This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/3139312e39382e3230382e302f32312d3232203d3e20323633323136.roa
File:                     3139312e39382e3230382e302f32312d3232203d3e20323633323136.roa (raw, json)
Hash identifier:          3J15CEAuRhRKhsAtS5g5tCODOIFgQWzYlB2n2QkCr2Q=
Subject key identifier:   6F:88:37:0B:59:9B:02:95:4D:5F:AC:B7:2C:66:B4:77:11:8E:64:FD
Certificate issuer:       /CN=914DAAD3360CF77A56CDD8191FEEC13F016B05E4
Certificate serial:       013FDEA4AAFCAA4BC30BADAB05147260973A79BE
Authority key identifier: 91:4D:AA:D3:36:0C:F7:7A:56:CD:D8:19:1F:EE:C1:3F:01:6B:05:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/3139312e39382e3230382e302f32312d3232203d3e20323633323136.roa
Signing time:             Tue 06 Jan 2026 19:29:53 +0000
ROA not before:           Tue 06 Jan 2026 19:24:53 +0000
ROA not after:            Tue 05 Jan 2027 19:29:53 +0000
asID:                     263216
IP address blocks:        191.98.208.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 17:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3f:de:a4:aa:fc:aa:4b:c3:0b:ad:ab:05:14:72:60:97:3a:79:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914DAAD3360CF77A56CDD8191FEEC13F016B05E4
        Validity
            Not Before: Jan  6 19:24:53 2026 GMT
            Not After : Jan  5 19:29:53 2027 GMT
        Subject: CN=6F88370B599B02954D5FACB72C66B477118E64FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:8a:16:1c:18:18:f3:d1:46:ca:1f:6e:9c:
                    69:b9:61:d9:16:b8:9b:08:fc:cf:15:e1:bb:fb:fe:
                    fa:14:87:20:ca:2d:60:f1:18:f6:3c:d0:5c:d7:c7:
                    89:8b:a5:60:4b:7b:0e:48:ef:bd:f3:79:7b:4f:69:
                    5d:34:a1:9f:b2:32:0a:0c:ab:b9:b2:ac:72:65:bf:
                    53:2e:e3:75:8b:95:07:a8:95:6b:2b:7c:d9:ac:d9:
                    b5:60:17:60:1f:08:7a:6e:7b:39:cf:4f:c4:27:6b:
                    d6:0f:f8:0c:44:c5:5b:cc:e7:8e:0e:4a:6c:2d:77:
                    b8:0d:95:40:51:e4:1d:93:2f:44:b7:e9:9e:9d:b3:
                    92:f4:37:3d:62:7c:fb:51:a9:15:06:6c:f0:74:f2:
                    0e:f2:0a:8f:0b:b0:ae:69:c6:cf:44:39:85:84:8f:
                    33:bf:ee:57:1b:e0:15:ff:2b:46:02:e7:9b:18:3a:
                    9b:e9:f5:7c:35:f4:7a:ad:64:ed:08:27:f9:d3:6a:
                    5a:50:70:69:c9:ae:9b:74:23:6a:d3:09:a6:9d:95:
                    0b:5d:66:33:86:94:da:9e:a5:f8:30:99:6b:d4:c0:
                    6c:a2:c8:9e:43:a6:0a:eb:fd:b5:bc:e3:c2:6d:fe:
                    ad:1c:e5:3c:11:74:93:65:6d:cf:45:d9:d0:b2:9e:
                    55:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:88:37:0B:59:9B:02:95:4D:5F:AC:B7:2C:66:B4:77:11:8E:64:FD
            X509v3 Authority Key Identifier:
                keyid:91:4D:AA:D3:36:0C:F7:7A:56:CD:D8:19:1F:EE:C1:3F:01:6B:05:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/914DAAD3360CF77A56CDD8191FEEC13F016B05E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7694973A8F8301CBEBA474BD45AE1C1D959E8228F46D38DAB1C5F82806F94CAF/0/3139312e39382e3230382e302f32312d3232203d3e20323633323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a8:6d:67:2b:d7:1d:59:bf:96:0c:46:7d:7a:01:2c:80:82:fe:
         80:f8:e6:20:6c:3d:6d:09:41:1a:cd:a7:c5:be:82:e5:eb:6a:
         8a:97:05:a9:fb:9d:51:b5:f7:3e:3e:c5:78:61:08:a6:ce:9c:
         3b:66:6e:ea:a8:41:27:cc:a0:79:6c:56:6a:72:52:fb:a2:27:
         df:fe:6d:d8:3d:b9:57:11:1c:5d:68:75:a3:a5:e4:a5:37:2b:
         50:8a:d0:01:eb:68:98:92:08:57:91:de:45:23:83:ac:7d:df:
         a5:da:3c:3b:b0:eb:aa:0e:46:04:bf:28:66:01:18:97:27:cb:
         b8:d2:58:58:e7:d6:6e:e4:6f:9f:a0:a2:05:a6:f1:0b:2b:73:
         b2:a2:44:e0:5c:f3:2a:94:de:06:b7:fe:73:bd:89:3b:af:88:
         9e:59:e8:28:43:2b:57:1b:53:bf:8d:84:ed:b3:a7:b6:73:d9:
         fb:4e:ea:78:88:9f:c7:ec:09:76:8b:ed:77:8e:fd:94:af:e4:
         d8:00:42:c3:4e:a5:1c:24:1d:cf:37:b5:06:1c:c0:9c:ab:bb:
         79:c5:ab:48:3f:47:c7:51:d9:6f:8b:57:e8:cf:bf:85:bb:4a:
         24:77:43:97:59:73:e1:0d:59:6e:bc:a2:37:31:f0:88:3b:2c:
         99:4c:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:35:06 2026 by rpki-client