This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/3139312e39382e3139342e302f32342d3234203d3e20323633323138.roa
File:                     3139312e39382e3139342e302f32342d3234203d3e20323633323138.roa (raw, json)
Hash identifier:          42YPMMQ6wPDtb/SISTDVj2O8mn6DHSZ3PPbUOMDATEI=
Subject key identifier:   2A:A7:CB:2E:32:8B:A8:D1:82:22:0F:63:32:01:FC:B3:23:A2:3D:23
Certificate issuer:       /CN=D6578B90795CFC3357FE4AF953B5F071689073D0
Certificate serial:       6BCCEF0E06FD32D316CDFB4EEB7DBBBE7AE8F285
Authority key identifier: D6:57:8B:90:79:5C:FC:33:57:FE:4A:F9:53:B5:F0:71:68:90:73:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6578B90795CFC3357FE4AF953B5F071689073D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/3139312e39382e3139342e302f32342d3234203d3e20323633323138.roa
Signing time:             Tue 06 Jan 2026 19:36:50 +0000
ROA not before:           Tue 06 Jan 2026 19:31:50 +0000
ROA not after:            Tue 05 Jan 2027 19:36:50 +0000
asID:                     263218
IP address blocks:        191.98.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/D6578B90795CFC3357FE4AF953B5F071689073D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/D6578B90795CFC3357FE4AF953B5F071689073D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6578B90795CFC3357FE4AF953B5F071689073D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:cc:ef:0e:06:fd:32:d3:16:cd:fb:4e:eb:7d:bb:be:7a:e8:f2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6578B90795CFC3357FE4AF953B5F071689073D0
        Validity
            Not Before: Jan  6 19:31:50 2026 GMT
            Not After : Jan  5 19:36:50 2027 GMT
        Subject: CN=2AA7CB2E328BA8D182220F633201FCB323A23D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bf:05:7b:3b:7b:3a:34:74:d4:67:95:5a:61:
                    d3:7a:9c:a8:aa:0e:d2:23:45:73:9f:64:29:2a:4e:
                    11:d4:69:7e:61:8b:9d:e2:2e:f6:8f:14:7a:d9:9d:
                    ad:64:2a:93:81:64:e0:61:fa:36:de:a6:e2:4d:cb:
                    d5:9e:3d:7d:53:46:38:a8:1a:2b:aa:73:3e:bf:ea:
                    e4:16:53:2c:b1:ef:d1:a4:cb:2b:95:4d:2a:d1:bf:
                    50:c8:86:5c:6d:49:80:bc:2c:14:a9:77:4a:e2:0b:
                    f2:ad:72:6e:34:b1:46:b9:82:0b:b2:a2:1f:df:10:
                    e8:72:a4:4b:60:b4:f7:8d:19:bd:59:c3:28:ed:f1:
                    03:72:cc:68:ce:bb:f3:94:ed:da:c2:c2:dd:88:5e:
                    59:02:7a:d0:2b:5f:91:23:7a:3a:24:5a:c5:7c:bb:
                    df:68:b2:dd:6a:ee:b5:8d:cd:42:1c:d5:08:f2:65:
                    83:65:e8:2f:2b:45:b5:a1:c4:f6:c2:fd:64:23:a4:
                    c7:11:a4:8b:d9:84:9e:b3:eb:c0:13:71:ab:a5:7d:
                    3f:be:6c:fe:28:3b:f1:50:26:03:c8:9e:b5:f7:2b:
                    1b:52:0f:58:39:aa:f0:f0:2e:28:3b:79:05:b9:96:
                    85:40:8b:c5:de:73:4f:fe:f1:e9:ef:85:32:6a:2a:
                    85:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A7:CB:2E:32:8B:A8:D1:82:22:0F:63:32:01:FC:B3:23:A2:3D:23
            X509v3 Authority Key Identifier:
                keyid:D6:57:8B:90:79:5C:FC:33:57:FE:4A:F9:53:B5:F0:71:68:90:73:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/D6578B90795CFC3357FE4AF953B5F071689073D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6578B90795CFC3357FE4AF953B5F071689073D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/3139312e39382e3139342e302f32342d3234203d3e20323633323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:e8:84:b9:de:23:fb:24:b8:bf:d1:92:0d:c1:92:16:30:1d:
         1e:b3:33:d1:3d:1c:1c:2c:52:25:2c:45:18:a7:52:39:c3:31:
         64:fb:f5:64:72:52:02:ce:6f:51:48:d3:85:20:8d:b7:d4:c9:
         c1:5d:6f:be:f1:93:07:94:30:24:b1:f8:06:2a:54:d1:8e:e1:
         50:a2:30:49:bd:54:c8:57:31:af:5b:76:ef:1a:7f:7f:d8:4b:
         5b:72:31:c5:1d:ae:7f:ad:0a:6a:ad:35:eb:08:e8:50:df:08:
         ce:05:7c:0a:47:62:ec:48:7d:42:fe:22:27:f5:46:7f:43:8b:
         a2:92:09:71:bb:93:e1:7f:65:6d:d5:24:c5:76:9f:43:84:6a:
         45:2b:cb:95:21:21:b6:49:aa:31:7d:fb:b0:c9:12:cb:f0:c7:
         d3:a6:cc:c4:bf:f4:48:92:3b:17:17:f4:bf:cc:79:00:87:c9:
         2a:87:34:98:53:d6:96:17:1b:4e:d8:9f:3a:cb:e8:5a:cd:cb:
         99:7a:35:79:e8:bc:26:cc:99:eb:61:16:4c:b0:2b:5e:c4:d7:
         f0:4f:bc:a0:95:67:d8:07:bd:b2:78:3e:d2:1c:13:1c:89:26:
         11:f3:24:26:41:f1:81:d9:5a:5b:e2:2f:60:38:21:26:b6:34:
         ac:ad:a8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 24 00:38:43 2026 by rpki-client