This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/3139322e3138382e34392e302f32342d3234203d3e203631343638.roa
File:                     3139322e3138382e34392e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          6BcM9Bng6ayyqNipzn9FHR5Kk7mqUOJc3HzvYAC1LJs=
Subject key identifier:   B5:AE:8F:99:BB:C6:FA:1E:21:CD:99:E2:63:8B:CB:23:F2:3E:12:80
Certificate issuer:       /CN=5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF
Certificate serial:       34812DCDD1765A3678D2646DF885C6351CDE23BC
Authority key identifier: 5B:3C:B3:BB:EC:DD:54:7F:5A:5D:D5:4A:4F:A6:4B:8F:D4:AC:F7:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/3139322e3138382e34392e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 06 Jan 2026 19:35:35 +0000
ROA not before:           Tue 06 Jan 2026 19:30:35 +0000
ROA not after:            Tue 05 Jan 2027 19:35:35 +0000
asID:                     61468
IP address blocks:        192.188.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:81:2d:cd:d1:76:5a:36:78:d2:64:6d:f8:85:c6:35:1c:de:23:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF
        Validity
            Not Before: Jan  6 19:30:35 2026 GMT
            Not After : Jan  5 19:35:35 2027 GMT
        Subject: CN=B5AE8F99BBC6FA1E21CD99E2638BCB23F23E1280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f3:54:5a:53:ac:9b:c2:04:55:61:6f:16:fb:
                    2a:67:70:00:f8:60:58:97:79:9d:e6:2e:7c:61:0c:
                    a1:7e:87:dd:98:a4:a6:f0:8a:e2:98:21:ce:3e:bc:
                    b1:2c:37:dc:0c:53:1e:8b:fb:83:58:41:a6:15:71:
                    05:69:03:ea:d1:dd:cb:42:76:ef:56:ec:a4:51:bd:
                    25:3d:ec:55:98:f1:97:b3:d1:9b:c2:52:80:61:29:
                    e4:af:a8:dc:23:15:2c:d9:4f:b5:73:af:63:e8:b2:
                    5d:d8:bd:31:27:0d:2f:54:12:45:7b:80:d0:09:6d:
                    8b:58:04:4b:7f:92:59:8b:e1:e2:6c:7a:e0:f3:2f:
                    05:6c:b9:06:01:6d:c9:82:dc:f1:26:6a:25:d8:01:
                    e9:9f:87:32:c6:08:24:c3:e2:98:1e:9c:f1:2d:a0:
                    45:68:2e:b2:94:f9:78:de:ef:11:81:7b:20:fb:f6:
                    fa:5d:63:70:11:f8:8d:bf:ff:c1:45:98:42:ae:e1:
                    07:95:be:e6:72:5a:ce:ab:d4:eb:30:37:19:d4:1a:
                    2b:8c:bc:a6:ba:80:f7:09:a9:05:83:61:bf:42:fd:
                    67:b4:81:eb:fc:b5:1b:ba:c6:55:5c:14:cd:a3:1c:
                    85:ec:a5:d5:af:40:b9:4d:ba:7b:98:b8:9c:a6:7b:
                    6b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AE:8F:99:BB:C6:FA:1E:21:CD:99:E2:63:8B:CB:23:F2:3E:12:80
            X509v3 Authority Key Identifier:
                keyid:5B:3C:B3:BB:EC:DD:54:7F:5A:5D:D5:4A:4F:A6:4B:8F:D4:AC:F7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/3139322e3138382e34392e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:4b:4b:be:b1:14:91:70:c7:5d:da:92:5d:be:fe:42:e4:e0:
         8b:78:27:79:b9:72:ae:19:eb:06:a7:9e:ae:3b:da:51:af:0d:
         49:9e:24:cf:61:26:9f:76:fc:31:85:f0:a6:7e:66:fd:01:ea:
         21:95:91:3a:17:c5:3a:82:3e:2a:dc:e9:84:e0:07:f1:5d:76:
         3c:e5:f4:a1:2e:a9:5d:76:45:67:df:05:64:3a:02:92:26:8a:
         8f:22:0f:32:a8:54:66:7f:43:5e:83:ff:f2:45:4a:eb:19:8c:
         c3:3a:a5:aa:2d:84:19:a8:e9:2d:a1:f5:40:75:63:00:23:d5:
         cd:9d:49:a4:9f:3f:73:46:62:df:fa:aa:9a:97:b1:e1:8c:0a:
         e7:87:b6:b7:08:03:f9:58:c7:0c:e1:1a:31:d2:1c:27:a6:48:
         52:3b:c0:a5:f6:71:89:90:f0:10:9a:99:e7:f4:b9:f5:a8:f2:
         ce:d3:2f:2f:34:e3:ee:e4:45:2a:89:96:96:46:5f:a2:0e:74:
         fd:ef:d2:10:c8:24:3a:e8:74:18:e2:97:52:64:c9:c1:c4:17:
         1d:33:25:f0:54:6a:22:98:64:cb:40:78:79:68:c9:c2:85:7a:
         6b:cd:d7:c6:66:11:9d:8a:4e:23:5e:d2:16:39:0b:aa:0d:26:
         04:f8:08:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:26:23 2026 by rpki-client