This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3139312e39392e302e302f31362d3234203d3e203237373338.roa
File:                     3139312e39392e302e302f31362d3234203d3e203237373338.roa (raw, json)
Hash identifier:          ab39tEa0Pl2kvK5HpEFKLpxFZqZKVaVguZCc8+GdfFQ=
Subject key identifier:   25:63:89:57:D5:38:A1:C2:E0:DA:B4:DD:1E:52:7C:15:05:33:16:A8
Certificate issuer:       /CN=E63A0B64348E70601DE867C594F34A8BB87EC911
Certificate serial:       02F9D8D25086C6CF3E84D3A0A1DF49622FA2F1DC
Authority key identifier: E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3139312e39392e302e302f31362d3234203d3e203237373338.roa
Signing time:             Tue 06 Jan 2026 19:25:53 +0000
ROA not before:           Tue 06 Jan 2026 19:20:53 +0000
ROA not after:            Tue 05 Jan 2027 19:25:53 +0000
asID:                     27738
IP address blocks:        191.99.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 08:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f9:d8:d2:50:86:c6:cf:3e:84:d3:a0:a1:df:49:62:2f:a2:f1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A0B64348E70601DE867C594F34A8BB87EC911
        Validity
            Not Before: Jan  6 19:20:53 2026 GMT
            Not After : Jan  5 19:25:53 2027 GMT
        Subject: CN=25638957D538A1C2E0DAB4DD1E527C15053316A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:35:f9:80:1d:8e:54:f2:25:22:bb:52:b1:bf:
                    35:ef:96:7c:ae:71:cf:37:a8:79:5b:9b:a1:9c:76:
                    f1:7c:03:e9:9a:14:00:7f:e0:97:19:f1:e3:78:2d:
                    ba:67:83:e5:d3:50:98:a3:60:01:34:0e:c7:03:5e:
                    ce:a9:89:9c:48:25:ff:ad:47:89:09:12:64:35:9e:
                    a1:de:95:fd:25:ad:78:7f:6f:d7:67:c7:d6:5d:c5:
                    b8:df:72:fb:5b:88:d9:53:79:3c:7a:26:1f:3a:b7:
                    a5:61:ec:00:49:d0:4a:4f:dd:78:45:d6:dc:77:99:
                    17:93:a9:2f:5b:a3:cd:14:83:3b:31:51:9d:83:45:
                    08:a7:d5:47:25:7c:66:6b:f5:ed:15:9a:96:5e:11:
                    6a:8a:0f:fc:59:7c:0c:f5:b4:0e:83:63:d4:43:a1:
                    1a:3f:30:1d:8c:e6:20:fd:51:dc:a1:cc:ed:5a:4c:
                    c8:c6:41:87:db:c8:fc:d2:3a:98:e6:62:20:ed:e7:
                    63:85:b3:6a:f0:b2:1d:db:b8:65:86:ec:bd:c1:bd:
                    27:b2:7f:dc:39:de:a2:18:06:b8:5b:3a:94:b0:3b:
                    18:30:61:1c:74:74:e1:1b:1e:4e:31:59:d6:ec:84:
                    d1:43:e6:eb:1a:c2:e8:97:48:c0:0d:d8:c9:a7:dd:
                    dd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:63:89:57:D5:38:A1:C2:E0:DA:B4:DD:1E:52:7C:15:05:33:16:A8
            X509v3 Authority Key Identifier:
                keyid:E6:3A:0B:64:34:8E:70:60:1D:E8:67:C5:94:F3:4A:8B:B8:7E:C9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/E63A0B64348E70601DE867C594F34A8BB87EC911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E63A0B64348E70601DE867C594F34A8BB87EC911.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B85DD645358412F50187507022D0E21CC2E568B4E4092477FC9D525982BD371/0/3139312e39392e302e302f31362d3234203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.99.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0f:3b:48:7f:19:ea:10:b4:e0:d9:cf:8e:76:32:76:3a:7e:12:
         a4:cd:61:89:48:4c:1a:a3:29:10:9d:57:0d:2c:ce:8b:ad:ac:
         08:2f:77:e2:d4:0e:fd:6c:12:04:56:89:4b:09:b7:0e:bb:b4:
         08:8a:9d:fd:41:41:a1:d0:2a:fc:dc:43:cd:8d:db:49:a3:58:
         91:9a:53:85:d0:c2:83:e2:a1:2c:08:34:af:0e:11:5e:a2:5a:
         09:d3:7e:02:96:35:66:16:53:f1:b5:14:c4:15:69:86:d5:63:
         fb:77:56:1c:77:4b:e0:08:34:00:74:7a:dd:f9:4b:d9:de:b3:
         2c:91:ca:e5:97:25:4b:21:09:58:bf:5f:ce:1d:77:fb:d9:f4:
         38:5a:75:6d:58:05:27:f6:fb:b5:9e:5d:3f:66:dd:f9:7c:e9:
         f1:cb:22:ec:3f:c7:5d:92:d8:6d:33:77:74:2b:8a:74:01:7b:
         f6:a3:13:dd:58:eb:c4:85:2a:1e:1e:bd:98:f5:36:c3:a3:fb:
         c2:3b:82:65:49:f5:cd:38:f4:23:9a:de:8e:5c:9e:2e:3f:92:
         2c:2c:7e:24:f5:e3:51:e6:66:b1:7c:fe:ff:78:1a:0b:b9:d8:
         6e:24:8d:24:38:73:9e:ce:19:74:76:0d:9f:a9:4b:72:2e:15:
         c3:fa:83:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 24 08:49:53 2026 by rpki-client