This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32342d3234203d3e20323633323039.roa
File:                     3139312e39372e37362e302f32342d3234203d3e20323633323039.roa (raw, json)
Hash identifier:          33lWmChduuPXvT6DclkhiVpnZvx+g5Z+fNIumfa/I+w=
Subject key identifier:   36:BD:55:29:FF:05:38:1B:DD:03:48:A1:AB:7E:1C:8C:23:9A:6A:59
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       02F104400B7F9FEED0D7FBF7100F4C5CE73213CE
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32342d3234203d3e20323633323039.roa
Signing time:             Tue 06 Jan 2026 19:23:26 +0000
ROA not before:           Tue 06 Jan 2026 19:18:26 +0000
ROA not after:            Tue 05 Jan 2027 19:23:26 +0000
asID:                     263209
IP address blocks:        191.97.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f1:04:40:0b:7f:9f:ee:d0:d7:fb:f7:10:0f:4c:5c:e7:32:13:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Jan  6 19:18:26 2026 GMT
            Not After : Jan  5 19:23:26 2027 GMT
        Subject: CN=36BD5529FF05381BDD0348A1AB7E1C8C239A6A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:60:bd:b8:f3:77:d1:28:27:d2:44:51:31:
                    c1:01:b4:ca:2e:ab:5d:38:d7:b2:6e:8a:b9:c7:a1:
                    13:14:a6:50:d9:6a:e1:cb:b6:cb:d0:45:01:98:2b:
                    29:c9:29:03:0a:48:94:e3:13:23:29:6d:5a:cd:7b:
                    a6:e6:55:55:da:4b:4b:1f:20:18:1b:b8:75:bc:52:
                    6a:13:58:51:6c:05:3d:95:a1:4a:b2:5f:60:52:23:
                    e3:77:e6:ed:1e:e9:55:f9:dc:54:a6:82:10:e0:a7:
                    8a:4c:88:53:1c:b7:31:81:d6:6b:8c:fb:5c:eb:8e:
                    8a:7c:fa:2d:77:f9:8d:16:86:8b:30:ed:b0:5c:89:
                    56:af:a1:79:29:41:69:0a:07:db:98:3a:c1:48:d2:
                    ce:94:be:01:52:33:91:00:8c:f9:c7:84:ff:13:a5:
                    79:65:8b:ca:0d:86:5d:bc:b7:49:72:09:6e:17:8f:
                    76:42:07:cd:cf:e4:7e:d4:60:dc:80:7b:70:de:0c:
                    f4:0b:27:7e:1a:8c:23:79:8c:31:05:42:5b:e3:66:
                    f0:81:13:15:f3:32:cf:98:9b:58:07:2b:10:89:33:
                    f2:d2:91:ff:05:0c:9f:4b:32:23:5c:7d:2b:63:1b:
                    bc:bb:f6:86:32:a7:4a:3b:e9:d1:db:57:43:cf:7e:
                    19:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BD:55:29:FF:05:38:1B:DD:03:48:A1:AB:7E:1C:8C:23:9A:6A:59
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37362e302f32342d3234203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:1a:58:4a:7e:83:be:cf:b0:ec:b2:68:29:4f:91:c2:7c:6c:
         8f:1e:f0:db:52:ef:a6:93:f5:f9:00:18:ed:eb:bb:00:cf:8d:
         bd:10:47:89:67:7b:06:8f:5d:43:01:ca:5c:3e:d2:e3:ac:24:
         f1:63:c2:e3:65:08:ef:44:c7:a0:65:de:0c:9b:52:ff:e0:7a:
         44:4a:be:99:71:07:99:0f:b7:4b:cd:22:39:c5:33:6d:d5:34:
         1e:fe:da:83:5d:44:77:96:7a:90:d9:3f:8f:fe:51:79:12:fa:
         d7:1f:fe:23:bf:54:51:77:84:80:93:7e:1c:a1:ff:96:93:25:
         68:dd:49:68:48:f4:9c:e0:84:10:65:70:22:e9:98:39:e4:c8:
         ab:ff:01:ac:eb:78:f1:f4:0f:23:f1:1e:e6:ca:f1:8c:93:25:
         53:ae:07:41:37:d0:81:85:5e:c0:f1:f7:e9:a7:25:4b:9b:de:
         d3:33:aa:14:2b:28:27:0f:1f:09:84:09:02:f0:fc:04:21:9f:
         e5:15:c4:8e:d3:22:47:4a:81:2e:18:a9:00:e6:00:2a:7c:e1:
         6e:4e:1d:43:fe:4c:33:13:d6:3f:e0:4e:65:5f:07:58:a7:2b:
         0c:33:88:af:58:ef:ed:9d:d8:43:ad:cd:b2:36:0f:07:95:f8:
         f6:d1:c8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:27 2026 by rpki-client