This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/3139322e3138382e35382e302f32342d3234203d3e203237393437.roa
File:                     3139322e3138382e35382e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          BsX/pztnHADyW9ALPssh/QnwZBVPYT3fGZgXY0sG6k8=
Subject key identifier:   EA:3F:C4:4E:94:A8:59:1F:1D:EB:5A:79:80:12:DB:6F:91:71:69:30
Certificate issuer:       /CN=BB2B2E89891085EE92514B5D91EFE9F59005C933
Certificate serial:       285537161CA84E73E592F38013BEC80F7BA35EC5
Authority key identifier: BB:2B:2E:89:89:10:85:EE:92:51:4B:5D:91:EF:E9:F5:90:05:C9:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/3139322e3138382e35382e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 06 Jan 2026 20:59:05 +0000
ROA not before:           Tue 06 Jan 2026 20:54:05 +0000
ROA not after:            Tue 05 Jan 2027 20:59:05 +0000
asID:                     27947
IP address blocks:        192.188.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 14:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:55:37:16:1c:a8:4e:73:e5:92:f3:80:13:be:c8:0f:7b:a3:5e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB2B2E89891085EE92514B5D91EFE9F59005C933
        Validity
            Not Before: Jan  6 20:54:05 2026 GMT
            Not After : Jan  5 20:59:05 2027 GMT
        Subject: CN=EA3FC44E94A8591F1DEB5A798012DB6F91716930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:52:55:f2:b8:09:66:85:0a:55:eb:05:2c:d0:
                    fa:2b:cb:ee:5a:6f:97:46:1e:28:48:09:66:8b:3c:
                    25:ba:1f:c6:91:f1:cf:cc:da:f9:45:3b:2b:f8:37:
                    48:b4:66:24:f0:8d:5d:b0:ec:71:b3:14:8a:b0:db:
                    5f:79:41:d8:2a:2c:dc:67:36:4d:7c:f6:10:9e:89:
                    23:cb:7d:a8:4f:7e:e6:57:ce:b8:b7:0a:a3:d2:43:
                    2d:dd:bc:54:69:55:56:6d:db:73:94:f3:73:39:e0:
                    7d:6b:8a:45:68:97:47:73:11:3d:58:b9:12:b7:2f:
                    3b:91:49:99:51:88:f8:78:66:b6:25:d2:86:96:39:
                    fa:55:c7:d7:5b:39:e3:94:c8:33:ed:c5:4f:68:86:
                    2f:f9:d1:09:f4:60:97:98:12:8f:30:a7:e3:af:d7:
                    7e:71:d6:6a:d3:d7:f3:f6:34:73:d1:51:9f:66:49:
                    f3:51:d8:ec:af:79:26:18:91:e7:4a:3b:0a:ec:74:
                    52:22:cc:b6:57:f9:d8:1d:61:c5:78:a4:23:25:e5:
                    2b:31:99:bd:15:b5:4e:2c:5a:15:34:17:38:ed:26:
                    66:74:6f:ac:17:e5:ec:02:65:b8:51:95:7a:e4:37:
                    e0:a6:63:2e:25:95:fc:f5:0d:78:bf:62:0a:e2:48:
                    a0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3F:C4:4E:94:A8:59:1F:1D:EB:5A:79:80:12:DB:6F:91:71:69:30
            X509v3 Authority Key Identifier:
                keyid:BB:2B:2E:89:89:10:85:EE:92:51:4B:5D:91:EF:E9:F5:90:05:C9:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/3139322e3138382e35382e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:32:b5:f8:61:8a:ea:9f:65:67:33:31:18:22:1f:f6:39:a7:
         2f:a4:a8:e2:67:9a:81:42:0f:4a:7f:67:93:02:39:c2:52:cd:
         5d:76:01:26:6f:84:0f:64:0b:34:5e:37:8d:b1:2e:90:b8:0c:
         e7:ec:45:e5:c2:78:7e:72:54:f5:09:e0:20:2d:69:5d:c8:bc:
         76:55:50:71:1f:8e:da:0c:41:56:1b:7a:8d:c7:87:ad:e2:c9:
         2b:98:09:ac:6a:0b:2e:f4:c1:f1:79:5a:82:39:5e:e8:11:ec:
         d5:c6:2d:d3:15:49:a5:e6:d3:6b:25:f4:6d:a0:ad:b8:fb:ef:
         33:86:c2:e5:db:3d:d4:0e:6d:02:7b:c1:34:85:e5:76:66:e5:
         47:43:c6:f8:88:11:23:c0:b3:b4:0b:97:45:4d:fd:45:bc:9c:
         f9:25:d0:2e:e0:40:f2:47:c9:f8:c9:53:ac:ce:ac:3d:10:d4:
         7a:3c:a0:c0:c4:88:1c:a4:10:5d:5d:27:b5:68:50:e8:e7:00:
         c5:32:8f:5d:c0:a5:66:4c:bf:f9:4e:71:92:0e:ff:34:1a:8e:
         18:40:cf:41:a2:e3:9c:12:61:00:7e:cd:f1:08:d2:52:89:2d:
         84:9b:3d:90:2f:a0:41:f3:e6:60:35:83:47:10:a8:cb:65:68:
         75:03:85:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:56:13 2026 by rpki-client