This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e302e302f31372d3234203d3e203139313639.roa
File:                     3138312e3139392e302e302f31372d3234203d3e203139313639.roa (raw, json)
Hash identifier:          NuUGArnGcMmvkd/A5QwptQQyPCOgxvm5bzrWCadtI+M=
Subject key identifier:   D3:B0:6F:87:DC:A2:75:95:AA:A5:8D:E2:EA:10:BC:7C:45:21:D2:FD
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       5E0B7499A492E1146E16875E4A2F60C2FAEFFF3F
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e302e302f31372d3234203d3e203139313639.roa
Signing time:             Tue 06 Jan 2026 19:08:40 +0000
ROA not before:           Tue 06 Jan 2026 19:03:40 +0000
ROA not after:            Tue 05 Jan 2027 19:08:40 +0000
asID:                     19169
IP address blocks:        181.199.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 19:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0b:74:99:a4:92:e1:14:6e:16:87:5e:4a:2f:60:c2:fa:ef:ff:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Jan  6 19:03:40 2026 GMT
            Not After : Jan  5 19:08:40 2027 GMT
        Subject: CN=D3B06F87DCA27595AAA58DE2EA10BC7C4521D2FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7c:40:95:19:5d:14:ce:ec:15:27:74:4a:06:
                    dd:80:fa:d5:f5:ff:d0:35:84:27:8e:01:89:d9:33:
                    e9:52:ca:91:92:da:e8:6f:b7:f7:58:6d:cd:33:65:
                    d1:1a:f7:74:75:6b:2b:84:52:11:c6:1a:17:0b:1b:
                    c2:8a:6a:21:87:11:11:07:38:9f:8d:e1:4f:ff:99:
                    4e:d5:53:8f:18:08:be:33:3f:75:22:dc:49:88:1c:
                    a3:ea:ef:68:c7:af:f2:c3:96:53:5c:1f:91:04:7b:
                    49:5c:09:3b:5e:dc:2e:46:a0:21:ac:56:04:b3:7f:
                    66:56:ec:71:db:b5:15:d8:c6:95:97:d8:30:9c:b6:
                    ed:9a:fb:86:f1:bf:2f:4f:82:44:49:af:20:f0:66:
                    0a:81:35:a7:68:c3:6c:a5:60:3d:fb:9f:d6:01:c1:
                    fe:1d:b5:a4:7a:bf:bc:35:bf:0e:ed:6f:5d:1d:f0:
                    df:6c:1d:2a:11:4e:19:ce:6e:c0:12:6c:da:32:ff:
                    93:aa:a5:50:b6:08:27:ef:0c:ff:fb:93:fb:37:26:
                    05:ee:9b:af:1e:5f:0a:bb:75:6c:a5:92:83:2e:1a:
                    6f:3b:f7:be:a3:e5:3d:41:17:fa:c3:18:f0:3f:8b:
                    eb:22:85:3b:57:df:3c:44:4c:45:c5:b0:c4:48:14:
                    f8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B0:6F:87:DC:A2:75:95:AA:A5:8D:E2:EA:10:BC:7C:45:21:D2:FD
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e302e302f31372d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         86:a8:40:53:a7:a6:ff:42:49:2f:fb:0f:91:f9:10:2b:79:76:
         fb:a4:20:bb:2b:ee:4e:a8:45:db:36:c0:85:7f:c7:fd:ae:e8:
         55:67:0e:45:76:eb:9b:e7:56:55:dc:4f:29:5c:1a:a0:03:24:
         84:31:ee:1e:3d:c9:54:f1:d7:70:69:5c:cd:ab:b2:cd:ed:2b:
         44:83:5a:26:65:f8:9c:6d:47:87:ac:b7:65:70:97:38:ce:33:
         cd:0a:ec:ab:da:a8:7b:07:c7:be:1e:bc:10:81:bb:d9:4c:44:
         cb:87:e7:c6:bc:28:ac:d4:d8:25:49:df:ac:a3:4e:26:ca:46:
         c4:d4:a4:e5:b8:1d:c8:76:68:91:94:c2:12:f9:4d:a0:13:77:
         2c:5b:e0:0c:7a:58:3f:01:c1:95:db:42:d2:11:96:35:26:90:
         a6:bb:24:2d:3d:c7:b9:97:c0:c7:99:16:2c:07:14:92:fc:72:
         ac:84:e3:8a:f5:1f:16:ad:f6:66:ee:94:2a:a3:ba:9b:b0:3c:
         6e:39:7c:72:b1:73:dd:e4:75:41:c1:0e:0c:eb:64:27:58:90:
         c4:77:a8:90:21:f8:7c:b1:43:f4:72:1c:6d:29:fe:9a:a6:ff:
         37:de:7d:0a:2e:17:ee:db:39:23:ea:a8:9a:26:c5:4d:02:3e:
         95:bc:e7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:23:09 2026 by rpki-client