This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/3139322e3130302e3230302e302f32342d3234203d3e20323738.roa
File:                     3139322e3130302e3230302e302f32342d3234203d3e20323738.roa (raw, json)
Hash identifier:          8T+0izxLY5TGrwK5NcdZ72uITJaEBuEdaOEOjU8nEFg=
Subject key identifier:   D6:D2:91:3B:0F:4E:14:D0:67:AE:17:45:C1:19:D2:DC:2F:9C:EC:29
Certificate issuer:       /CN=7F34532F322CC805D15BBA71423D1C8F04148FC7
Certificate serial:       5FC7A930A719420E39618244232140F59E083695
Authority key identifier: 7F:34:53:2F:32:2C:C8:05:D1:5B:BA:71:42:3D:1C:8F:04:14:8F:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/3139322e3130302e3230302e302f32342d3234203d3e20323738.roa
Signing time:             Wed 17 Dec 2025 20:55:10 +0000
ROA not before:           Wed 17 Dec 2025 20:50:10 +0000
ROA not after:            Wed 16 Dec 2026 20:55:10 +0000
asID:                     278
IP address blocks:        192.100.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c7:a9:30:a7:19:42:0e:39:61:82:44:23:21:40:f5:9e:08:36:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F34532F322CC805D15BBA71423D1C8F04148FC7
        Validity
            Not Before: Dec 17 20:50:10 2025 GMT
            Not After : Dec 16 20:55:10 2026 GMT
        Subject: CN=D6D2913B0F4E14D067AE1745C119D2DC2F9CEC29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:10:4a:ee:67:6d:50:e3:36:92:2d:1e:40:
                    47:e2:2d:02:9d:82:2c:cb:0b:67:7f:8c:67:92:88:
                    eb:e1:bc:db:49:ea:24:68:5d:88:8b:c8:73:52:d0:
                    68:23:04:6b:35:82:73:25:6a:1e:af:68:ea:e0:2e:
                    bd:b9:a5:61:31:66:2b:68:79:da:ca:6e:ba:2c:85:
                    51:a0:65:fb:f5:38:8c:89:34:b8:32:28:92:64:70:
                    7e:30:e2:53:1c:93:4d:61:c8:47:19:ab:74:49:62:
                    7a:67:3a:69:55:a9:da:50:84:df:94:25:b1:1b:c1:
                    70:47:2c:b4:11:37:85:b8:70:32:c2:8b:21:06:70:
                    a6:a8:95:b6:c2:ac:8f:9e:22:b8:bf:40:7d:dc:53:
                    ff:ad:30:a6:0c:b7:78:bc:62:c3:3a:dd:4d:5d:51:
                    11:e0:55:ad:9e:d6:0d:6d:79:86:92:f5:f3:56:28:
                    5e:d2:b2:bb:eb:d8:96:ca:6e:77:a8:c2:c2:79:92:
                    25:44:83:d2:88:eb:8b:c5:64:9d:e7:64:0b:9c:ac:
                    24:55:7a:9f:2e:bb:ee:4b:1e:0d:62:8f:4d:07:53:
                    fb:bf:60:d8:8c:a5:05:91:14:f7:fa:7d:14:22:9d:
                    3e:e0:65:dc:d7:75:74:4e:26:cc:76:de:5b:3d:b8:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D2:91:3B:0F:4E:14:D0:67:AE:17:45:C1:19:D2:DC:2F:9C:EC:29
            X509v3 Authority Key Identifier:
                keyid:7F:34:53:2F:32:2C:C8:05:D1:5B:BA:71:42:3D:1C:8F:04:14:8F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/3139322e3130302e3230302e302f32342d3234203d3e20323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:d9:58:36:d2:e2:bf:21:04:40:eb:36:61:05:88:25:38:ac:
         84:97:3d:bb:08:65:af:86:7f:90:64:83:b6:69:43:e9:0c:8c:
         d5:35:b8:4a:b2:a2:79:1b:cc:cd:88:f8:f1:4d:bc:40:be:4a:
         ca:72:9b:25:58:3c:22:2a:e2:77:09:a0:a6:6e:9b:1a:d6:51:
         f1:71:35:5f:a9:ab:ab:0d:72:95:cb:23:43:96:8a:22:0b:6c:
         7e:01:1b:14:ad:01:c4:6a:3a:07:50:e2:d3:dd:58:7d:a4:b5:
         02:cc:a2:c3:63:66:1c:8c:ad:b3:66:4b:73:28:33:d8:3e:5e:
         6a:c2:40:9a:17:e3:be:c3:ac:cf:d5:2a:8a:96:28:fe:5a:c2:
         92:31:77:59:bd:5d:82:7f:84:3e:65:5d:e0:70:b5:43:26:32:
         5d:84:51:c3:88:6b:1a:2e:0b:83:18:c1:82:bb:16:ab:07:a8:
         b9:c6:db:f3:08:60:5f:a3:24:2d:af:72:40:4e:e9:c3:f4:08:
         33:9c:be:a9:22:53:a5:89:e7:79:fe:1a:6f:1a:28:57:7d:28:
         b6:e4:8e:dd:ce:1b:e3:76:0c:f9:89:24:2e:ab:5a:60:c7:aa:
         11:98:e1:85:30:47:f2:34:48:88:0c:f9:73:3b:28:04:ae:e9:
         f3:8c:54:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 00:14:33 2026 by rpki-client