This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC176968FE27504E7AC2477DA615F5986AFA958E99E4F8491E8770238B98DC37/0/3139382e31322e33322e302f32342d3234203d3e203631343532.roa
File:                     3139382e31322e33322e302f32342d3234203d3e203631343532.roa (raw, json)
Hash identifier:          is6lH+wJuPAPhZ6h/+W4VrWzVTIa9s1tGvFYER6TCbA=
Subject key identifier:   81:A7:81:AF:5A:F2:4D:01:D4:34:3C:52:A5:84:5E:9E:30:C0:2D:21
Certificate issuer:       /CN=1D83DD44AE73AE85DC9D93DEF22E94546CDF24B5
Certificate serial:       092C2656941CD026BC08A8C9B8EEFE49D371335D
Authority key identifier: 1D:83:DD:44:AE:73:AE:85:DC:9D:93:DE:F2:2E:94:54:6C:DF:24:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D83DD44AE73AE85DC9D93DEF22E94546CDF24B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC176968FE27504E7AC2477DA615F5986AFA958E99E4F8491E8770238B98DC37/0/3139382e31322e33322e302f32342d3234203d3e203631343532.roa
Signing time:             Wed 14 Jan 2026 19:25:01 +0000
ROA not before:           Wed 14 Jan 2026 19:20:01 +0000
ROA not after:            Wed 13 Jan 2027 19:25:01 +0000
asID:                     61452
IP address blocks:        198.12.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC176968FE27504E7AC2477DA615F5986AFA958E99E4F8491E8770238B98DC37/0/1D83DD44AE73AE85DC9D93DEF22E94546CDF24B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC176968FE27504E7AC2477DA615F5986AFA958E99E4F8491E8770238B98DC37/0/1D83DD44AE73AE85DC9D93DEF22E94546CDF24B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D83DD44AE73AE85DC9D93DEF22E94546CDF24B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 12:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2c:26:56:94:1c:d0:26:bc:08:a8:c9:b8:ee:fe:49:d3:71:33:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D83DD44AE73AE85DC9D93DEF22E94546CDF24B5
        Validity
            Not Before: Jan 14 19:20:01 2026 GMT
            Not After : Jan 13 19:25:01 2027 GMT
        Subject: CN=81A781AF5AF24D01D4343C52A5845E9E30C02D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:3c:ba:93:09:8c:71:35:a9:12:5a:2b:00:
                    13:0f:2a:b5:10:10:02:cc:73:f7:8e:94:01:90:1d:
                    2f:06:fe:12:45:84:49:19:bd:d4:16:f5:29:f7:c4:
                    86:a7:38:dc:b3:bd:55:69:bf:22:a1:08:89:e8:0e:
                    98:22:ec:55:ba:8b:cd:65:f4:06:22:56:31:7b:32:
                    dd:a7:b9:4e:97:0e:d7:71:75:0b:21:4b:32:26:de:
                    0a:57:c1:e0:3e:6b:86:65:84:6d:8d:95:7b:de:99:
                    c9:48:39:20:20:4f:1c:07:ee:79:e7:0e:94:c4:58:
                    59:18:8d:a6:c5:6c:0a:6d:e0:5b:bf:bb:05:30:8b:
                    f1:74:a7:b8:0c:6b:8b:44:cf:bf:58:9f:b5:20:10:
                    84:e8:b5:5b:35:c7:e4:d4:df:8e:14:82:a5:35:db:
                    54:43:03:84:74:c3:21:3e:5b:d0:94:65:08:c9:98:
                    ea:4f:45:9d:ff:3a:30:30:c0:b3:3e:a4:99:63:f7:
                    1b:eb:b9:e8:df:b1:6d:9d:62:77:51:d4:2c:95:77:
                    0b:58:09:c6:50:7d:de:80:3b:46:0c:68:e8:66:7f:
                    5e:6d:d7:f7:88:be:f2:6c:42:76:fa:4d:b1:75:fe:
                    84:ce:4a:e9:60:4b:7a:6e:42:58:46:0d:03:d5:03:
                    1f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A7:81:AF:5A:F2:4D:01:D4:34:3C:52:A5:84:5E:9E:30:C0:2D:21
            X509v3 Authority Key Identifier:
                keyid:1D:83:DD:44:AE:73:AE:85:DC:9D:93:DE:F2:2E:94:54:6C:DF:24:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC176968FE27504E7AC2477DA615F5986AFA958E99E4F8491E8770238B98DC37/0/1D83DD44AE73AE85DC9D93DEF22E94546CDF24B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D83DD44AE73AE85DC9D93DEF22E94546CDF24B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC176968FE27504E7AC2477DA615F5986AFA958E99E4F8491E8770238B98DC37/0/3139382e31322e33322e302f32342d3234203d3e203631343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:57:bf:76:5f:39:6e:8d:a0:67:da:0e:a9:e3:26:d8:ef:06:
         36:3c:34:07:84:8d:82:d5:80:8e:51:49:27:8f:c0:ce:44:b2:
         43:28:2a:9b:ea:e0:5a:18:69:24:43:4b:a9:f3:ca:c7:48:ce:
         9b:df:16:fd:3a:4d:e1:19:8e:ea:3a:af:14:69:2f:4d:a6:11:
         01:2c:20:a3:28:9f:ad:bc:dc:81:08:47:b4:f1:43:1a:4c:65:
         67:2a:dd:e2:5b:7a:8f:db:4f:2e:8b:97:bc:29:b0:84:e3:4c:
         b6:1e:04:91:e8:c5:4c:c6:71:e5:a9:6d:ec:50:c3:b3:eb:c8:
         bb:e1:7f:b0:f9:55:72:0e:83:29:66:53:37:2c:00:f0:a0:d5:
         17:eb:ba:43:f7:e5:e5:c4:67:ca:e8:f1:18:0e:35:ee:de:4c:
         e8:59:46:00:ba:27:68:3a:31:bf:c9:f9:5c:34:28:0b:03:7e:
         fe:1b:08:45:1f:e2:f8:80:ac:08:42:80:b5:02:a5:91:cc:b3:
         76:fc:a9:d2:48:c9:ce:69:99:6d:f6:2b:33:06:a0:cf:d9:2b:
         43:e1:7e:28:c6:36:4b:96:49:af:f2:a9:7e:01:a8:9c:40:c3:
         a6:2f:c0:bb:69:3a:b3:b1:6e:53:fd:3d:b9:1a:71:43:82:f8:
         57:e8:1b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:47:48 2026 by rpki-client