This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/3139322e3138382e34382e302f32342d3234203d3e203631343638.roa
File:                     3139322e3138382e34382e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          oE92DG7Bp55CJRAdd/sGuYjoNINT8qUaniEaqahUPJU=
Subject key identifier:   C7:D8:4F:06:04:D9:1D:A2:3D:E3:15:EE:99:10:53:FD:57:0A:FE:08
Certificate issuer:       /CN=F7B07584D2AD2762D747DA517E182FEBEA108A82
Certificate serial:       17B2C8D5E6962A574466AF8B99D99F01F4D34634
Authority key identifier: F7:B0:75:84:D2:AD:27:62:D7:47:DA:51:7E:18:2F:EB:EA:10:8A:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/3139322e3138382e34382e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 06 Jan 2026 20:50:08 +0000
ROA not before:           Tue 06 Jan 2026 20:45:08 +0000
ROA not after:            Tue 05 Jan 2027 20:50:08 +0000
asID:                     61468
IP address blocks:        192.188.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 10:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b2:c8:d5:e6:96:2a:57:44:66:af:8b:99:d9:9f:01:f4:d3:46:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7B07584D2AD2762D747DA517E182FEBEA108A82
        Validity
            Not Before: Jan  6 20:45:08 2026 GMT
            Not After : Jan  5 20:50:08 2027 GMT
        Subject: CN=C7D84F0604D91DA23DE315EE991053FD570AFE08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:14:15:69:c7:0f:0c:82:88:77:47:da:b4:7e:
                    ea:f9:c9:92:32:91:87:7e:84:39:c8:c4:98:17:86:
                    c2:8c:5d:b6:d4:21:da:77:cc:b3:16:c9:34:4b:cb:
                    fc:b7:5c:f1:8a:a7:b7:a4:86:67:f4:1c:ce:30:62:
                    da:d5:ee:99:b3:a1:c4:1d:64:d2:62:ca:01:d3:9b:
                    a2:e9:ec:d7:fe:60:c4:66:f1:ba:b9:2c:72:78:4e:
                    6a:cb:cd:26:9b:b2:7e:b4:c0:53:6f:f1:5f:c6:eb:
                    5e:56:da:61:a0:ad:79:40:36:d3:94:17:42:8f:fa:
                    8a:15:26:75:c2:a3:cf:9f:5a:4c:72:ec:ab:80:d1:
                    29:76:70:3d:3a:ce:b6:c0:12:27:b1:d0:75:14:b9:
                    91:98:a6:91:9d:04:d7:0e:be:6f:a8:51:c4:ac:0d:
                    26:96:0a:94:11:e7:77:ee:1a:95:f9:4a:eb:3a:aa:
                    83:10:5b:b4:de:60:0d:04:98:e6:f6:45:25:f6:c5:
                    18:76:d9:8d:37:c3:28:48:73:9e:fd:87:66:a1:e7:
                    ea:77:3f:7c:80:85:e1:ea:e9:ee:7e:83:ea:c1:c9:
                    e4:3c:67:85:a2:47:c7:fa:cd:84:0e:10:e7:42:8f:
                    93:1a:02:0d:9d:1f:bd:dc:24:3d:36:33:ea:a4:46:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D8:4F:06:04:D9:1D:A2:3D:E3:15:EE:99:10:53:FD:57:0A:FE:08
            X509v3 Authority Key Identifier:
                keyid:F7:B0:75:84:D2:AD:27:62:D7:47:DA:51:7E:18:2F:EB:EA:10:8A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7B07584D2AD2762D747DA517E182FEBEA108A82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4047BD49BABC5340DE8E957229D5D61BB553D48AB85F3D140C6B9F295007D3BB/0/3139322e3138382e34382e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:bb:18:55:dd:44:0c:ff:fe:c5:11:dd:4b:9c:83:1a:93:1b:
