This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7FB140526F0C2D9FCAB4A733DBBE30EAD579F4B1AD1ADCBD1771DE3B16241F0/0/3139312e3130322e34382e302f32312d3231203d3e20323633313737.roa
File:                     3139312e3130322e34382e302f32312d3231203d3e20323633313737.roa (raw, json)
Hash identifier:          iKKfep9UTZhTkQeCQ+kvSMxSXZQhk2W6jbzy0NXu8BE=
Subject key identifier:   89:52:0D:72:00:D9:AB:50:2D:CE:AC:F2:F9:4B:73:33:8E:71:66:8F
Certificate issuer:       /CN=FC0ACBF4A6A83F60F477CA4B101FBE9B8EF17C8C
Certificate serial:       5CBE28D928BA97AB7AC26ADB442830EE35F91FA0
Authority key identifier: FC:0A:CB:F4:A6:A8:3F:60:F4:77:CA:4B:10:1F:BE:9B:8E:F1:7C:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC0ACBF4A6A83F60F477CA4B101FBE9B8EF17C8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7FB140526F0C2D9FCAB4A733DBBE30EAD579F4B1AD1ADCBD1771DE3B16241F0/0/3139312e3130322e34382e302f32312d3231203d3e20323633313737.roa
Signing time:             Tue 06 Jan 2026 19:10:52 +0000
ROA not before:           Tue 06 Jan 2026 19:05:52 +0000
ROA not after:            Tue 05 Jan 2027 19:10:52 +0000
asID:                     263177
IP address blocks:        191.102.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E7FB140526F0C2D9FCAB4A733DBBE30EAD579F4B1AD1ADCBD1771DE3B16241F0/0/FC0ACBF4A6A83F60F477CA4B101FBE9B8EF17C8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E7FB140526F0C2D9FCAB4A733DBBE30EAD579F4B1AD1ADCBD1771DE3B16241F0/0/FC0ACBF4A6A83F60F477CA4B101FBE9B8EF17C8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC0ACBF4A6A83F60F477CA4B101FBE9B8EF17C8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:be:28:d9:28:ba:97:ab:7a:c2:6a:db:44:28:30:ee:35:f9:1f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC0ACBF4A6A83F60F477CA4B101FBE9B8EF17C8C
        Validity
            Not Before: Jan  6 19:05:52 2026 GMT
            Not After : Jan  5 19:10:52 2027 GMT
        Subject: CN=89520D7200D9AB502DCEACF2F94B73338E71668F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:75:96:18:26:6a:ad:1b:83:55:1a:2b:df:2c:
                    3b:13:e6:2e:af:96:bf:ff:99:94:dd:be:64:d7:6f:
                    3b:eb:8e:c7:ef:36:38:2c:63:6d:d0:0a:1d:d1:8a:
                    b7:6d:6f:e8:ff:44:b3:61:3a:d3:14:94:a6:04:df:
                    4d:7a:95:08:3c:6a:b5:63:3e:83:c8:6f:c8:18:f3:
                    ca:53:73:22:96:00:a6:fb:9e:1c:33:c1:7c:43:d7:
                    de:f3:4c:5d:e1:d9:33:94:40:e7:39:4a:29:9f:76:
                    13:b1:9c:43:d9:48:9b:0b:56:bc:7f:36:56:29:07:
                    00:67:80:84:87:74:11:10:b5:fc:54:fd:99:6d:09:
                    21:3d:b4:e6:af:08:7f:72:e2:25:d5:b7:d3:ab:d0:
                    50:c1:76:1f:9d:88:ba:67:da:d3:81:88:8b:91:f3:
                    c1:49:46:64:44:ca:e1:46:d0:b0:b7:32:5b:23:d7:
                    50:e9:09:98:29:90:ad:b5:f9:87:e7:3c:58:39:53:
                    c5:69:70:55:05:89:4c:c9:2e:c8:4c:ad:fd:cb:ad:
                    f2:14:6c:bd:81:ee:04:2a:83:8d:91:0f:20:83:ad:
                    27:4e:cd:ae:65:86:d9:23:61:8b:88:75:e3:6d:aa:
                    bf:dd:d1:b5:86:9a:6c:4e:c9:26:13:36:b2:bf:95:
                    2e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:52:0D:72:00:D9:AB:50:2D:CE:AC:F2:F9:4B:73:33:8E:71:66:8F
            X509v3 Authority Key Identifier:
                keyid:FC:0A:CB:F4:A6:A8:3F:60:F4:77:CA:4B:10:1F:BE:9B:8E:F1:7C:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7FB140526F0C2D9FCAB4A733DBBE30EAD579F4B1AD1ADCBD1771DE3B16241F0/0/FC0ACBF4A6A83F60F477CA4B101FBE9B8EF17C8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC0ACBF4A6A83F60F477CA4B101FBE9B8EF17C8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7FB140526F0C2D9FCAB4A733DBBE30EAD579F4B1AD1ADCBD1771DE3B16241F0/0/3139312e3130322e34382e302f32312d3231203d3e20323633313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         af:f1:a9:f8:dd:86:e6:45:a3:65:e6:83:9b:b4:22:1a:9d:43:
         c1:ff:a4:21:4a:3a:d7:3c:3c:06:9f:76:32:9d:28:91:11:c7:
         e8:51:ab:c1:d7:67:84:42:98:66:4a:eb:14:ef:eb:0f:56:a8:
         da:bc:0c:4a:40:0c:ae:0e:82:9e:e0:41:a5:28:c1:aa:96:d1:
         2f:b6:38:85:05:7d:25:8c:65:ab:c0:f1:4f:ca:d5:73:49:27:
         32:5d:77:7a:6d:4e:b3:03:b0:bd:04:5d:95:70:02:ca:b6:ba:
         08:c2:68:b5:74:03:ce:f8:18:ba:5f:98:bc:ab:66:ab:35:a6:
         e7:23:2f:2c:90:7b:8d:b8:00:5c:1e:30:ec:9b:5c:30:aa:3a:
         9b:3c:26:ba:81:6e:7b:e1:b8:fa:7b:83:54:62:90:32:d0:6b:
         9a:15:7a:ee:ae:14:d4:ef:23:db:23:fc:4a:fb:ba:ba:ec:b4:
         0a:21:21:47:17:2e:48:39:36:e7:87:29:ba:78:ff:b8:07:74:
         21:62:5b:0f:2a:ad:18:5c:ad:40:4d:a8:3a:f8:ca:3f:57:f2:
         78:72:23:1c:73:69:f6:1e:d2:fa:35:db:b3:b9:cc:aa:dd:cf:
         f9:d9:1c:55:2a:04:18:81:ea:2d:bb:4f:6b:bc:20:a8:20:05:
         c5:98:70:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:29 2026 by rpki-client