This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32322d3234203d3e203430363736.roa
File:                     3139322e3134312e34382e302f32322d3234203d3e203430363736.roa (raw, json)
Hash identifier:          IwU3Ls23mVTmMO25V0Xlbq0lNpoMRklhVLlijmUduus=
Subject key identifier:   33:2B:EF:0C:E7:19:AE:09:1C:A2:12:ED:EE:5B:55:16:6C:23:21:5F
Certificate issuer:       /CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
Certificate serial:       2B0B37A8520D95B7EF3FB515AEFBE80A39BFEA34
Authority key identifier: 9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32322d3234203d3e203430363736.roa
Signing time:             Tue 06 Jan 2026 19:01:53 +0000
ROA not before:           Tue 06 Jan 2026 18:56:53 +0000
ROA not after:            Tue 05 Jan 2027 19:01:53 +0000
asID:                     40676
IP address blocks:        192.141.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 15:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0b:37:a8:52:0d:95:b7:ef:3f:b5:15:ae:fb:e8:0a:39:bf:ea:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
        Validity
            Not Before: Jan  6 18:56:53 2026 GMT
            Not After : Jan  5 19:01:53 2027 GMT
        Subject: CN=332BEF0CE719AE091CA212EDEE5B55166C23215F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:94:dd:b2:50:fc:4c:7e:5a:7b:6b:38:5e:9f:
                    e3:d8:d5:86:cf:5c:05:46:8a:0a:5a:02:e1:7a:61:
                    29:db:77:36:82:45:e9:60:c9:ec:45:42:8e:b7:d8:
                    4b:1f:70:07:27:86:2f:12:56:da:a1:fb:55:d1:78:
                    29:92:3b:f8:68:b5:b3:ab:5a:01:6e:00:a9:5b:7c:
                    af:be:7a:bb:58:33:f1:e1:13:34:61:c7:ff:b4:28:
                    3d:ac:85:26:d9:29:4a:be:ad:b9:d8:d5:61:e6:6d:
                    49:40:94:69:bc:3a:16:f4:05:24:6d:0a:31:e3:5b:
                    bb:41:7d:dc:78:81:0e:c6:73:91:b9:dc:97:31:06:
                    03:8d:8b:71:5b:98:c5:89:78:5f:80:23:b8:31:c2:
                    f9:ae:0e:b9:fe:ba:52:3d:4f:c7:be:42:bb:d3:28:
                    84:2a:47:a8:12:2c:04:e1:80:d0:f0:31:1c:7b:20:
                    ca:7c:19:17:3b:9a:ad:c1:88:c2:20:4c:ee:6a:fe:
                    7c:d3:31:70:12:e2:bd:74:86:28:4d:d8:6e:d0:f0:
                    b4:94:36:ec:36:e9:04:db:82:d5:12:4e:90:7b:2a:
                    ed:b2:45:07:93:97:47:2b:25:99:60:c8:c8:2f:4d:
                    8c:93:97:fb:a9:e4:44:b1:51:51:f5:d2:44:16:14:
                    78:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2B:EF:0C:E7:19:AE:09:1C:A2:12:ED:EE:5B:55:16:6C:23:21:5F
            X509v3 Authority Key Identifier:
                keyid:9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34382e302f32322d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:be:c6:8d:3e:4f:0f:f5:61:c1:16:71:6b:f5:a5:3d:73:67:
         ba:76:89:40:93:6a:2d:05:f7:62:78:da:3c:9c:48:76:05:8d:
         b3:c3:8c:3f:50:95:75:6b:67:a5:9c:dd:86:72:88:21:76:c9:
         fa:df:ef:e0:ad:a3:a2:8c:28:d1:41:eb:f9:83:cd:91:10:70:
         ea:73:23:0d:84:5c:64:e8:05:9a:18:9a:2e:cc:6d:e0:a0:aa:
         cc:65:1d:c4:de:24:bb:59:43:f8:b5:86:ee:41:eb:67:52:cd:
         f2:59:04:a9:4d:b1:c3:18:af:aa:98:d2:34:b5:01:bb:6b:6e:
         71:fc:9b:b7:58:fe:ec:f7:9d:1b:af:7b:c5:20:87:55:d2:e5:
         7c:cc:3c:00:16:19:69:7c:15:3f:40:cc:8b:53:1c:5a:98:4c:
         d4:71:93:13:05:ac:7b:bb:d6:0b:be:ca:e1:bf:ea:cf:69:4e:
         a1:1a:bf:39:e4:90:f3:a6:df:08:d9:11:77:f5:9f:c2:0a:1d:
         2c:fd:de:88:35:0e:af:ea:a2:39:21:0c:64:ac:30:07:64:84:
         33:90:3f:38:54:c3:28:ea:b5:07:16:58:a0:43:33:2a:d4:90:
         c2:32:5e:20:2e:ae:03:df:f3:97:81:51:0e:ea:fa:07:84:45:
         9a:dd:df:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:22:44 2026 by rpki-client