This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37302e302f32332d3233203d3e20323633323039.roa
File:                     3139312e39372e37302e302f32332d3233203d3e20323633323039.roa (raw, json)
Hash identifier:          rQd3kk1Ib+Yibx0wltvnk5XUHtPK92c3e30Rlv1x7cs=
Subject key identifier:   03:95:9E:35:E9:E4:5A:0D:AA:80:49:57:F1:54:A8:1F:8F:20:DE:AE
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       7A8E800B0EDE28AB821C675D098BAB59A0AEA586
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37302e302f32332d3233203d3e20323633323039.roa
Signing time:             Tue 06 Jan 2026 19:23:26 +0000
ROA not before:           Tue 06 Jan 2026 19:18:26 +0000
ROA not after:            Tue 05 Jan 2027 19:23:26 +0000
asID:                     263209
IP address blocks:        191.97.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8e:80:0b:0e:de:28:ab:82:1c:67:5d:09:8b:ab:59:a0:ae:a5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Jan  6 19:18:26 2026 GMT
            Not After : Jan  5 19:23:26 2027 GMT
        Subject: CN=03959E35E9E45A0DAA804957F154A81F8F20DEAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:95:f4:c2:84:db:de:1a:98:66:56:a3:06:
                    86:19:35:e6:a2:45:d0:31:67:55:49:05:45:e0:37:
                    b0:4a:6e:51:5e:86:07:31:b0:8b:0d:c4:f7:f0:1f:
                    60:2b:93:b4:66:68:29:ca:71:71:ee:cc:64:83:9a:
                    14:b4:98:c5:1e:dc:c5:8a:be:59:e2:de:d2:ee:bf:
                    54:a7:3a:f1:56:1f:95:32:56:65:4f:05:55:b6:d5:
                    94:6f:97:50:0a:cc:b0:ae:2a:a6:d8:d4:4e:6f:ea:
                    ac:3a:9c:50:fd:c1:68:b3:e7:6f:a5:fe:9f:64:8b:
                    92:89:ed:9e:2a:d4:6d:48:11:16:9f:19:9a:6d:dd:
                    e3:59:78:5b:42:fd:f0:34:34:00:04:e1:d5:35:63:
                    09:1d:84:80:83:6e:c4:ff:bc:1d:87:01:b4:f6:b3:
                    73:65:aa:18:1b:94:34:1a:aa:3e:bb:4f:0b:03:0e:
                    ea:8e:eb:24:52:40:99:3b:c1:0e:0d:c7:bc:b3:56:
                    ad:ab:26:55:f4:31:1c:3b:08:27:18:f0:76:38:cb:
                    63:78:5b:fc:86:2b:62:b2:b5:af:25:07:92:31:02:
                    00:3b:62:6f:01:1b:6b:ad:7d:dc:67:81:4a:2e:3b:
                    75:4d:75:f6:3e:b2:0b:bc:1a:4c:85:19:30:c4:8c:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:95:9E:35:E9:E4:5A:0D:AA:80:49:57:F1:54:A8:1F:8F:20:DE:AE
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37302e302f32332d3233203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:b6:49:44:a1:83:9f:f1:01:bd:21:35:36:3d:2a:19:b5:48:
         ed:56:ac:92:13:51:2e:00:a9:34:07:48:63:6a:58:44:ee:4d:
         71:3e:85:05:e6:bd:82:86:c4:ee:76:36:05:fc:37:4a:9a:b3:
         e8:4d:ea:b8:70:0c:e5:1b:31:0d:f8:5e:ac:84:67:27:2b:79:
         c0:53:89:1d:b8:ee:3a:36:0f:72:43:90:03:0a:0a:ba:f8:5a:
         e3:8d:c7:a2:51:2f:c1:dc:f1:69:fe:e0:46:14:e4:33:c6:27:
         35:54:5c:d6:a3:7d:51:b1:61:b0:2f:03:eb:4a:48:ab:7d:17:
         ab:4b:9e:6a:99:a3:94:6d:6a:69:58:92:ba:8d:cf:35:f6:7e:
         5d:28:e2:7f:5c:0d:0d:41:94:17:50:c3:fd:f6:2f:6e:8d:23:
         d0:36:ac:25:6b:31:de:79:2a:65:91:c7:80:cb:49:06:1f:d1:
         d3:e3:cf:20:4a:f6:df:bb:3d:d0:d1:38:4f:a4:57:1d:e5:6e:
         a6:5a:0c:a1:42:db:49:87:2a:b2:de:a9:20:9a:53:01:ed:23:
         a5:6e:64:7e:0e:77:21:9c:3e:fc:40:46:7d:85:bb:aa:e7:b4:
         bd:f8:14:dc:ee:23:8e:10:be:7f:e2:9f:c4:ac:b0:e9:15:d5:
         9b:45:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:59:47 2026 by rpki-client