This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/3139322e3130302e3139382e302f32342d3234203d3e203631343638.roa
File:                     3139322e3130302e3139382e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          V9Rgzz2pBWzVJUpHkhNIJo7Gd2B2zj+xNCB8LTsKWtw=
Subject key identifier:   1C:B3:2F:71:84:B8:E0:49:F1:C6:B6:1D:B0:A1:F5:2B:3F:4E:31:DE
Certificate issuer:       /CN=B59FE64A7A5CEC130FFE578645806708FE6955A2
Certificate serial:       73B4403FD6E3F6B7EBB8B9A28B832C267C82DDF6
Authority key identifier: B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/3139322e3130302e3139382e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 06 Jan 2026 19:22:00 +0000
ROA not before:           Tue 06 Jan 2026 19:17:00 +0000
ROA not after:            Tue 05 Jan 2027 19:22:00 +0000
asID:                     61468
IP address blocks:        192.100.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 16:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b4:40:3f:d6:e3:f6:b7:eb:b8:b9:a2:8b:83:2c:26:7c:82:dd:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B59FE64A7A5CEC130FFE578645806708FE6955A2
        Validity
            Not Before: Jan  6 19:17:00 2026 GMT
            Not After : Jan  5 19:22:00 2027 GMT
        Subject: CN=1CB32F7184B8E049F1C6B61DB0A1F52B3F4E31DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d9:64:42:aa:aa:17:96:db:e3:68:4a:ae:97:
                    cb:6f:22:3e:f5:ed:fc:b4:98:6f:36:a5:2d:0b:d4:
                    a3:83:d3:67:eb:df:6d:ce:02:c7:eb:47:ee:3a:d3:
                    a4:84:fc:7e:a4:26:16:46:f1:35:51:2e:fa:7c:6c:
                    78:67:03:71:cc:1e:a9:1a:e2:bc:f7:ad:bc:ee:ba:
                    ac:cb:55:b2:70:15:32:2a:6f:a2:97:f6:42:68:d9:
                    93:23:19:14:51:64:11:27:a4:62:c8:6b:70:26:44:
                    80:c7:82:d6:da:4f:20:cc:b5:ca:3d:c0:c0:9d:f2:
                    2d:18:f7:13:dc:4f:78:0f:b3:06:76:8e:45:3d:c2:
                    69:36:75:78:d8:69:4b:d2:c7:48:c1:57:03:64:3e:
                    08:01:c8:7a:5f:4f:6c:ec:ab:0a:85:e5:51:96:0b:
                    d9:93:bf:10:69:1d:48:ec:5d:09:ff:bd:84:32:76:
                    ec:5a:e2:e0:f1:dd:e9:23:fe:04:b0:b5:a9:1b:c1:
                    33:8d:b4:a9:91:b1:34:6c:41:32:21:ee:86:2d:ef:
                    6c:ed:97:32:f6:ee:c8:37:59:90:74:07:fe:8e:34:
                    f1:a5:fa:fc:37:4f:8b:11:d0:fd:15:7f:11:bf:71:
                    cd:ce:1d:27:4c:e1:4a:ff:da:95:5b:35:79:68:3e:
                    38:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B3:2F:71:84:B8:E0:49:F1:C6:B6:1D:B0:A1:F5:2B:3F:4E:31:DE
            X509v3 Authority Key Identifier:
                keyid:B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/3139322e3130302e3139382e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:9c:bd:b8:4f:6d:ef:6f:21:4c:0e:b3:ae:20:c0:aa:04:0d:
         54:95:7a:26:af:2d:0b:b8:60:6b:5c:3d:7a:5b:ec:04:fb:4e:
         2a:59:dd:45:f6:2a:06:2c:fa:6d:ae:63:a5:31:76:96:77:74:
         c6:b6:38:e5:15:2d:72:ef:41:c5:ab:99:29:50:6b:29:a0:e8:
         a9:79:3b:cc:ff:78:b4:1f:a9:fd:0a:50:73:af:ce:b8:2c:6f:
         d6:1a:c4:c5:92:49:e1:85:fd:f3:c3:ea:da:55:32:1b:4c:61:
         71:cb:e8:ce:1a:c5:15:f2:5b:21:9f:98:24:07:0d:28:39:4a:
         98:00:7b:a5:e8:bf:2b:57:5f:3c:1b:08:6a:80:db:93:c4:9b:
         75:d9:22:ed:b4:c6:85:a2:54:55:26:31:5e:f8:a3:47:04:40:
         b3:d8:82:2e:2d:04:32:b7:e1:0a:f5:ee:33:df:27:90:11:cc:
         50:2c:05:fc:39:01:ca:93:cd:87:1c:c5:96:47:10:b2:43:c4:
         2a:7f:85:11:1d:b5:79:bb:a2:f2:8f:27:10:4c:be:00:cb:06:
         c4:c5:c8:96:9c:f3:44:02:e3:45:4b:9e:7e:07:fc:fa:aa:6e:
         6c:60:2f:f5:60:92:75:71:95:52:0c:a8:f3:2e:83:11:53:65:
         17:24:f3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:26:21 2026 by rpki-client