This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132342e302e302f31342d3234203d3e203136363239.roa
File:                     3139312e3132342e302e302f31342d3234203d3e203136363239.roa (raw, json)
Hash identifier:          bQeoXQxlqDGF2Cahm5rGsvarVRSbSSjEG2sjX6lkUzs=
Subject key identifier:   09:88:A7:B5:47:39:68:2E:77:FC:4F:42:3D:C7:8D:C3:06:9E:E3:E3
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       07A6D1F9484C19380DD6CEACE863EF060F5B6357
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132342e302e302f31342d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 19:09:56 +0000
ROA not before:           Tue 06 Jan 2026 19:04:56 +0000
ROA not after:            Tue 05 Jan 2027 19:09:56 +0000
asID:                     16629
IP address blocks:        191.124.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a6:d1:f9:48:4c:19:38:0d:d6:ce:ac:e8:63:ef:06:0f:5b:63:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Jan  6 19:04:56 2026 GMT
            Not After : Jan  5 19:09:56 2027 GMT
        Subject: CN=0988A7B54739682E77FC4F423DC78DC3069EE3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:c0:7f:4b:5b:75:ed:1a:ff:e4:1e:db:4b:
                    45:9d:92:d5:dc:e6:2e:3d:59:e2:fe:79:ea:4f:e4:
                    d0:b1:74:26:4a:b8:20:45:47:84:92:d5:89:ea:1f:
                    85:f2:51:15:d6:12:b8:13:b3:80:51:a7:68:6c:9d:
                    b2:81:73:34:25:13:59:05:5d:19:94:42:2b:89:a8:
                    ab:02:e9:79:ac:bb:11:26:3d:42:80:5a:0c:b3:bc:
                    68:7d:34:1a:19:e6:ff:8c:67:f0:89:6f:e5:fe:a2:
                    19:8a:bf:99:c9:a9:f3:af:56:2f:40:11:b6:88:96:
                    7d:01:30:c2:7a:e4:1f:ba:5b:be:4f:af:83:bb:01:
                    39:a4:2e:71:6a:2f:77:ca:32:b7:4d:85:1c:1c:63:
                    c2:e8:48:34:09:8b:13:8b:a7:5f:f1:b3:7d:0c:57:
                    a8:4c:f4:7f:cd:fb:94:e9:16:cc:4d:48:9f:7b:2b:
                    b4:77:f6:e0:9a:70:cb:13:e9:9e:81:0b:20:2d:92:
                    c7:5e:bc:b4:63:ab:c4:8a:f7:30:92:9e:ed:1f:38:
                    30:36:d7:15:63:be:b0:9e:e5:3c:47:1a:0b:22:9d:
                    e1:05:de:7b:b6:1c:f0:71:37:ec:07:49:1a:c7:fb:
                    08:96:ef:06:91:f8:48:94:6a:87:1d:63:a8:90:24:
                    86:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:88:A7:B5:47:39:68:2E:77:FC:4F:42:3D:C7:8D:C3:06:9E:E3:E3
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139312e3132342e302e302f31342d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.124.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         54:5d:d4:85:06:6a:e1:05:db:bd:6c:c6:c7:e8:c1:14:ca:1b:
         86:46:13:82:da:cd:44:3b:8b:cd:9c:55:9e:b8:9d:42:d5:6e:
