This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa
File:                     3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa (raw, json)
Hash identifier:          KwMMXVDnSnZWwOB6eENQZx3YV0OgDuzmPA87C8xGzT4=
Subject key identifier:   F1:9E:1A:E8:7F:4B:16:30:6D:94:E4:B4:CF:DD:2F:98:0C:F5:CD:5B
Certificate issuer:       /CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
Certificate serial:       7DC1D568A09F102219128D916D759D6A674A5A72
Authority key identifier: 59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa
Signing time:             Tue 06 Jan 2026 20:54:40 +0000
ROA not before:           Tue 06 Jan 2026 20:49:40 +0000
ROA not after:            Tue 05 Jan 2027 20:54:40 +0000
asID:                     262932
IP address blocks:        191.103.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Feb 2026 14:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c1:d5:68:a0:9f:10:22:19:12:8d:91:6d:75:9d:6a:67:4a:5a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591291A5B3618648A8E1B8E7D3149BC8D25D71BD
        Validity
            Not Before: Jan  6 20:49:40 2026 GMT
            Not After : Jan  5 20:54:40 2027 GMT
        Subject: CN=F19E1AE87F4B16306D94E4B4CFDD2F980CF5CD5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:3d:b9:65:55:fd:e9:67:d6:40:1e:d7:20:
                    c6:d6:6e:81:1c:24:b1:65:f5:9a:79:83:26:99:20:
                    18:62:b2:98:6c:eb:b2:71:e4:1d:3c:bf:2d:4d:9d:
                    ca:39:82:97:5a:1d:e9:0b:3a:d6:2d:c1:15:07:8a:
                    13:44:62:9f:02:16:da:e6:23:7a:78:14:fa:c1:b3:
                    5c:4b:55:92:6e:16:7b:f7:85:68:7a:e2:dd:e0:d5:
                    44:ce:df:9f:a9:e8:a2:15:07:64:13:b9:3f:68:51:
                    41:03:df:50:8f:c5:1e:c2:04:9c:e8:38:e4:74:49:
                    fb:26:b7:d5:99:7a:8b:b2:d8:2c:11:75:a3:e6:10:
                    8e:1f:2e:70:75:53:a3:7a:e9:45:37:0d:d5:5e:4e:
                    00:f4:8f:f7:20:9b:3b:ad:61:0f:c1:05:99:3b:b5:
                    86:6c:b0:5b:c2:24:37:a8:75:4a:aa:fe:8e:fa:74:
                    ab:22:77:77:22:1b:4a:1e:36:53:bb:f3:65:f6:a7:
                    58:1e:7a:83:0a:b5:e8:90:f7:4f:d5:d3:26:3d:f6:
                    a5:51:ea:01:10:e4:fe:ba:43:43:20:ca:0a:71:19:
                    29:b9:59:78:c8:fd:88:95:ac:aa:50:1f:a6:5d:87:
                    20:22:7c:fd:8c:12:11:c2:6d:b1:b3:d4:9a:bf:03:
                    b8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9E:1A:E8:7F:4B:16:30:6D:94:E4:B4:CF:DD:2F:98:0C:F5:CD:5B
            X509v3 Authority Key Identifier:
                keyid:59:12:91:A5:B3:61:86:48:A8:E1:B8:E7:D3:14:9B:C8:D2:5D:71:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/591291A5B3618648A8E1B8E7D3149BC8D25D71BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21BDDA317AA5DF9D576425534068A2B336CEB5CD7B5DCF255EADC3946F3C8250/0/3139312e3130332e39362e302f32302d3234203d3e20323632393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:7b:e0:15:b2:9b:81:0c:a9:89:b6:79:fd:6f:a0:3b:5e:66:
         70:25:76:18:93:1f:4d:15:84:a4:64:5f:5f:67:4f:06:5c:aa:
         0c:f9:50:87:40:f1:a3:2f:df:e2:5a:59:7a:84:c9:7f:14:7c:
         c6:0c:97:f1:ee:d0:0d:1e:56:4b:bc:ea:5f:a1:85:06:d2:01:
         e7:2f:c2:bd:df:3c:69:7c:85:df:40:1b:7c:7d:55:bd:0d:fb:
         75:07:2e:42:68:85:8a:5f:fa:25:d4:d1:40:72:7e:cb:74:79:
         83:29:23:bc:3c:fa:6a:73:92:ec:89:93:94:71:ec:90:9d:c8:
         a5:e8:14:5c:8a:0a:90:bd:9c:9f:e4:a0:d7:fe:2b:6d:c6:b6:
         11:31:67:d3:fc:75:ac:62:ab:e9:b4:32:82:cc:dc:1d:21:9e:
         d4:bd:ff:31:60:3b:f3:f5:76:55:45:f0:64:ca:d6:b5:98:09:
         3c:8d:49:12:31:7a:c0:8a:67:eb:47:bc:f8:28:1f:52:f4:f8:
         b5:cf:15:97:09:cc:d6:1d:6c:b9:95:c0:24:2f:a1:58:b5:1e:
         1b:d7:d6:f2:26:38:7b:02:66:c3:da:ca:a8:1f:33:3c:1c:46:
         a4:64:e0:de:8a:0c:b7:fe:51:11:43:be:fd:2d:cc:51:96:40:
         00:b0:d4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 00:24:55 2026 by rpki-client