This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e32382e302f32322d3234203d3e203532323537.roa
File:                     3138312e3139392e32382e302f32322d3234203d3e203532323537.roa (raw, json)
Hash identifier:          p4YuUfEJL9qal2DlhVikZ9DHa9LuHIO7u9m+L57keVc=
Subject key identifier:   04:ED:95:3D:EF:6E:88:B1:0E:C1:83:9F:06:93:6B:96:C4:4A:3C:C4
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       0B04D81857C66383635E555D84D6289BFD9B4A66
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e32382e302f32322d3234203d3e203532323537.roa
Signing time:             Tue 06 Jan 2026 19:08:40 +0000
ROA not before:           Tue 06 Jan 2026 19:03:40 +0000
ROA not after:            Tue 05 Jan 2027 19:08:40 +0000
asID:                     52257
IP address blocks:        181.199.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 13:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:04:d8:18:57:c6:63:83:63:5e:55:5d:84:d6:28:9b:fd:9b:4a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Jan  6 19:03:40 2026 GMT
            Not After : Jan  5 19:08:40 2027 GMT
        Subject: CN=04ED953DEF6E88B10EC1839F06936B96C44A3CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:1f:1e:ab:4a:06:6b:89:cb:b8:3a:17:cf:
                    b2:e8:d4:79:ef:99:e8:64:b1:18:4e:43:38:99:39:
                    cf:12:d5:5d:b7:d4:28:77:ea:39:c7:5f:34:49:60:
                    a9:6e:5b:9a:ca:d5:e9:8c:32:c5:8c:09:dd:74:d0:
                    e6:e5:d0:9b:17:03:e4:df:6c:f4:80:b0:53:8d:7e:
                    c0:45:31:2b:19:13:9c:43:60:8e:98:af:06:61:7a:
                    82:63:a6:00:a0:2f:16:1b:15:fd:d9:20:f2:59:71:
                    51:7b:07:72:49:a8:73:46:92:3d:86:ba:56:b1:3e:
                    b2:09:94:ac:ad:9f:cf:2f:8f:2a:8f:2e:71:fa:9a:
                    24:fe:2e:1a:b8:df:30:b1:dd:86:99:4c:42:0e:25:
                    51:05:10:ee:f7:f9:87:2e:51:12:19:62:2c:02:dd:
                    de:a3:42:3c:40:39:df:cd:30:b2:50:30:10:98:81:
                    66:26:b1:64:ea:19:a0:74:f2:01:1e:3b:c0:65:8d:
                    c5:b3:c5:6d:20:5a:c6:19:27:3e:45:3d:56:94:f7:
                    43:76:18:e6:91:71:c6:4d:d9:01:d9:ad:70:72:3e:
                    1e:76:17:1a:ce:43:13:f8:da:8c:75:d3:d4:fb:58:
                    57:72:60:9a:c2:48:f5:9e:f4:ca:27:f6:52:d0:6f:
                    a9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:ED:95:3D:EF:6E:88:B1:0E:C1:83:9F:06:93:6B:96:C4:4A:3C:C4
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e32382e302f32322d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:68:40:cd:71:85:80:08:8c:e8:b6:e5:06:38:b1:2c:75:a9:
         b1:e8:e1:df:d1:73:1a:db:35:43:6c:d0:84:7f:ca:9f:7a:ba:
         5a:c4:88:fa:1c:7e:d0:93:63:84:ca:dc:17:b1:88:dd:c8:1d:
         c3:02:73:bc:b3:d8:93:c6:2a:2c:1a:45:aa:12:0f:43:3a:ce:
         b1:1d:0e:69:1a:47:c2:6d:04:38:76:d4:a6:11:08:0d:f7:ac:
         93:7a:e2:eb:eb:12:cd:d4:d2:23:2e:b0:64:3b:28:6f:36:b2:
         b7:8c:4d:cd:78:86:6f:ec:5f:b6:be:d4:ce:d6:99:1c:70:85:
         98:b5:fe:c8:d7:07:bc:c8:c8:ed:86:2b:a5:7f:75:ce:f0:bc:
         fd:96:12:8c:92:70:14:fd:2d:b4:09:95:a6:15:20:3f:04:82:
         a2:1a:cb:f2:72:10:42:8e:7e:ae:ef:63:42:d0:0c:68:16:91:
         dd:47:ad:47:df:58:36:d5:29:f9:ac:c9:e7:ba:cc:26:d7:8c:
         43:ec:82:49:4b:30:30:dd:af:e0:70:79:bf:a3:c1:0f:28:65:
         de:ac:21:87:7e:ca:e0:fd:41:4d:97:5c:47:c3:ab:89:83:66:
         33:6f:ca:25:a0:f1:ba:95:54:ca:a2:25:ad:3b:ce:b1:47:d1:
         fd:67:88:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:43:26 2026 by rpki-client