This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37322e302f32342d3234203d3e203233333833.roa
File:                     3139312e3130332e37322e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          N3delXVg16VS3dp0YAyrvH8BwtOJwOT0qFITgRQoVSA=
Subject key identifier:   9E:91:71:90:9F:84:A9:9C:CB:03:9D:AB:23:EF:25:67:94:2A:31:E4
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       2DDEB04116D526D5DE1FB38D08A9A0BD6D3F7B66
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37322e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 06 Jan 2026 19:19:33 +0000
ROA not before:           Tue 06 Jan 2026 19:14:33 +0000
ROA not after:            Tue 05 Jan 2027 19:19:33 +0000
asID:                     23383
IP address blocks:        191.103.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:de:b0:41:16:d5:26:d5:de:1f:b3:8d:08:a9:a0:bd:6d:3f:7b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Jan  6 19:14:33 2026 GMT
            Not After : Jan  5 19:19:33 2027 GMT
        Subject: CN=9E9171909F84A99CCB039DAB23EF2567942A31E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:35:f9:be:2e:ff:06:06:8d:a6:d8:da:14:07:
                    df:89:5d:bf:61:32:38:d3:2f:33:41:12:a6:6e:5a:
                    84:5c:86:47:14:62:44:7d:e6:24:8e:0f:f7:7a:c0:
                    82:11:01:59:e7:a1:2b:1e:2d:b2:a5:16:ff:ce:7d:
                    47:48:c2:c8:22:ff:65:86:6f:bc:da:1a:70:fa:6f:
                    12:f7:ff:22:f9:0d:db:b6:5c:45:e3:fa:aa:25:04:
                    81:3c:43:e8:ab:e0:58:a1:a0:90:7b:dc:18:48:f2:
                    44:f3:5d:12:e5:31:4b:74:67:9e:f8:0c:09:b9:43:
                    7f:e1:5f:c7:a0:e0:94:6c:ee:94:a4:e8:f3:1e:28:
                    5d:6f:9e:55:5f:1f:e5:8b:fb:e8:02:41:a6:6a:26:
                    f8:2f:c1:f0:ec:04:f1:ea:6d:6c:a4:ae:e0:a2:b9:
                    52:45:11:9d:42:0b:cc:90:5a:fa:b2:7c:eb:f2:b4:
                    c1:ab:4f:d8:db:c5:8c:62:e9:aa:fa:f7:a0:bb:8d:
                    49:8b:e3:ab:52:36:28:78:a3:9e:4b:af:45:de:3c:
                    45:66:cb:a8:30:bb:d3:01:73:59:d0:60:13:40:60:
                    20:f8:21:03:3c:23:2e:bb:26:ef:04:e4:2e:0a:d6:
                    c1:a3:1d:b5:66:ae:59:ba:18:d2:9e:c4:27:79:c2:
                    67:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:91:71:90:9F:84:A9:9C:CB:03:9D:AB:23:EF:25:67:94:2A:31:E4
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37322e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:ab:9f:25:e7:d7:74:ad:f6:c5:3e:55:b2:78:f7:45:0f:c1:
         13:b5:b0:86:7f:74:e2:ec:2f:a8:ad:2e:5b:f0:b9:58:56:39:
         83:1c:cf:61:60:27:4e:63:17:7e:64:e4:25:27:fd:c4:3c:f0:
         ec:5a:60:58:e2:1e:93:ef:69:ee:d7:2d:2c:ec:70:f8:73:ac:
         97:5e:f5:0e:35:27:cc:f6:be:08:cf:96:a1:f9:bb:8e:76:63:
         7f:32:49:e2:66:d4:49:63:89:88:0c:48:06:2d:b4:64:95:ca:
         62:ae:64:f2:1c:88:ab:c5:87:0c:71:7d:28:4d:88:ec:a8:69:
         f2:6c:20:07:a6:25:e2:c2:d3:5a:cb:ab:4a:b2:8f:5a:c1:ab:
         2d:ca:53:56:f7:f2:0b:c2:b8:46:b1:e3:fc:c8:04:63:57:48:
         53:87:d6:fd:5a:5c:f7:9f:5a:ce:7a:13:22:7a:2c:41:64:77:
         96:24:79:1f:ed:4b:0a:a6:1a:4f:d9:dd:e9:db:d1:7b:8c:92:
         49:83:f6:66:50:24:8b:07:6d:6a:f1:86:6b:59:59:ce:ef:ac:
         a5:aa:72:f4:d3:72:8b:9a:96:26:c3:de:eb:fa:6d:81:f0:2c:
         cb:4d:ed:4e:1d:8a:20:09:8e:b8:5a:65:9c:b7:48:72:18:bc:
         86:26:2a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:55:17 2026 by rpki-client