This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e392e302f32342d3234203d3e203232373234.roa
File:                     3138362e3130312e392e302f32342d3234203d3e203232373234.roa (raw, json)
Hash identifier:          pkIqidMuxfrMA7PiDJcs+xyRC4k59VAOd8voxfBDszw=
Subject key identifier:   C4:3A:40:B2:7D:E3:6A:10:C4:91:A2:C9:60:AC:0D:73:2F:53:14:9D
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       1342053F477F2D79C1DC391321D3FB6BA7E87ED5
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e392e302f32342d3234203d3e203232373234.roa
Signing time:             Tue 06 Jan 2026 19:08:28 +0000
ROA not before:           Tue 06 Jan 2026 19:03:28 +0000
ROA not after:            Tue 05 Jan 2027 19:08:28 +0000
asID:                     22724
IP address blocks:        186.101.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 19:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:42:05:3f:47:7f:2d:79:c1:dc:39:13:21:d3:fb:6b:a7:e8:7e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Jan  6 19:03:28 2026 GMT
            Not After : Jan  5 19:08:28 2027 GMT
        Subject: CN=C43A40B27DE36A10C491A2C960AC0D732F53149D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:a1:f2:44:2b:f3:99:46:46:9f:f6:e0:f7:
                    a1:96:b8:99:37:d0:5d:26:de:8c:07:4a:21:d0:16:
                    8c:b5:e4:b8:eb:cd:15:53:72:eb:82:12:5f:c9:e5:
                    26:48:6d:a4:98:3d:ad:f8:60:ca:06:a1:53:63:b2:
                    f3:15:b0:83:67:b2:5e:89:9b:0c:fc:cb:a4:0b:a4:
                    b5:bb:e1:21:c8:ee:6b:ab:62:a1:1c:3a:4f:45:03:
                    d3:ab:7a:73:01:65:bb:ce:b3:6b:9d:36:6c:3b:a8:
                    50:f1:82:11:70:80:14:c6:1e:c5:50:ab:1d:12:73:
                    8b:ba:61:7a:97:d3:fa:d8:82:20:40:30:cf:6f:9b:
                    c2:b9:00:09:b9:54:1a:08:24:a3:7d:e7:be:f3:ba:
                    2b:ab:86:74:ea:9e:f7:86:32:0a:03:53:6b:ba:a7:
                    71:0f:11:7f:35:bc:af:6b:db:03:64:5e:45:8f:28:
                    05:56:ac:2f:f2:dc:2e:63:db:98:e1:9e:87:63:4b:
                    99:1b:e9:4b:0b:85:30:ba:1e:c8:75:6b:e3:60:cb:
                    80:79:66:7f:aa:44:94:54:df:5c:a3:b7:75:23:98:
                    45:29:0c:7a:83:38:e1:36:eb:46:7e:b9:f8:09:64:
                    dc:2f:a4:14:82:b0:59:fe:1c:16:d6:d3:e7:80:bb:
                    4e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3A:40:B2:7D:E3:6A:10:C4:91:A2:C9:60:AC:0D:73:2F:53:14:9D
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e392e302f32342d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.101.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:78:fd:7f:79:b7:1e:92:f2:63:42:3c:4a:83:55:67:a3:6e:
         0b:6d:83:16:31:69:19:84:0e:17:b8:b4:0d:16:13:f1:31:1c:
         b5:e6:4e:7c:eb:7c:19:83:41:85:56:de:5b:4d:11:4f:92:e0:
         f8:95:c2:3b:3e:8e:67:09:11:7c:ba:f7:0a:0d:45:4c:bc:2e:
         28:a3:f1:10:dd:d9:a5:e5:74:46:88:a4:c7:2e:36:65:2f:b0:
         a4:e0:44:be:e2:2d:ef:62:e7:7e:2c:7c:ef:5a:91:4e:e6:6f:
         44:0a:18:47:7f:76:e1:27:10:47:27:d9:b8:a9:07:28:1a:81:
         b6:97:19:07:eb:d9:7e:58:bf:c1:4a:a8:ea:7b:3a:9a:61:17:
         e4:ed:a4:08:85:3b:43:d1:87:ad:4c:f3:06:a2:81:98:b0:65:
         57:79:86:32:5b:2a:5c:dd:cd:4f:69:f6:95:00:f3:11:79:d9:
         14:ef:c0:04:87:1d:9c:42:4e:86:3f:d1:96:76:24:ee:79:99:
         7b:b0:29:09:5c:72:fe:1f:56:c3:29:9d:fc:9d:bc:bc:8e:c1:
         ab:da:8d:87:fb:f6:0f:d7:bb:70:ff:b9:7c:3e:29:a6:e8:73:
         45:ab:e8:b6:c2:6c:91:f2:82:ff:a6:12:c9:e4:06:eb:be:7e:
         c8:50:f2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:23:09 2026 by rpki-client