         e8:70:92:60:bf:17:7d:89:c9:70:02:dd:9d:b0:d9:36:99:b9:
         8b:f6:20:be:06:a2:44:3c:19:c6:37:77:24:56:c0:40:f4:73:
         e4:3d:5a:6c:c6:25:20:53:98:e8:fb:02:a0:eb:a9:e7:04:15:
         3c:49:29:9b:ad:e7:7c:c5:2b:81:92:23:a6:18:99:e4:dc:6f:
         ca:00:6b:cf:c9:04:41:19:4f:d7:be:c0:37:5c:7d:31:cc:b2:
         da:3d:0a:90:fd:95:11:17:fb:fc:6f:38:32:21:10:d4:ba:65:
         c1:69:24:42:57:b6:4b:01:09:e5:40:f3:76:77:8b:c9:ce:2a:
         0b:64:fb:4f:85:bc:77:56:60:eb:d7:7d:20:d2:40:ba:30:45:
         ba:03:24:ac:5c:9d:1d:fb:df:ef:c5:1a:e0:03:53:8a:c4:46:
         9c:e6:a4:c5:66:58:cb:24:3f:ef:ea:11:d7:2b:76:e3:07:5e:
         3a:ee:14:34:8f:bf:09:d4:03:33:01:b6:de:21:a8:33:92:91:
         b7:38:a7:c8:19:1f:b6:71:65:bf:ce:bc:91:26:45:f7:63:8a:
         68:30:3f:38:d8:b9:7d:44:2c:b6:02:42:92:63:bf:bc:62:3f:
         18:3a:83:cd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUF7LI1eaWKldEZq+LmdmfAfTTRjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdCMDc1ODREMkFEMjc2MkQ3NDdEQTUxN0UxODJGRUJF
QTEwOEE4MjAeFw0yNjAxMDYyMDQ1MDhaFw0yNzAxMDUyMDUwMDhaMDMxMTAvBgNV
BAMTKEM3RDg0RjA2MDREOTFEQTIzREUzMTVFRTk5MTA1M0ZENTcwQUZFMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpFBVpxw8Mgoh3R9q0fur5yZIy
kYd+hDnIxJgXhsKMXbbUIdp3zLMWyTRLy/y3XPGKp7ekhmf0HM4wYtrV7pmzocQd
ZNJiygHTm6Lp7Nf+YMRm8bq5LHJ4TmrLzSabsn60wFNv8V/G615W2mGgrXlANtOU
F0KP+ooVJnXCo8+fWkxy7KuA0Sl2cD06zrbAEiex0HUUuZGYppGdBNcOvm+oUcSs
DSaWCpQR53fuGpX5Sus6qoMQW7TeYA0EmOb2RSX2xRh22Y03wyhIc579h2ah5+p3
P3yAheHq6e5+g+rByeQ8Z4WiR8f6zYQOEOdCj5MaAg2dH73cJD02M+qkRmPVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUx9hPBgTZHaI94xXumRBT/VcK/ggwHwYDVR0j
BBgwFoAU97B1hNKtJ2LXR9pRfhgv6+oQioIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MDQ3QkQ0OUJBQkM1MzQwREU4RTk1NzIyOUQ1RDYxQkI1
NTNENDhBQjg1RjNEMTQwQzZCOUYyOTUwMDdEM0JCLzAvRjdCMDc1ODREMkFEMjc2
MkQ3NDdEQTUxN0UxODJGRUJFQTEwOEE4Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GN0IwNzU4NEQyQUQyNzYyRDc0
N0RBNTE3RTE4MkZFQkVBMTA4QTgyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDA0N0JENDlCQUJDNTM0MERFOEU5NTcyMjlENUQ2MUJCNTUzRDQ4QUI4
NUYzRDE0MEM2QjlGMjk1MDA3RDNCQi8wLzMxMzkzMjJlMzEzODM4MmUzNDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMC8MDAN
BgkqhkiG9w0BAQsFAAOCAQEAI7sYVd1EDP/+xRHdS5yDGpMb6HCSYL8XfYnJcALd
nbDZNpm5i/YgvgaiRDwZxjd3JFbAQPRz5D1abMYlIFOY6PsCoOup5wQVPEkpm63n
fMUrgZIjphiZ5NxvygBrz8kEQRlP177AN1x9Mcyy2j0KkP2VERf7/G84MiEQ1Lpl
wWkkQle2SwEJ5UDzdneLyc4qC2T7T4W8d1Zg69d9INJAujBFugMkrFydHfvf78Ua
4ANTisRGnOakxWZYyyQ/7+oR1yt24wdeOu4UNI+/CdQDMwG23iGoM5KRtzinyBkf
tnFlv868kSZF92OKaDA/ONi5fUQstgJCkmO/vGI/GDqDzQ==
-----END CERTIFICATE-----
Generated at Mon Jan 12 16:06:52 2026 by rpki-client