This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32332d3233203d3e20323633323039.roa
File:                     3139312e39372e37362e302f32332d3233203d3e20323633323039.roa (raw, json)
Hash identifier:          eAPFieXLKH58eII7vzputwJOxGrWjV3s7o6crWFGl8w=
Subject key identifier:   09:67:6D:55:6D:2C:6A:E9:23:07:C2:DF:9C:13:61:AE:9B:91:4A:E9
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       5B62303160EE9F02F100C875E79CAD30B386FED5
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32332d3233203d3e20323633323039.roa
Signing time:             Tue 06 Jan 2026 19:23:28 +0000
ROA not before:           Tue 06 Jan 2026 19:18:28 +0000
ROA not after:            Tue 05 Jan 2027 19:23:28 +0000
asID:                     263209
IP address blocks:        191.97.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:62:30:31:60:ee:9f:02:f1:00:c8:75:e7:9c:ad:30:b3:86:fe:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Jan  6 19:18:28 2026 GMT
            Not After : Jan  5 19:23:28 2027 GMT
        Subject: CN=09676D556D2C6AE92307C2DF9C1361AE9B914AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:79:d4:4d:e3:9f:d6:ff:0d:29:ea:70:62:dd:
                    61:9b:b1:d7:91:48:09:d9:57:99:1a:10:7a:ee:06:
                    ef:c5:61:40:fe:e8:d1:7a:fb:b0:bc:94:45:58:a6:
                    1a:9b:14:10:32:39:14:1b:12:df:58:67:7b:4c:cb:
                    87:eb:dc:f4:62:c7:fd:1e:ad:e9:6f:10:cf:66:85:
                    18:e1:a5:c5:b2:f3:c9:9b:e8:82:28:7d:86:a6:9c:
                    fe:0e:4d:ed:8a:eb:79:9f:0b:a2:d2:4a:de:0b:1f:
                    b0:62:83:11:a3:c2:a0:5c:4e:fe:7d:85:1a:b4:4f:
                    11:4e:22:e6:32:a8:6e:e0:3a:66:d2:76:64:7c:f3:
                    8e:09:aa:59:c8:6c:a4:24:c3:f5:fe:07:57:56:83:
                    7e:16:03:37:85:bd:6c:73:6c:ad:91:e7:e1:21:9c:
                    c0:8c:52:8a:7e:7b:3e:5f:fd:a5:60:f3:b4:00:40:
                    03:e4:c5:1a:55:b6:8f:62:a6:90:e6:a1:c4:20:5b:
                    83:4c:a1:f2:36:de:a6:46:ca:e2:4a:60:17:56:bb:
                    39:45:92:ed:f5:e0:72:9e:3c:8d:34:bb:f4:8c:c2:
                    b8:41:9e:ec:73:76:e0:77:ae:89:5c:5d:d9:95:a8:
                    d0:d0:22:20:e6:69:6c:82:0f:f7:03:3f:e8:9a:25:
                    ce:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:67:6D:55:6D:2C:6A:E9:23:07:C2:DF:9C:13:61:AE:9B:91:4A:E9
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32332d3233203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:4f:45:06:92:8b:e4:1c:e6:77:c7:8b:d6:bd:89:8e:f8:a9:
         20:56:98:8e:79:d8:0a:bf:74:19:53:3c:47:2d:a8:5f:f4:72:
         31:ca:88:10:c6:9f:e5:19:f8:39:87:bc:44:ca:c3:86:5d:b4:
         72:82:86:3d:e9:1b:27:bf:b2:05:c6:b6:eb:c5:f2:0f:ce:43:
         47:a9:16:42:ea:f1:a7:0a:b2:2d:70:ce:6f:f2:cb:2c:f3:05:
         22:60:07:87:d9:68:44:8f:2e:78:fb:23:50:ba:95:40:a6:c9:
         34:93:26:16:24:e3:1e:a9:2f:05:db:44:9c:24:c1:34:ec:47:
         ee:1b:87:90:b7:4f:2d:00:bd:23:1b:01:14:63:06:96:46:12:
         02:ca:04:5b:cb:9b:77:76:e2:e3:64:6a:50:a5:b6:0a:48:43:
         92:fe:ce:8a:c0:31:1a:67:6c:99:21:d6:d9:f4:80:ef:82:f3:
         b2:29:9b:3f:a1:cd:15:5b:17:cb:f7:e5:01:94:b9:c6:17:32:
         a9:27:47:4b:01:c1:f6:66:7d:57:77:3a:01:21:13:c1:f8:6b:
         30:4e:b3:55:ba:7a:75:dc:a7:34:99:08:9e:9e:4a:7f:10:f6:
         ec:3f:c2:a0:9f:9a:02:94:e1:65:10:12:a7:3c:0d:ac:9c:5c:
         6a:26:dc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:59 2026 by rpki-client