This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/3139312e3130322e31362e302f32302d3234203d3e20323632323539.roa
File:                     3139312e3130322e31362e302f32302d3234203d3e20323632323539.roa (raw, json)
Hash identifier:          1cLz9yD+UXmdR+Tf2Bq6tIJrX29nHkvnVfESIwC6uqY=
Subject key identifier:   A9:8A:46:A8:28:AB:AA:26:F4:21:9E:3E:22:97:68:43:DD:78:99:54
Certificate issuer:       /CN=D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7
Certificate serial:       1444449C046C365281AA9AE72F931607652EEF0E
Authority key identifier: D5:9D:B0:64:EA:8D:7F:EB:CA:F7:A2:12:DA:D3:CC:7D:34:1F:95:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/3139312e3130322e31362e302f32302d3234203d3e20323632323539.roa
Signing time:             Tue 06 Jan 2026 19:04:09 +0000
ROA not before:           Tue 06 Jan 2026 18:59:09 +0000
ROA not after:            Tue 05 Jan 2027 19:04:09 +0000
asID:                     262259
IP address blocks:        191.102.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:44:44:9c:04:6c:36:52:81:aa:9a:e7:2f:93:16:07:65:2e:ef:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7
        Validity
            Not Before: Jan  6 18:59:09 2026 GMT
            Not After : Jan  5 19:04:09 2027 GMT
        Subject: CN=A98A46A828ABAA26F4219E3E22976843DD789954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:9a:eb:0a:08:37:1b:bd:b5:80:c0:66:ea:
                    04:44:4c:a1:9c:a8:f4:93:75:76:91:42:e3:b6:dc:
                    cc:8b:1e:73:e6:63:b0:87:5d:5e:dc:91:16:76:f2:
                    a5:a4:a6:26:57:a6:df:81:55:97:98:e6:68:de:af:
                    57:31:85:a4:3f:c1:a7:01:89:90:52:2e:59:7d:ad:
                    b9:61:13:4c:f1:5f:e9:67:d1:d7:fd:dc:b6:aa:f6:
                    c0:9e:ef:f5:6e:52:3f:3f:db:81:d2:35:9a:c2:cb:
                    ad:4e:d2:06:bf:78:09:b0:2c:4d:55:73:8c:e4:db:
                    30:4a:4d:ab:29:86:a4:93:3d:41:a7:d6:23:3f:a2:
                    31:26:fe:2b:71:e3:dd:a7:32:41:16:03:74:24:36:
                    b4:75:14:e3:25:60:9f:49:de:d6:09:b5:b8:0f:de:
                    7a:66:64:22:7b:f0:b5:e6:91:1f:09:e6:bb:23:d0:
                    4b:e7:db:de:d1:f7:44:49:59:74:b5:8c:69:ba:d3:
                    5c:11:09:c4:15:d2:87:2e:2c:a8:90:e9:33:d4:09:
                    37:a4:c9:64:97:2f:4b:3a:cf:0e:49:8b:c7:c8:67:
                    1c:7e:4a:e7:b4:aa:09:4d:d9:5e:79:b0:7d:6e:47:
                    f4:74:82:8d:d1:8c:fa:58:11:60:93:a2:60:2b:90:
                    70:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8A:46:A8:28:AB:AA:26:F4:21:9E:3E:22:97:68:43:DD:78:99:54
            X509v3 Authority Key Identifier:
                keyid:D5:9D:B0:64:EA:8D:7F:EB:CA:F7:A2:12:DA:D3:CC:7D:34:1F:95:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D59DB064EA8D7FEBCAF7A212DAD3CC7D341F95B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EFC34274A3F89B390895198A56DEB5CF1A0BD26AC03C428A0593134D1010197/0/3139312e3130322e31362e302f32302d3234203d3e20323632323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:6b:11:4f:bc:90:6b:79:cd:03:01:38:f6:42:d8:50:cb:62:
         f2:15:b9:63:34:c0:cf:b9:99:fd:b3:08:c2:f1:6e:ed:27:60:
         c6:44:36:3a:b1:f6:97:0f:04:f7:76:d0:ec:47:84:48:71:6c:
         ad:21:e0:39:8f:a7:f3:bf:61:53:44:a7:ed:61:9b:d7:9d:d3:
         be:f5:7a:f8:51:2d:51:b4:e0:79:56:1c:28:ed:be:a0:7d:e8:
         e2:07:b1:12:a2:4c:68:c0:af:81:d7:50:1b:cb:1d:ba:8d:fb:
         d3:25:62:46:80:a4:e5:a8:2e:da:91:98:81:19:cd:f7:05:60:
         a8:5b:8a:76:36:ab:a7:a8:ce:31:43:75:f4:ef:65:0e:67:45:
         ab:bc:e8:88:04:5b:fa:05:c8:3a:2f:cd:c8:31:cf:df:7f:d8:
         bd:df:04:14:63:6a:5c:ff:23:ff:87:68:c9:1d:53:39:85:4e:
         d6:6e:23:79:6b:41:fa:d5:6f:0e:9f:7a:43:29:8c:0c:64:05:
         37:75:24:90:6e:48:8b:9d:4d:e2:cc:89:13:36:94:46:81:85:
         7d:b0:ce:36:d5:a4:a4:c2:1c:9b:4c:d5:1e:c9:b1:38:b9:5b:
         7d:1d:c3:2b:4d:e0:76:c7:1a:43:84:0a:41:e4:53:d7:72:7d:
         17:72:3f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:52:33 2026 by rpki-client