This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3136312e302e3139322e302f31392d3139203d3e203230323939.roa
File:                     3136312e302e3139322e302f31392d3139203d3e203230323939.roa (raw, json)
Hash identifier:          SW9pZH6hkJe+1q+jmM0AXuqUunT1dUA35dQ3JGBDs8E=
Subject key identifier:   EE:86:ED:28:1C:C6:E5:6B:84:CD:7B:48:D3:AF:DC:91:D2:C5:77:27
Certificate issuer:       /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial:       094DFA2AEC5C26CEE219D12BA58D060403C7C16F
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3136312e302e3139322e302f31392d3139203d3e203230323939.roa
Signing time:             Tue 06 Jan 2026 19:41:38 +0000
ROA not before:           Tue 06 Jan 2026 19:36:38 +0000
ROA not after:            Tue 05 Jan 2027 19:41:38 +0000
asID:                     20299
IP address blocks:        161.0.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 07:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4d:fa:2a:ec:5c:26:ce:e2:19:d1:2b:a5:8d:06:04:03:c7:c1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
        Validity
            Not Before: Jan  6 19:36:38 2026 GMT
            Not After : Jan  5 19:41:38 2027 GMT
        Subject: CN=EE86ED281CC6E56B84CD7B48D3AFDC91D2C57727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a6:5d:50:d8:ef:02:80:e4:58:17:c9:a7:e6:
                    ca:5a:5c:20:3f:ce:1e:78:95:65:64:73:5f:7d:65:
                    3c:0e:45:0c:64:b8:b2:7c:f6:96:66:8c:ea:04:84:
                    38:c9:12:a8:df:9a:f4:fc:ee:a7:fb:40:a8:81:e1:
                    cb:72:b7:36:bd:e7:47:6f:8f:20:f1:9a:04:48:7d:
                    d5:c4:0d:86:f8:62:af:a2:2a:32:df:22:20:29:da:
                    67:cb:aa:05:cb:77:78:08:f6:ed:15:73:61:a8:d9:
                    b7:82:29:be:36:30:37:cf:ef:d7:45:fd:1a:6a:0d:
                    18:4c:2e:7c:b1:90:e4:ae:58:49:c7:86:7a:81:b5:
                    24:56:38:68:be:d8:d5:71:86:78:62:06:e9:51:68:
                    63:49:20:7e:76:41:79:90:38:d2:ec:42:b9:df:09:
                    51:2a:23:60:87:d5:fd:ea:0c:7c:13:ea:29:78:d8:
                    c3:7a:f9:15:d7:87:5c:20:d1:c2:b6:ff:99:c9:83:
                    c7:28:a0:97:68:e9:ca:f7:34:c5:3f:b4:83:84:fb:
                    0e:4b:57:7c:f1:39:b0:a9:ab:69:94:a9:ea:df:7d:
                    70:0c:16:58:e9:b9:a6:5b:b3:96:a5:97:50:9d:da:
                    7c:39:46:41:f6:57:ef:1e:9a:a1:a8:93:22:76:b2:
                    0a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:86:ED:28:1C:C6:E5:6B:84:CD:7B:48:D3:AF:DC:91:D2:C5:77:27
            X509v3 Authority Key Identifier:
                keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3136312e302e3139322e302f31392d3139203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         50:73:40:3c:55:c7:ea:31:7c:bd:3e:f7:7b:54:cd:e8:0a:1a:
         47:85:e3:5a:a5:ff:77:6d:9d:76:e1:97:19:6c:80:8c:73:b2:
         ac:e0:3b:44:5d:37:b4:fa:5f:7d:3e:db:93:4e:c1:56:21:a5:
         ba:7d:b0:2c:bc:71:38:b4:3b:54:76:dc:7a:48:a3:ef:14:4a:
         69:d4:f1:e1:51:92:05:0b:92:2c:58:65:33:52:6c:16:86:3c:
         09:8b:d0:df:c3:bd:1b:3e:de:b3:20:9a:8b:e7:02:67:a1:79:
         0a:a8:06:b0:bf:da:3a:84:97:7a:dd:05:5c:1a:ba:42:51:01:
         cd:08:27:ff:bf:29:a1:c9:59:d9:04:a1:c7:5b:00:70:39:25:
         2a:ed:cb:ec:e7:c2:9e:ef:d7:e5:3a:8d:b0:08:98:c3:2e:9f:
         fd:b6:8f:6c:8f:f7:2d:7a:5e:1e:61:09:24:03:9c:30:da:96:
         61:98:de:da:5e:5e:04:5c:24:d8:37:67:bc:ac:ca:59:a3:52:
         f5:99:74:b2:fc:51:95:93:01:d6:86:23:0c:4e:69:83:e5:a2:
         fd:49:33:63:f8:2d:92:29:0f:0f:4e:6a:dd:02:cb:d6:5b:7a:
         e0:c3:d3:a9:79:34:d4:41:5f:b7:76:78:aa:ff:93:c0:93:6c:
         8f:ea:60:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:16:19 2026 by rpki-client