This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/3139312e39372e39372e302f32342d3234203d3e20323633383039.roa
File:                     3139312e39372e39372e302f32342d3234203d3e20323633383039.roa (raw, json)
Hash identifier:          c46zruAlanCBeTWGOsWJGFQs/I9ZCkdLt2YkMnDeJXU=
Subject key identifier:   8A:8C:7B:00:D8:7E:06:ED:7F:74:F8:FA:DF:5B:E8:4C:78:DA:2F:90
Certificate issuer:       /CN=92CBA0288430251DD4FED89A879B0C57A75AF8C2
Certificate serial:       401DF02678F3FF0CB3DFC7DA3A064D67F172D5BE
Authority key identifier: 92:CB:A0:28:84:30:25:1D:D4:FE:D8:9A:87:9B:0C:57:A7:5A:F8:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/3139312e39372e39372e302f32342d3234203d3e20323633383039.roa
Signing time:             Tue 06 Jan 2026 19:28:20 +0000
ROA not before:           Tue 06 Jan 2026 19:23:20 +0000
ROA not after:            Tue 05 Jan 2027 19:28:20 +0000
asID:                     263809
IP address blocks:        191.97.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1d:f0:26:78:f3:ff:0c:b3:df:c7:da:3a:06:4d:67:f1:72:d5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92CBA0288430251DD4FED89A879B0C57A75AF8C2
        Validity
            Not Before: Jan  6 19:23:20 2026 GMT
            Not After : Jan  5 19:28:20 2027 GMT
        Subject: CN=8A8C7B00D87E06ED7F74F8FADF5BE84C78DA2F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:5f:8e:b2:83:50:97:a0:ab:2d:0c:5d:da:
                    bc:56:52:7c:5a:2b:e8:82:fc:ea:46:a6:07:87:79:
                    30:60:cf:b0:49:eb:02:cb:61:19:ec:24:4c:84:ff:
                    f8:0b:1b:f6:9b:46:04:79:3a:48:88:84:9e:09:ec:
                    86:6d:57:20:e6:97:45:22:01:a6:b3:3c:de:08:6e:
                    ed:69:a3:18:67:2c:4d:29:2d:a8:2a:a7:6c:2a:71:
                    be:25:dd:b5:0c:d6:43:52:cd:27:d4:70:53:10:60:
                    79:ab:08:7c:a6:4b:97:83:11:96:16:e2:5d:22:b9:
                    0d:bc:93:6b:c7:9d:2f:ae:6b:88:0d:77:34:ab:46:
                    e8:15:54:94:41:52:7a:9f:d1:e1:75:6d:2d:56:be:
                    32:63:de:cd:e6:de:98:f6:04:ed:de:e9:c5:f8:bc:
                    3e:10:2c:ae:69:50:84:06:60:e4:53:2d:99:6d:8c:
                    93:f9:af:d8:ab:26:14:02:c1:c0:71:9b:c0:8b:1a:
                    d6:ba:6d:89:9d:85:17:4e:db:99:1f:a1:d5:a7:29:
                    0c:77:33:f5:f2:ac:31:f0:0c:e1:10:1b:83:da:73:
                    9a:70:d2:1a:1e:89:87:38:23:0c:46:d4:09:e8:63:
                    5d:1a:37:00:e0:30:ae:c5:6f:99:a1:0a:f2:1c:e2:
                    bc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8C:7B:00:D8:7E:06:ED:7F:74:F8:FA:DF:5B:E8:4C:78:DA:2F:90
            X509v3 Authority Key Identifier:
                keyid:92:CB:A0:28:84:30:25:1D:D4:FE:D8:9A:87:9B:0C:57:A7:5A:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/3139312e39372e39372e302f32342d3234203d3e20323633383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:27:c7:15:43:f6:5c:f9:cb:9e:1b:9c:40:f6:15:9c:69:1d:
         1b:61:32:8c:40:96:b5:db:c0:af:9c:a9:0b:a3:4f:50:f5:8a:
         93:d0:b6:13:1c:11:12:01:cb:c5:9e:45:2a:35:08:e8:04:21:
         5a:06:a8:2a:51:b2:b6:80:01:f4:14:43:8e:52:c2:ec:83:21:
         1f:c1:54:df:a5:12:d3:65:92:41:02:4f:41:11:e2:d5:04:c1:
         c5:43:ba:3f:d0:e6:90:d3:de:6d:55:56:81:cc:93:5b:49:65:
         1b:be:45:20:df:e7:08:e7:7f:be:15:89:9d:74:e0:c7:f2:ab:
         71:67:3b:31:2f:e6:36:98:0c:00:7f:b6:49:37:86:eb:83:11:
         45:51:4f:5b:dd:7c:dc:7b:c4:97:9b:88:bc:a1:22:61:00:66:
         0f:ae:07:44:e9:d2:0b:2a:26:90:e2:32:20:ae:ab:bd:fd:23:
         50:e8:67:d9:b3:25:b0:76:1c:e8:a2:3b:bc:f1:2f:14:d7:5b:
         eb:d8:ee:4d:69:6f:f4:5e:03:e7:15:56:cc:d4:8d:56:e4:33:
         3a:cc:ec:5f:93:20:89:d8:14:62:9c:d8:f6:f8:b0:8d:88:72:
         ed:92:79:bd:6f:71:d3:d5:62:c7:1e:14:63:e5:24:8f:b1:35:
         dc:45:8a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:05:28 2026 by rpki-client