This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38372e302f32342d3234203d3e203233333833.roa
File:                     3139312e3130332e38372e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          8uwozfQBRKtLSq1VWTH7IiwY4xf2d/GYr7n8sLPk1Dk=
Subject key identifier:   CD:29:1D:2E:26:EF:56:D4:57:3F:60:5D:92:2F:68:6C:2C:44:27:73
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       6E2D8CD0C80FBF37A6F17B5CACBF15EF9098A2A5
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38372e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 06 Jan 2026 19:19:37 +0000
ROA not before:           Tue 06 Jan 2026 19:14:37 +0000
ROA not after:            Tue 05 Jan 2027 19:19:37 +0000
asID:                     23383
IP address blocks:        191.103.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2d:8c:d0:c8:0f:bf:37:a6:f1:7b:5c:ac:bf:15:ef:90:98:a2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Jan  6 19:14:37 2026 GMT
            Not After : Jan  5 19:19:37 2027 GMT
        Subject: CN=CD291D2E26EF56D4573F605D922F686C2C442773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:f8:5b:d4:6f:84:c7:e1:81:e9:54:c5:f8:
                    cd:99:6e:9e:53:8d:6f:2d:0d:22:cf:64:a3:f2:6d:
                    94:18:7c:ff:35:f2:28:68:b6:44:bc:a8:22:d3:af:
                    3a:1e:a6:3e:5e:4f:56:ea:a8:58:9c:0e:49:3c:1d:
                    ad:f1:84:8f:50:c8:eb:d8:37:1e:35:ce:0b:a8:99:
                    98:dc:10:f5:2d:8c:7b:04:90:70:00:e8:c3:a1:45:
                    72:40:b9:46:18:a0:90:1d:22:2f:cf:f0:29:db:24:
                    92:8b:24:df:7b:61:06:db:ac:6d:4a:96:2f:71:fd:
                    84:19:29:e7:59:1a:1d:aa:0d:ab:b0:cc:9a:49:73:
                    08:ad:cc:ff:ce:a0:a4:14:30:30:42:6d:fa:d8:12:
                    79:47:cf:f8:24:6d:c0:6c:b6:43:83:f8:15:22:56:
                    95:63:bf:bf:c1:9d:b5:cc:3b:fc:9b:2a:36:66:54:
                    92:66:39:3c:bd:d0:61:28:5a:77:00:28:f5:fb:16:
                    21:24:8f:88:5d:56:76:25:76:ed:56:47:51:b2:f9:
                    6a:30:3f:1e:5a:8c:f2:90:d5:6c:d9:53:9d:3f:d7:
                    ba:28:36:b2:cd:93:bc:c6:bd:d7:c8:81:5d:cc:10:
                    08:96:cb:9e:3e:51:d8:bb:13:17:c4:f3:67:ae:88:
                    3b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:29:1D:2E:26:EF:56:D4:57:3F:60:5D:92:2F:68:6C:2C:44:27:73
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38372e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:af:fe:23:f4:1c:c1:52:40:a4:68:09:fe:eb:f3:e4:90:8e:
         01:8f:77:17:56:39:25:37:4e:41:00:fb:13:c4:72:b9:6f:af:
         83:a5:3d:72:e8:da:bc:8d:3c:fb:d9:42:42:14:81:e3:67:a9:
         82:15:00:d5:ab:24:c0:25:53:d0:c4:72:bc:ac:bd:a3:5f:c9:
         57:73:2b:80:af:60:58:17:c4:ad:36:cc:3e:43:c6:94:82:61:
         04:e0:76:a6:6a:1d:a4:c9:f3:9f:7a:ea:59:9d:f2:b7:a9:07:
         49:b4:57:db:f0:2a:d0:54:e6:c2:f8:d1:41:3c:27:f8:36:14:
         5c:95:98:f3:11:c1:b3:ce:10:63:e1:04:99:48:e2:0d:8b:cc:
         3e:95:20:cd:8c:2e:7b:f0:30:2a:7b:27:70:53:f1:bd:9c:ca:
         30:ca:9b:7b:4b:92:2a:4c:af:b0:2c:9a:2e:9a:96:44:35:29:
         ab:c9:48:c2:0b:fa:eb:8c:1d:f2:1e:61:d6:54:e9:d6:79:99:
         bf:aa:7e:87:27:94:1d:47:55:e7:37:2a:17:7f:39:16:10:6e:
         3a:ae:a7:9f:ef:67:99:85:73:42:a4:25:e5:8a:8b:af:12:a9:
         9e:77:ac:be:b5:41:58:15:60:3e:b7:d7:a8:7f:75:e7:45:62:
         05:47:f5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:54:04 2026 by rpki-client