This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37382e302f32332d3233203d3e20323633323039.roa
File:                     3139312e39372e37382e302f32332d3233203d3e20323633323039.roa (raw, json)
Hash identifier:          Y0dHaKViS/CADFDk87hTEsuh+v+iUEJeniyInrjy6Xk=
Subject key identifier:   4F:AE:F6:A8:42:2C:23:E1:FE:69:96:39:00:FC:46:D8:48:7D:D5:8C
Certificate issuer:       /CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
Certificate serial:       203198CF693A10B98BDDDCF33986ADD7EF23B7C7
Authority key identifier: 2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37382e302f32332d3233203d3e20323633323039.roa
Signing time:             Tue 06 Jan 2026 19:23:25 +0000
ROA not before:           Tue 06 Jan 2026 19:18:25 +0000
ROA not after:            Tue 05 Jan 2027 19:23:25 +0000
asID:                     263209
IP address blocks:        191.97.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:31:98:cf:69:3a:10:b9:8b:dd:dc:f3:39:86:ad:d7:ef:23:b7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D96E2BA3FE89933F1CF36BB037764F824FED7F0
        Validity
            Not Before: Jan  6 19:18:25 2026 GMT
            Not After : Jan  5 19:23:25 2027 GMT
        Subject: CN=4FAEF6A8422C23E1FE69963900FC46D8487DD58C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:4c:2e:11:20:a4:e1:e9:59:b6:73:97:bd:
                    99:e5:46:c8:16:91:9b:10:71:2d:72:63:76:71:48:
                    9f:d1:83:76:5e:2c:e6:8f:5c:2b:56:8a:73:0d:ab:
                    a3:d4:b9:55:7f:f9:94:04:f2:14:7d:46:81:53:f6:
                    24:a2:ae:87:22:af:99:85:9e:2e:d7:47:37:dd:d2:
                    d0:07:87:09:72:fe:0c:26:8c:62:d0:4e:bc:df:c4:
                    c1:2e:84:14:e6:0c:66:41:1b:9b:66:67:ec:f8:09:
                    86:39:5c:81:03:f2:b9:18:83:d7:c5:a4:86:4c:06:
                    1b:88:03:2b:ba:03:43:ad:74:d1:9c:91:3b:48:85:
                    1c:65:17:b2:ec:7f:28:7e:bd:52:5e:61:d1:e7:76:
                    0a:4f:6c:56:3f:8a:16:06:40:57:7a:74:8d:0a:f0:
                    71:43:e4:24:36:c4:50:d1:29:02:43:1a:c7:17:06:
                    58:de:6d:fd:e8:44:1d:ee:c3:a0:43:e4:67:66:f6:
                    38:e2:30:e5:07:e7:26:e2:af:48:5e:53:01:76:1d:
                    62:0c:6e:3a:a6:d2:62:bd:fb:2e:6a:86:e4:f2:dd:
                    c3:85:b2:06:65:aa:d9:a2:bf:96:c8:80:d8:48:96:
                    7d:58:eb:dd:e1:12:13:12:ac:e6:5a:83:6f:58:6f:
                    31:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AE:F6:A8:42:2C:23:E1:FE:69:96:39:00:FC:46:D8:48:7D:D5:8C
            X509v3 Authority Key Identifier:
                keyid:2D:96:E2:BA:3F:E8:99:33:F1:CF:36:BB:03:77:64:F8:24:FE:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D96E2BA3FE89933F1CF36BB037764F824FED7F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED9C7E865CB1DB939BAD43A2DE4A32D5FC0FBE71CCEB242DCB48964C937AB5C7/0/3139312e39372e37382e302f32332d3233203d3e20323633323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:a9:70:59:a1:38:ba:de:8f:36:f5:b8:0f:c2:00:aa:73:8b:
         25:9d:d6:9a:4e:76:40:1d:f8:66:ff:b2:a2:30:d5:b7:36:23:
         1e:c0:15:40:7e:a2:2b:17:ce:96:46:5c:04:64:8e:bb:1a:3c:
         6f:6a:9a:f8:be:b6:c1:80:5e:48:b4:0f:0f:05:0c:6c:78:6a:
         67:31:23:0f:ba:ce:ef:2d:c4:45:62:c4:2f:61:03:39:35:bb:
         a2:64:c6:31:0b:ed:e8:6f:f9:c5:99:f1:71:26:09:5f:ba:fd:
         9f:ff:b3:f6:eb:b9:9d:d0:d0:d3:b7:f5:ab:46:51:49:31:80:
         63:17:08:51:7b:87:31:91:90:c0:52:8c:e2:0e:73:d8:5a:4b:
         e5:cf:fe:1c:4c:96:45:4a:13:64:8b:00:0c:fb:f6:f3:59:b3:
         08:7b:e2:9b:10:db:d5:83:c9:32:88:8e:22:dd:d4:9d:89:ee:
         64:be:5f:6d:6a:c7:08:bf:f5:e6:03:49:06:8e:8c:64:47:e5:
         45:f2:c1:19:ce:f4:a3:d2:c3:01:77:c2:e3:85:48:4e:a5:7c:
         29:0d:e3:f7:49:62:59:07:fa:38:ec:f0:30:bc:29:9b:4b:e9:
         23:a0:dd:2b:a1:f8:c5:37:51:f8:b0:4f:ad:5c:fb:57:31:4f:
         46:b6:25:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:50:26 2026 by rpki-client