This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e382e302f32342d3234203d3e20323634383336.roa
File:                     3139322e3134312e382e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          vepQQttzP+QV6qI73JXfshUP33EcT/HrkBolF5yE7EY=
Subject key identifier:   85:95:A2:D6:12:9F:B4:C5:EF:66:13:76:86:FB:3C:8C:ED:40:88:22
Certificate issuer:       /CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
Certificate serial:       4996AA489247E7904B5BF62D51532BF27C636CB9
Authority key identifier: FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e382e302f32342d3234203d3e20323634383336.roa
Signing time:             Tue 06 Jan 2026 19:32:19 +0000
ROA not before:           Tue 06 Jan 2026 19:27:19 +0000
ROA not after:            Tue 05 Jan 2027 19:32:19 +0000
asID:                     264836
IP address blocks:        192.141.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 05:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:96:aa:48:92:47:e7:90:4b:5b:f6:2d:51:53:2b:f2:7c:63:6c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
        Validity
            Not Before: Jan  6 19:27:19 2026 GMT
            Not After : Jan  5 19:32:19 2027 GMT
        Subject: CN=8595A2D6129FB4C5EF66137686FB3C8CED408822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f9:56:b0:27:7f:d4:40:a1:bd:d3:42:b1:f2:
                    db:a7:bd:c6:1d:9d:3c:42:73:a2:50:da:bb:e9:02:
                    c3:d2:c0:da:dd:69:2e:cc:0b:b9:80:a1:8b:25:c1:
                    f5:93:ff:dd:ca:2a:3d:6a:1f:bb:94:fa:46:f0:93:
                    38:24:03:81:a4:a9:f4:17:76:86:63:9e:e5:ca:57:
                    fe:d3:f0:b9:21:40:2f:52:54:6d:09:17:94:c6:16:
                    2e:6f:c4:cb:e8:14:b5:77:0f:15:9f:da:10:36:20:
                    ce:81:af:e3:e6:2f:cd:80:c8:c8:78:c8:c2:6c:f8:
                    1c:68:c5:5f:4c:ac:a4:0b:d5:fd:3d:89:a5:a2:f8:
                    ed:e2:cf:19:8e:5f:77:08:05:20:7f:52:15:52:03:
                    16:6b:56:d8:2a:3c:af:ec:80:09:c3:46:82:c4:39:
                    8e:13:0d:4f:74:84:c5:ee:18:6d:52:9d:23:74:46:
                    b8:ce:00:d6:f1:1b:7c:f6:8d:7a:68:fe:8d:75:52:
                    dd:a0:4d:32:cc:59:0f:a3:81:7d:18:67:da:d1:d6:
                    55:43:aa:0b:96:00:42:f5:ab:56:49:5d:9a:39:10:
                    ca:1d:b9:78:dc:54:8c:e7:e4:b6:96:ff:0b:12:ee:
                    2c:6a:e1:08:95:4a:c8:6c:f6:1a:e6:36:3f:80:b7:
                    61:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:95:A2:D6:12:9F:B4:C5:EF:66:13:76:86:FB:3C:8C:ED:40:88:22
            X509v3 Authority Key Identifier:
                keyid:FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e382e302f32342d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:13:8e:2c:e4:43:0a:03:4a:ef:3d:f4:87:9b:f6:80:62:13:
         4d:b9:73:b0:b1:e3:3e:a9:6f:14:9f:b1:66:db:e5:01:35:00:
         c0:b1:1f:09:c6:31:de:ad:14:93:57:f1:5b:4b:98:48:9b:7b:
         f5:f3:a5:09:76:93:7e:d6:61:a7:48:87:07:c2:2a:6d:ff:52:
         c8:fa:ae:28:59:e5:a1:c7:f2:8c:23:7d:44:28:f2:84:e3:73:
         0e:68:c2:26:12:8c:d8:be:58:45:d3:57:36:0b:84:97:e6:18:
         15:a8:14:01:b2:e8:da:de:ba:10:0c:71:28:45:53:b7:09:b3:
         3f:ce:72:a2:a8:44:81:c5:e7:7c:48:ac:ee:82:7e:12:38:60:
         9b:fd:7d:29:7c:3b:ce:63:e1:14:7b:a7:e4:a9:2f:b0:19:66:
         2d:1d:71:57:7c:27:80:ed:17:ab:0e:1a:63:fd:c2:0a:44:17:
         3b:52:eb:30:e7:06:07:2b:39:51:d3:04:c2:ad:db:61:c4:aa:
         c4:64:e8:10:6a:13:30:41:b6:84:3d:3d:95:5a:6b:f6:d1:21:
         ae:41:3f:48:1f:80:b7:9a:1c:87:ae:82:53:78:29:de:99:0b:
         b0:88:b8:6a:5e:30:4b:73:72:6a:70:c6:56:92:7c:dd:1e:7b:
         05:bb:65:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:01:42 2026 by rpki-client