This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37352e302f32342d3234203d3e20323633323039.roa
File:                     3139312e39372e37352e302f32342d3234203d3e20323633323039.roa (raw, json)
Hash identifier:          +Ds1+L1efD4onNzIgbsxWKTNTLBnpbxpzR1+PJi2/f0=
Subject key identifier:   B3:D8:A9:5C:27:6B:77:1E:AD:ED:49:AB:0A:C0:C3:56:0B:DA:64:B4
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       4DB356CED3648EF84D74A93F197646D127F005B3
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37352e302f32342d3234203d3e20323633323039.roa
Signing time:             Tue 06 Jan 2026 19:23:27 +0000
ROA not before:           Tue 06 Jan 2026 19:18:27 +0000
ROA not after:            Tue 05 Jan 2027 19:23:27 +0000
asID:                     263209
IP address blocks:        191.97.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b3:56:ce:d3:64:8e:f8:4d:74:a9:3f:19:76:46:d1:27:f0:05:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Jan  6 19:18:27 2026 GMT
            Not After : Jan  5 19:23:27 2027 GMT
        Subject: CN=B3D8A95C276B771EADED49AB0AC0C3560BDA64B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:68:e2:4f:d2:40:c5:90:06:dd:a7:39:c5:d2:
                    cc:e7:ee:97:35:94:cd:a1:4c:b0:98:06:9e:d5:d4:
                    42:5a:4d:dc:dd:47:95:4b:f7:9a:2c:28:73:76:26:
                    b7:b8:ab:24:c3:58:e4:fe:d6:46:29:82:ae:64:b1:
                    a7:3b:2a:b2:53:dd:98:0c:68:72:63:15:7f:f4:a8:
                    37:36:f5:e7:51:78:8a:63:43:28:6c:7c:c6:0f:6b:
                    1f:75:4b:54:3d:4f:38:31:a4:fd:aa:f9:34:28:af:
                    5e:ba:d8:ac:6b:2a:a0:4e:e7:19:00:2e:9d:80:f4:
                    bd:4a:ad:fa:2d:06:af:a4:24:e5:e5:0a:36:61:ec:
                    db:8e:ae:38:bc:82:4d:44:6e:69:a7:27:a0:fc:0d:
                    2e:d7:d2:ec:c7:83:6e:23:88:9a:08:7f:3a:6c:d0:
                    b9:38:a2:f6:03:be:aa:cb:8c:76:ae:ea:b8:09:bc:
                    47:40:68:79:f9:63:4c:ea:21:30:a6:1f:40:6c:4a:
                    03:e9:0c:de:1a:38:c3:20:cf:af:08:0d:f0:f6:51:
                    d4:e7:55:53:a7:6b:5c:76:6e:2d:6a:ac:d0:57:e6:
                    23:f0:46:43:11:fc:67:a1:87:a7:e2:5e:3a:ca:ee:
                    fd:c9:cf:28:5f:12:8e:2e:50:76:38:b1:7f:b9:fd:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D8:A9:5C:27:6B:77:1E:AD:ED:49:AB:0A:C0:C3:56:0B:DA:64:B4
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37352e302f32342d3234203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:ec:97:da:06:fd:84:17:be:8f:2a:d9:70:44:92:98:3e:5f:
         a6:6d:44:1a:7f:c3:93:a2:77:45:61:50:f4:3c:f2:e8:74:61:
         ec:8f:a3:44:59:cb:75:fa:0f:33:29:8e:ad:b5:7f:03:26:9f:
         1f:33:29:18:6e:18:86:f7:b0:bc:70:23:11:59:83:37:68:ca:
         a3:49:9c:56:c5:21:77:c1:99:ea:f9:f7:0f:e6:d6:61:21:00:
         6d:7b:db:87:e4:6b:81:15:24:00:b5:56:9f:2f:5b:ab:81:6a:
         f1:51:18:cc:b7:df:18:bd:75:fe:05:30:c4:f0:9c:a2:1b:d4:
         85:c5:b9:e9:7d:0b:a1:3d:e0:5a:b3:0b:16:05:72:f3:5e:de:
         fa:93:c8:82:48:a1:ea:8f:21:6d:95:d5:78:76:c0:09:9c:3d:
         5d:2e:d4:25:d8:cf:01:b5:61:bb:d7:28:3b:f3:d7:cd:c4:21:
         eb:9b:5a:b8:37:71:d2:88:5d:6b:42:7f:22:73:34:42:d2:cf:
         f1:6c:f3:18:d6:8d:b9:5f:6f:fa:a2:fd:b2:db:e2:75:4e:46:
         b5:d1:ff:f4:9b:48:4d:1b:9a:dc:ea:ed:25:e0:07:b2:15:63:
         6e:0d:de:e8:54:45:10:7e:5d:53:26:69:53:4a:63:a1:9b:5b:
         f0:59:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:36:47 2026 by rpki-client