This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37362e302f32322d3234203d3e203233333833.roa
File:                     3139312e3130332e37362e302f32322d3234203d3e203233333833.roa (raw, json)
Hash identifier:          qiIhxBUTMvmP9iJ2o2HD7kNaO9BXYrQer0YNFqled1k=
Subject key identifier:   5F:C2:6F:A0:6D:B0:81:88:0C:EA:49:23:9B:7D:7E:AE:FC:3B:0D:91
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       29A96EEFA99BE03362CA24946615F4B1A51EE9A7
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37362e302f32322d3234203d3e203233333833.roa
Signing time:             Tue 06 Jan 2026 19:19:37 +0000
ROA not before:           Tue 06 Jan 2026 19:14:37 +0000
ROA not after:            Tue 05 Jan 2027 19:19:37 +0000
asID:                     23383
IP address blocks:        191.103.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a9:6e:ef:a9:9b:e0:33:62:ca:24:94:66:15:f4:b1:a5:1e:e9:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Jan  6 19:14:37 2026 GMT
            Not After : Jan  5 19:19:37 2027 GMT
        Subject: CN=5FC26FA06DB081880CEA49239B7D7EAEFC3B0D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:44:d4:6b:f9:d4:e9:79:b4:9b:00:54:65:d6:
                    a7:4f:b2:3f:b2:1d:3f:50:ac:cd:fd:38:d4:53:dd:
                    4d:77:e8:af:48:65:d0:5a:e5:0b:5a:87:3b:09:e6:
                    55:ae:90:eb:59:c1:81:88:92:19:d5:6a:31:8a:27:
                    0b:ee:86:62:96:fe:d7:ce:a3:53:aa:e8:46:82:01:
                    5e:4d:d2:9d:d4:56:80:9d:9e:d9:1f:26:93:4d:22:
                    8c:77:d9:a9:de:f7:ef:3b:4f:0a:75:dd:b0:3b:74:
                    3f:71:3f:08:8d:bd:b8:47:eb:41:e9:6f:bc:fd:4f:
                    75:62:48:03:31:9b:9b:2d:95:29:34:ef:d4:95:67:
                    1a:6d:14:b2:d9:a3:ff:00:2a:f9:c8:e4:d7:56:e7:
                    f4:4e:58:0a:e7:de:5d:1d:15:85:f4:bd:8e:3e:a2:
                    49:1d:8c:bf:ee:7f:26:8a:28:f3:13:b2:4d:58:d6:
                    3d:31:f9:01:e2:2a:e5:8c:cd:86:01:df:04:bb:04:
                    38:d7:85:dd:85:6c:0c:3e:fa:0c:bf:8c:83:87:df:
                    c3:80:08:9f:8a:63:80:b8:55:ff:05:27:89:2e:15:
                    b6:b5:69:01:af:f9:7b:b2:8a:12:df:c4:e1:35:d3:
                    6a:20:ba:10:6c:35:e7:49:b0:9f:62:91:8e:d4:37:
                    f7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C2:6F:A0:6D:B0:81:88:0C:EA:49:23:9B:7D:7E:AE:FC:3B:0D:91
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37362e302f32322d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:ef:c9:c1:d8:bc:64:2e:6f:a1:e6:a8:1e:7b:b7:02:05:3e:
         f6:2e:9e:a9:67:a9:15:54:37:6c:fc:db:a3:7c:ce:d2:4d:fb:
         60:8e:0c:99:b6:22:a9:66:c2:64:68:10:fb:95:96:40:36:e7:
         f9:96:4e:16:d3:89:da:76:04:a5:8f:1d:22:8f:12:fb:83:60:
         8c:6b:2b:d1:48:b7:e6:11:af:f5:81:06:e4:0d:96:55:5a:39:
         ab:fc:84:39:c6:d4:f7:21:01:12:be:57:b8:cc:96:fb:2c:ac:
         83:0f:bd:df:a4:a4:17:9a:f3:ac:c4:e0:01:d7:3c:76:30:f2:
         7b:d5:8a:e6:af:68:f4:56:a7:36:d0:1b:d7:a6:65:0c:8f:d8:
         d9:f4:d5:6e:4f:8a:4d:c4:48:8e:f1:3e:9f:70:da:cd:8f:b5:
         c3:57:45:b3:21:61:93:a1:20:5d:66:a3:12:b8:7c:65:9f:9a:
         dd:fc:bc:ba:72:7c:dd:b1:94:47:50:d4:97:1e:81:e5:cb:6b:
         00:38:c3:bc:50:cf:23:a6:c7:d8:64:da:b4:a4:0a:aa:02:b7:
         76:20:2b:fa:4f:4a:f7:09:db:60:a8:0c:33:c5:83:26:ca:d5:
         48:87:13:14:73:c1:b7:ed:b4:fd:b6:d7:22:a5:18:71:8b:4c:
         8b:ba:7a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:54:03 2026 by rpki-client