         95:d2:e9:12:74:8a:f1:0c:63:d3:25:26:a0:77:e3:ee:f2:ef:
         c7:2c:df:9c:7b:58:e5:89:fa:c8:14:c1:f5:15:b0:3d:9e:75:
         9a:3c:13:4c:36:7b:85:a3:3b:34:55:10:38:23:05:cd:07:71:
         72:06:90:9a:84:fd:0d:6a:18:ad:e9:90:78:01:e9:25:40:c5:
         66:ed:85:3b:e2:a9:38:af:1e:69:82:e6:87:d1:74:f0:a1:28:
         93:8a:2c:d1:82:ed:d0:ef:82:53:63:23:95:24:b6:3d:f5:71:
         8a:7e:52:bd:7b:b1:1c:16:63:a9:9f:78:47:82:a0:8e:f0:4e:
         88:c0:4a:9d:21:dd:2e:f0:f9:fc:50:6e:1b:1c:20:30:1e:9f:
         07:82:b8:46:00:4f:05:7a:ad:c7:c4:1c:ec:fe:e5:34:92:2c:
         ee:48:fc:57:2a:20:5a:9f:fd:9c:da:68:03:cd:7d:c0:fa:e5:
         10:e5:76:2e:05:eb:9e:20:09:7f:a1:2b:38:a7:41:05:b5:a8:
         de:e2:05:87:25:5d:1e:3e:e0:16:0e:17:f0:e0:77:68:1c:c1:
         a9:91:95:0b
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUB6bR+UhMGTgN1s6s6GPvBg9bY1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlCMzkxRjU1Nzc1MTRFMzBGNjRFREY2RTM2MTkwNUNB
MDhDRjU3MjAeFw0yNjAxMDYxOTA0NTZaFw0yNzAxMDUxOTA5NTZaMDMxMTAvBgNV
BAMTKDA5ODhBN0I1NDczOTY4MkU3N0ZDNEY0MjNEQzc4REMzMDY5RUUzRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBXMB/S1t17Rr/5B7bS0WdktXc
5i49WeL+eepP5NCxdCZKuCBFR4SS1YnqH4XyURXWErgTs4BRp2hsnbKBczQlE1kF
XRmUQiuJqKsC6XmsuxEmPUKAWgyzvGh9NBoZ5v+MZ/CJb+X+ohmKv5nJqfOvVi9A
EbaIln0BMMJ65B+6W75Pr4O7ATmkLnFqL3fKMrdNhRwcY8LoSDQJixOLp1/xs30M
V6hM9H/N+5TpFsxNSJ97K7R39uCacMsT6Z6BCyAtksdevLRjq8SK9zCSnu0fODA2
1xVjvrCe5TxHGgsineEF3nu2HPBxN+wHSRrH+wiW7waR+EiUaocdY6iQJIabAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUCYintUc5aC53/E9CPceNwwae4+MwHwYDVR0j
BBgwFoAUKbOR9Vd1FOMPZO3242GQXKCM9XIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DN0MwQ0VGQzYyNkE5NDk3MjM0REQ3QTI5RjU3Q0EzRjhG
QkFCNUM2RTYwNUE0MEFEQUIxRTA5QTAzOTNEQTE2LzAvMjlCMzkxRjU1Nzc1MTRF
MzBGNjRFREY2RTM2MTkwNUNBMDhDRjU3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOUIzOTFGNTU3NzUxNEUzMEY2
NEVERjZFMzYxOTA1Q0EwOENGNTcyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzdDMENFRkM2MjZBOTQ5NzIzNEREN0EyOUY1N0NBM0Y4RkJBQjVDNkU2
MDVBNDBBREFCMUUwOUEwMzkzREExNi8wLzMxMzkzMTJlMzEzMjM0MmUzMDJlMzAy
ZjMxMzQyZDMyMzQyMDNkM2UyMDMxMzYzNjMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwK/fDANBgkq
hkiG9w0BAQsFAAOCAQEAVF3UhQZq4QXbvWzGx+jBFMobhkYTgtrNRDuLzZxVnrid
QtVuldLpEnSK8Qxj0yUmoHfj7vLvxyzfnHtY5Yn6yBTB9RWwPZ51mjwTTDZ7haM7
NFUQOCMFzQdxcgaQmoT9DWoYremQeAHpJUDFZu2FO+KpOK8eaYLmh9F08KEok4os
0YLt0O+CU2MjlSS2PfVxin5SvXuxHBZjqZ94R4KgjvBOiMBKnSHdLvD5/FBuGxwg
MB6fB4K4RgBPBXqtx8Qc7P7lNJIs7kj8VyogWp/9nNpoA819wPrlEOV2LgXrniAJ
f6ErOKdBBbWo3uIFhyVdHj7gFg4X8OB3aBzBqZGVCw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:22 2026 by rpki-client