This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37312e302f32342d3234203d3e20323633323039.roa
File:                     3139312e39372e37312e302f32342d3234203d3e20323633323039.roa (raw, json)
Hash identifier:          KLLApU8/WFUEzHo/if/OgtwPe/3Ufm5N70EHl3gKQmM=
Subject key identifier:   3D:18:D8:7D:48:B2:D4:E9:49:7B:5D:B2:99:B8:C3:B0:42:3B:84:F7
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       0BF82BD681C55A18D1E3377FC74C4FC54AAC72E2
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37312e302f32342d3234203d3e20323633323039.roa
Signing time:             Tue 06 Jan 2026 19:23:27 +0000
ROA not before:           Tue 06 Jan 2026 19:18:27 +0000
ROA not after:            Tue 05 Jan 2027 19:23:27 +0000
asID:                     263209
IP address blocks:        191.97.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f8:2b:d6:81:c5:5a:18:d1:e3:37:7f:c7:4c:4f:c5:4a:ac:72:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Jan  6 19:18:27 2026 GMT
            Not After : Jan  5 19:23:27 2027 GMT
        Subject: CN=3D18D87D48B2D4E9497B5DB299B8C3B0423B84F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3d:a8:65:3a:7f:9a:60:7b:95:98:02:45:17:
                    b4:e3:d5:cc:c2:22:1f:95:80:87:b0:44:f5:60:58:
                    e6:fd:cd:a2:bc:69:88:2d:e0:3f:9b:f5:0a:fd:7d:
                    92:21:e4:6b:62:48:d9:75:47:70:d2:77:cb:48:02:
                    9e:55:d4:79:0f:93:e8:35:e6:9d:f8:dc:8c:ef:e8:
                    98:69:32:54:47:03:31:a3:39:c9:b7:17:37:7e:6d:
                    3b:0e:7a:c9:39:5c:46:1b:76:9c:fe:49:75:d9:97:
                    1b:8e:66:f4:57:fd:2b:12:6e:7e:8d:85:9a:04:71:
                    3c:3a:78:6b:9f:32:d1:52:b2:d0:81:f7:89:84:17:
                    68:f0:c2:d9:e3:c2:67:ef:31:aa:5e:f6:2c:97:85:
                    e3:f3:a7:14:90:1c:5c:f2:cb:0e:78:5d:b3:5a:fa:
                    52:5d:3e:cf:51:8b:f4:d6:87:d1:da:38:e9:31:99:
                    d0:02:47:f3:08:9b:72:ea:cb:7b:b7:73:8b:36:09:
                    1d:d3:8d:4f:61:02:e4:54:06:a7:89:14:c1:57:54:
                    20:79:17:90:d4:47:9e:1a:5c:62:9a:1b:b0:8f:21:
                    47:bf:a8:56:fd:46:47:67:c3:76:e2:d4:9a:59:39:
                    cf:ee:ac:1e:3f:ad:5a:0a:16:84:b0:33:40:aa:8b:
                    8c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:18:D8:7D:48:B2:D4:E9:49:7B:5D:B2:99:B8:C3:B0:42:3B:84:F7
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37312e302f32342d3234203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:cc:42:4e:71:9d:da:13:42:b9:9e:3b:22:66:c7:5a:7b:0f:
         bb:50:dd:ff:04:30:71:9f:67:6e:1f:09:7b:45:22:74:23:ff:
         b2:4d:97:9f:8c:59:c2:bf:22:f0:17:6d:7f:03:88:6e:cf:6a:
         65:14:ec:36:b5:a8:40:f7:2e:93:84:90:c0:78:3d:d3:cc:93:
         35:da:f2:79:4e:9a:bd:67:c4:33:cc:de:67:fc:06:03:b6:5f:
         69:14:3b:34:76:84:ea:6e:60:8f:15:de:9a:ba:30:39:e9:f5:
         42:a6:f5:08:13:d1:e2:33:27:e1:2a:37:64:ec:fd:63:a6:dd:
         31:09:ca:b9:4e:77:54:79:91:eb:a2:8e:4a:29:cb:3c:fd:43:
         ab:37:d3:a6:07:70:e5:38:d8:23:20:04:4a:e3:b0:5c:30:e9:
         d9:71:23:99:15:50:9d:92:59:13:80:bc:75:6b:86:55:f8:c6:
         51:d6:91:31:5e:e2:ce:f8:06:47:97:44:a0:85:00:95:8b:ef:
         ed:b0:12:31:ae:fc:b4:94:ee:e8:61:1c:1a:ee:a0:8d:5c:8c:
         63:0c:83:3e:e4:e3:65:13:17:fc:ea:d4:5e:74:7b:30:22:9f:
         91:7b:29:51:24:1b:fa:00:b2:05:20:92:c7:ca:b2:c4:6b:f2:
         b5:1a:a1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:54 2026 by rpki-client