This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139312e3131322e302e302f31342d3234203d3e203136363239.roa
File:                     3139312e3131322e302e302f31342d3234203d3e203136363239.roa (raw, json)
Hash identifier:          7EUuwPCj8LMQD3Kjn/K80CJIynw3LfOWh7GUKXhVb8E=
Subject key identifier:   5C:38:34:09:77:E8:9C:7A:AD:04:B2:A5:6E:13:7A:2F:87:81:9D:D1
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       48C36068629712D977962AF98F125EAF8E1A7D2F
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139312e3131322e302e302f31342d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 19:24:55 +0000
ROA not before:           Tue 06 Jan 2026 19:19:55 +0000
ROA not after:            Tue 05 Jan 2027 19:24:55 +0000
asID:                     16629
IP address blocks:        191.112.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c3:60:68:62:97:12:d9:77:96:2a:f9:8f:12:5e:af:8e:1a:7d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:55 2026 GMT
            Not After : Jan  5 19:24:55 2027 GMT
        Subject: CN=5C38340977E89C7AAD04B2A56E137A2F87819DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dc:32:21:4a:3a:a8:90:90:de:9a:e8:63:b9:
                    f9:d7:72:4e:7a:85:f2:9e:58:ca:2c:b5:fe:29:d9:
                    77:b4:f1:0e:5a:b2:89:7d:8e:56:c6:9e:0e:1c:a2:
                    c5:2e:55:f4:b2:40:5c:72:7e:da:e5:df:5f:23:d1:
                    9f:f9:1b:e7:d5:06:4c:ac:4e:9a:8d:44:5c:a7:86:
                    4a:d6:48:a5:45:5f:b1:14:1f:43:52:32:c0:38:7a:
                    9b:2f:f7:22:1d:c6:15:a9:dd:ae:1c:a2:15:87:0f:
                    0b:98:7a:05:26:a6:c0:8e:88:83:cd:66:a6:f7:6d:
                    57:b3:c5:cf:43:2e:7c:2b:7d:11:39:df:97:5e:ee:
                    22:38:47:da:9b:23:54:65:b2:9e:29:2f:22:39:ec:
                    7f:a5:8c:5e:20:ce:b1:c1:1c:7b:13:91:f3:bb:03:
                    e3:9e:d8:5a:d0:7a:5c:fc:4c:f3:b5:33:35:da:c9:
                    33:30:76:14:9e:2f:a3:9b:9b:a3:98:01:6a:30:a0:
                    3b:66:13:4a:78:81:d5:2e:40:03:0f:97:6f:32:0e:
                    06:d2:e7:b1:90:36:53:3e:90:28:4c:84:4d:20:81:
                    19:9c:0a:51:e2:3c:79:ec:73:f6:17:96:11:ab:60:
                    86:3b:38:0a:3c:bc:ed:1b:46:5c:15:cf:78:cc:61:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:38:34:09:77:E8:9C:7A:AD:04:B2:A5:6E:13:7A:2F:87:81:9D:D1
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139312e3131322e302e302f31342d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.112.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         b9:75:23:3d:b5:bc:6a:5e:cb:4d:00:95:ed:b3:81:00:fa:81:
         5d:27:59:60:2b:6f:89:45:35:27:0f:fb:0d:99:83:87:32:ac:
         a9:ad:ad:58:0e:88:41:f8:cc:9c:57:7e:23:a9:78:29:d9:54:
         8d:6d:95:3d:a1:97:bf:67:e9:0e:53:7f:69:42:ed:c6:f4:31:
         8d:0f:c6:bc:a4:f0:84:40:00:90:b2:0b:4f:46:4b:ad:8e:63:
         8a:70:8d:23:a0:79:42:8c:57:c7:bf:85:7b:98:60:7c:e6:bd:
         e0:89:3f:e6:41:ed:c0:85:55:01:81:9f:0e:8f:0c:6f:f4:bd:
         c2:c2:ca:c5:13:e4:36:53:67:73:aa:da:0e:31:a4:c9:40:e2:
         3e:8d:a8:4a:06:7b:f1:21:fa:2b:2b:33:c4:88:ce:d3:9b:cf:
         55:c0:5a:0c:10:12:82:e6:6d:0a:7b:b9:45:01:ab:dd:05:8e:
         b6:d0:7c:fb:26:07:85:32:25:7e:42:85:b1:fc:a7:3d:e7:52:
         e9:7b:e4:71:b8:3e:7e:86:30:cc:03:0d:23:55:d2:50:3f:62:
         00:a5:a5:c5:33:05:d3:93:b1:63:a3:14:a5:dc:b2:50:ea:47:
         67:51:08:81:27:d1:69:bd:fa:a7:5c:c5:3c:fc:97:1d:10:d4:
         8b:60:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:32 2026 by rpki-client