This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32322d3234203d3e203139313639.roa
File:                     3136382e3139372e3138382e302f32322d3234203d3e203139313639.roa (raw, json)
Hash identifier:          WhYbfK2C2YcaR1ZDDdXlcP3oLYMKBjBZD5vpk3OQ2Ho=
Subject key identifier:   04:29:80:82:B8:AB:87:84:19:48:0C:21:A2:13:A9:39:D8:D5:93:20
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       5FF90AC556B33BFB98DAB10AB686E76C6D057725
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32322d3234203d3e203139313639.roa
Signing time:             Tue 06 Jan 2026 19:08:39 +0000
ROA not before:           Tue 06 Jan 2026 19:03:39 +0000
ROA not after:            Tue 05 Jan 2027 19:08:39 +0000
asID:                     19169
IP address blocks:        168.197.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 19:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f9:0a:c5:56:b3:3b:fb:98:da:b1:0a:b6:86:e7:6c:6d:05:77:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Jan  6 19:03:39 2026 GMT
            Not After : Jan  5 19:08:39 2027 GMT
        Subject: CN=04298082B8AB878419480C21A213A939D8D59320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:f8:a6:ce:5b:07:23:b4:e0:70:81:82:47:
                    be:77:7a:b3:0d:fe:53:89:b0:f4:e9:ed:48:dc:be:
                    a1:6a:9b:25:45:c9:4f:e6:2a:03:0f:ff:0f:df:f0:
                    84:5c:b1:e3:6d:9b:86:08:92:35:ac:a0:83:9e:72:
                    a1:24:30:23:ec:a5:ab:50:33:a9:eb:bc:77:a7:bb:
                    ec:d3:9d:5d:76:20:6f:68:0f:2a:82:ff:90:62:29:
                    3e:69:e9:bb:80:be:f5:27:61:fa:b4:f4:ba:83:bd:
                    fa:d5:aa:68:b2:d7:3c:d8:99:62:72:5a:60:b2:e6:
                    8b:21:95:e2:e6:d2:90:cd:45:44:43:ac:a0:ea:4f:
                    1f:9f:ea:9e:3a:6d:7d:61:bc:3e:94:7c:a5:4e:5f:
                    c3:07:a0:7f:0a:e5:dd:5a:a8:5d:cc:07:45:42:8c:
                    09:1c:14:6f:4e:ef:cd:0a:ad:86:5f:4b:e2:61:0a:
                    72:50:54:7f:65:bf:de:9d:08:4a:be:8d:db:f6:45:
                    75:31:6a:e2:35:71:4f:38:06:b2:13:d3:69:3f:6d:
                    f2:2d:c3:9b:66:cc:36:4e:8b:54:53:a4:a9:7a:e1:
                    15:db:60:2b:7e:e6:41:b4:0e:05:01:5f:da:fe:d2:
                    4c:70:ad:a7:27:a9:9f:7f:50:ca:92:c4:69:a5:5a:
                    db:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:29:80:82:B8:AB:87:84:19:48:0C:21:A2:13:A9:39:D8:D5:93:20
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32322d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:f8:93:d0:3f:ff:62:8c:36:39:ca:8c:1d:fe:35:75:46:e5:
         35:36:dd:a8:29:ff:85:4b:5f:d9:43:61:f2:d4:d8:f8:9e:22:
         fb:d3:d5:2e:c5:c4:81:ab:ee:72:94:e5:90:47:5f:e8:f8:e4:
         66:16:73:87:a3:e4:d6:6c:55:4d:6e:0b:34:73:15:11:1a:e1:
         13:12:87:4e:10:5a:09:4e:d2:06:d3:6c:ba:ff:70:38:af:e7:
         05:8c:a9:2f:22:f5:05:df:f4:4f:8f:4d:a0:ac:7f:cb:01:9b:
         7a:6b:70:f4:46:4a:eb:72:5b:cc:b7:55:10:d2:3a:b6:72:f3:
         29:9e:9f:4b:83:62:3b:af:84:ed:5c:d8:c9:01:4e:18:0d:b9:
         2e:e1:64:d4:25:8c:ff:e8:68:a3:b5:8c:53:84:0f:c1:97:04:
         18:a5:48:11:8d:f5:d7:ca:6e:bb:ac:9b:92:3b:05:a9:01:50:
         06:18:95:6f:71:74:89:a2:06:16:96:47:c8:92:86:30:52:81:
         4e:3b:13:f3:a7:65:b6:65:50:24:b8:69:fe:5a:49:6e:3a:f9:
         e8:a0:28:eb:0a:74:be:8c:e8:b5:88:b7:f2:2e:d8:70:c6:7e:
         c4:3d:8e:e9:ea:e4:5c:25:68:2c:e9:30:21:31:8d:50:fb:61:
         77:c8:48:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:23:07 2026 by rpki-client