b8:80:35:45:fc:51:7f:b4:0a:ed:3a:04:8c:8f:
         ee:97:e2:f0:c5:85:66:2a:75:cd:f3:ad:22:9a:d0:5e:2b:e7:
         a6:8c:ea:60:23:9c:6e:79:31:df:5a:a0:9e:03:00:33:b1:9f:
         2b:ab:2e:4b:c5:0b:bc:5d:2a:e9:a5:d7:c2:06:a1:51:a5:3a:
         d8:19:c5:13:28:ef:1f:b2:01:01:23:9d:51:40:be:be:cd:1f:
         d6:f2:59:f5:af:0e:fe:43:20:b3:c6:ee:27:68:1a:da:f1:ad:
         cc:19:05:a5:39:4f:e2:19:65:1b:65:3c:d9:db:df:01:70:b6:
         dc:5e:44:58:a3:62:13:70:56:f3:c1:80:fe:da:6f:85:db:fd:
         b9:15:23:bd:da:fc:93:06:61:87:54:ab:16:22:fa:fe:35:de:
         5c:8b:af:f3:07:7c:50:48:e8:6e:71:ae:02:49:05:59:37:f9:
         2c:3a:73:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:52:31 2026 by rpki-client