This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32332d3233203d3e20323633323039.roa
File:                     3139312e39372e37322e302f32332d3233203d3e20323633323039.roa (raw, json)
Hash identifier:          MB7DYIVyJG/y7Kla68D9Ai4fcoARCK7aGnhu/ZUKSV0=
Subject key identifier:   C4:13:65:E5:83:D6:7A:DC:05:47:A3:4A:7F:B2:F1:0F:13:1A:91:0B
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       70944FA2D08CB6E618CEA37E7505EF14D9300B92
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32332d3233203d3e20323633323039.roa
Signing time:             Tue 06 Jan 2026 19:23:29 +0000
ROA not before:           Tue 06 Jan 2026 19:18:29 +0000
ROA not after:            Tue 05 Jan 2027 19:23:29 +0000
asID:                     263209
IP address blocks:        191.97.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:94:4f:a2:d0:8c:b6:e6:18:ce:a3:7e:75:05:ef:14:d9:30:0b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Jan  6 19:18:29 2026 GMT
            Not After : Jan  5 19:23:29 2027 GMT
        Subject: CN=C41365E583D67ADC0547A34A7FB2F10F131A910B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a9:79:d2:3d:a5:34:0e:66:6e:b4:bf:4a:2e:
                    d1:fe:16:35:09:c3:93:25:e7:ea:13:49:60:61:3e:
                    4f:d3:e4:2e:13:a9:36:b6:de:89:3a:3f:af:d1:db:
                    7b:6b:c8:0d:ea:6a:24:56:c5:6b:1c:c4:50:83:b6:
                    96:5b:c6:38:c7:cc:5a:a3:f7:12:e7:d8:0d:51:15:
                    1f:c0:a7:bb:27:62:00:44:1c:56:d4:9d:5c:dc:40:
                    55:68:f9:3d:7d:b7:b1:53:92:9d:16:38:e7:0b:3b:
                    25:2f:b6:ee:f6:fd:3c:ab:81:a3:7a:5b:e5:d2:b1:
                    e3:cc:92:c3:35:8a:2e:f7:41:7b:db:37:c1:ec:29:
                    f2:6f:2c:85:71:28:9b:b2:57:be:30:d7:20:e9:8d:
                    93:7a:e5:55:0b:35:aa:95:b9:7b:17:47:e1:df:1d:
                    bf:91:b3:47:34:10:d0:e8:be:4c:c1:7c:b9:b7:7d:
                    f8:25:2d:a5:7a:c4:97:4e:13:06:91:e8:d2:18:3b:
                    bc:2e:cd:9c:98:cb:23:fc:13:2a:36:ec:d4:b2:87:
                    b8:67:29:3d:22:fa:15:cd:e7:73:60:23:95:15:ae:
                    f4:55:bb:02:e7:dd:ec:0b:80:e2:d2:72:02:cc:26:
                    f1:64:1c:80:e7:aa:3b:b2:cf:c2:02:45:44:7b:64:
                    9c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:13:65:E5:83:D6:7A:DC:05:47:A3:4A:7F:B2:F1:0F:13:1A:91:0B
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37322e302f32332d3233203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:1e:eb:7b:8f:8d:b4:b8:38:ca:0e:22:f7:2a:26:c7:45:e9:
         59:a1:eb:77:44:c4:af:02:c1:4d:83:ad:cb:4e:d1:11:2d:d1:
         38:b1:c4:e9:8a:4d:c5:94:78:bd:04:0f:f7:18:32:0e:1a:1d:
         93:db:09:42:10:ac:47:bf:7e:9c:b6:08:c1:0f:e2:55:f3:e9:
         12:74:b7:9e:bf:82:ea:85:1f:d7:c5:42:93:c1:b2:e1:2a:5a:
         39:5d:36:57:b5:09:20:58:36:e1:2b:66:70:37:7a:e1:43:2c:
         38:67:bd:00:95:72:b8:99:ec:67:f1:e6:fc:19:14:a6:ee:71:
         97:c7:77:41:61:6e:92:22:2c:b1:ff:a7:90:8f:75:02:29:c0:
         88:7a:98:10:56:2c:38:00:f6:28:3f:12:06:ed:af:df:3a:6b:
         d2:e9:7b:50:55:46:09:b2:4a:f1:fd:76:21:8d:30:b8:71:82:
         bc:4c:75:ce:7d:52:09:3b:10:ea:bb:43:d1:bb:ce:e4:93:74:
         c2:d5:01:66:9d:c3:3e:c2:1b:89:1d:85:e4:8b:d6:ea:e1:00:
         36:62:84:29:e3:50:e1:7b:9f:40:80:0f:3d:94:e1:12:a8:05:
         e0:77:9c:b8:32:15:da:95:70:7d:d8:da:05:6e:be:ad:53:4c:
         bf:41:b7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:36:54 2026 by rpki-client