This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39322e302f32342d3234203d3e203237383435.roa
File:                     3139302e39372e39322e302f32342d3234203d3e203237383435.roa (raw, json)
Hash identifier:          0iGRgd95DgC2RrHPZSC402nKD8IhokV61Vip4nl9eYI=
Subject key identifier:   67:BB:E4:00:AE:A7:76:0D:B8:5F:6A:20:DA:FB:97:E4:15:1D:6C:54
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       41F8EB28E0D0D874D81D3E26762F2606179D3D8D
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39322e302f32342d3234203d3e203237383435.roa
Signing time:             Tue 06 Jan 2026 19:44:07 +0000
ROA not before:           Tue 06 Jan 2026 19:39:07 +0000
ROA not after:            Tue 05 Jan 2027 19:44:07 +0000
asID:                     27845
IP address blocks:        190.97.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f8:eb:28:e0:d0:d8:74:d8:1d:3e:26:76:2f:26:06:17:9d:3d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Jan  6 19:39:07 2026 GMT
            Not After : Jan  5 19:44:07 2027 GMT
        Subject: CN=67BBE400AEA7760DB85F6A20DAFB97E4151D6C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6a:5a:57:a0:6f:89:bf:d2:66:75:d2:d3:51:
                    78:ed:e4:bd:8f:86:38:5b:5d:aa:62:b1:c1:bd:b2:
                    ed:a1:67:be:da:31:2e:68:20:e4:23:1a:07:c3:22:
                    fc:89:19:1f:7b:e0:ae:f5:9d:09:a8:31:e4:b2:46:
                    71:94:5a:9b:d2:78:ea:27:a0:97:a9:ac:37:ae:43:
                    fa:dd:bc:22:92:25:61:bb:f0:5d:1f:f3:45:09:c0:
                    50:5c:59:9f:1c:21:34:8c:a2:26:b1:fc:65:5b:5f:
                    6c:8b:74:ba:7f:a3:50:4f:6e:bc:ba:22:aa:7e:61:
                    6c:03:01:8e:80:41:d0:7d:0b:06:51:4a:28:b8:03:
                    b9:0e:90:34:ca:35:95:4c:3a:8c:e9:7c:5a:69:2d:
                    df:59:83:21:8a:b0:a0:46:7c:03:c8:ad:f1:1c:9b:
                    d9:53:1d:77:d6:28:f3:4c:73:8f:79:bd:6e:3c:9c:
                    41:96:24:7a:ce:5b:05:56:89:81:3c:c4:8b:4f:4f:
                    cc:95:bd:ee:85:5e:a9:1c:5f:01:06:14:33:56:04:
                    fc:60:27:4f:45:11:50:39:95:77:9f:a3:f9:40:89:
                    69:eb:2f:26:2f:ee:08:1c:5f:d2:e7:d0:09:00:a1:
                    99:f4:71:fd:2e:31:90:66:2c:d8:6d:30:e8:ab:a5:
                    2b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BB:E4:00:AE:A7:76:0D:B8:5F:6A:20:DA:FB:97:E4:15:1D:6C:54
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e39322e302f32342d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:6f:ef:6c:17:14:df:6b:df:6a:2b:74:f4:51:9e:aa:6e:c9:
         1c:77:e5:d8:22:82:b4:75:c5:0a:25:9f:dd:65:24:6c:2c:4c:
         fc:99:f4:5c:9a:6e:a7:4e:d6:37:9c:40:cd:c4:14:c7:8e:f5:
         97:3d:60:11:7f:0a:08:03:8c:9b:95:d9:2a:2f:4a:66:ce:e2:
         13:32:d4:b7:bf:c0:7e:49:c1:01:59:fd:5f:aa:8c:91:38:2d:
         c3:c6:06:6c:89:68:1f:3a:c0:af:d1:af:1d:89:81:61:27:bd:
         5a:83:0e:1e:cd:f5:2a:fa:14:64:37:1c:24:c9:0b:d0:27:b6:
         ed:cf:98:08:46:a8:af:f2:73:b8:ab:5f:e1:86:b7:17:bf:92:
         01:05:a7:d0:d5:f8:b8:00:da:2e:f6:78:8c:32:c8:63:00:4b:
         2e:fd:3b:6d:f5:a1:c9:c8:41:9a:e6:48:48:c0:36:bf:1b:88:
         f0:6d:9b:43:ee:a4:d1:17:9b:a3:9e:45:34:ae:65:a2:03:8b:
         33:28:f4:81:8b:05:55:93:b3:c9:1b:5b:b0:a3:c4:77:dd:72:
         1a:7f:b4:cd:52:c4:ce:4b:a2:34:4e:e4:46:25:8b:bd:c9:87:
         72:70:45:63:47:ab:c3:53:7a:37:0f:2a:8c:39:9b:18:ca:52:
         be:15:8e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:42:23 2026 by rpki-client