This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3139302e39352e3132382e302f31372d3234203d3e203237393437.roa
File:                     3139302e39352e3132382e302f31372d3234203d3e203237393437.roa (raw, json)
Hash identifier:          dLkPyOHxBCfACemePUvThLxTJlS8lVUc6l4iX0uXqj0=
Subject key identifier:   AD:40:95:A2:F5:E6:19:1B:56:89:CA:DB:68:D7:73:0F:40:96:61:7B
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       57D63BF78B2E63636FD28CDF9ADC6373C0CC484D
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3139302e39352e3132382e302f31372d3234203d3e203237393437.roa
Signing time:             Tue 06 Jan 2026 19:08:34 +0000
ROA not before:           Tue 06 Jan 2026 19:03:34 +0000
ROA not after:            Tue 05 Jan 2027 19:08:34 +0000
asID:                     27947
IP address blocks:        190.95.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 19:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d6:3b:f7:8b:2e:63:63:6f:d2:8c:df:9a:dc:63:73:c0:cc:48:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Jan  6 19:03:34 2026 GMT
            Not After : Jan  5 19:08:34 2027 GMT
        Subject: CN=AD4095A2F5E6191B5689CADB68D7730F4096617B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:90:f4:13:04:f3:45:e4:5e:85:3e:a9:98:
                    73:92:39:e0:a9:02:99:05:5c:2d:cc:fe:04:10:70:
                    1b:64:f0:b1:cc:6c:cc:29:74:d4:63:a6:0b:05:cd:
                    c8:ab:40:db:31:15:e4:83:01:fb:58:85:ca:c9:aa:
                    f9:d5:b1:1a:34:86:a5:29:a3:97:c8:d6:7e:3e:06:
                    ca:ee:67:28:be:81:d5:6a:40:f4:ab:c8:6e:4c:8a:
                    e1:8d:43:bf:74:52:37:5e:7f:8b:2e:1c:18:50:b7:
                    ae:ab:97:a6:13:81:64:c3:f7:cf:f8:58:30:1a:0a:
                    86:08:95:16:a0:39:79:78:83:eb:5b:fe:b0:e7:37:
                    86:16:39:78:34:3a:a8:e3:6b:32:57:97:13:89:c6:
                    21:c5:c1:0d:3e:9c:a3:dd:7b:89:d2:41:e2:4b:8f:
                    b8:ed:8d:fd:df:7b:b4:7d:6e:46:7b:31:6e:25:ce:
                    f9:f2:18:df:ed:63:f6:25:8b:62:31:e7:63:c2:c9:
                    c8:d3:1e:d7:3f:ee:bd:27:d9:79:ba:51:18:6b:2a:
                    8c:1c:5a:02:5b:1f:d8:a2:30:65:9b:2f:e1:7f:71:
                    30:c3:0b:0d:82:f1:03:54:19:00:07:40:56:5d:21:
                    2a:fd:2d:2b:4e:1a:44:45:48:de:94:ec:35:4b:15:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:40:95:A2:F5:E6:19:1B:56:89:CA:DB:68:D7:73:0F:40:96:61:7B
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3139302e39352e3132382e302f31372d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.95.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         89:29:ac:75:a9:b2:35:27:d4:b4:e4:65:6d:27:54:5f:4c:f3:
         3d:f7:30:a9:f7:55:6d:73:c8:54:15:36:77:f8:90:bb:22:31:
         c2:9c:63:a5:fe:54:6b:fb:e4:f9:04:aa:89:1d:17:5f:8b:76:
         50:ca:4b:61:fe:df:5b:55:d9:77:cd:7b:53:65:07:83:8a:23:
         88:ef:b9:40:b8:f1:6f:f1:72:02:14:04:f1:e2:a7:db:67:cf:
         36:1d:b5:d3:e6:54:29:54:2b:4a:81:58:7d:e4:28:8f:70:d2:
         ed:5d:bd:f0:9e:5c:1e:23:d3:74:14:b8:77:f1:08:54:3f:f6:
         ce:a2:80:34:13:89:5d:fc:b4:ed:ed:60:50:9f:0b:c0:85:33:
         28:53:cb:eb:e8:88:d0:d5:24:fd:0d:df:01:cf:18:ef:84:80:
         2d:52:a0:63:b7:7d:0b:63:8e:37:3e:dc:3c:97:7e:3b:78:4a:
         bd:c9:07:f8:f4:06:6f:a8:a6:3e:d0:33:e7:3f:a6:a3:63:4b:
         84:62:9d:f4:3a:7b:78:20:44:2f:62:b6:2f:98:3b:72:85:c9:
         43:4f:99:32:e0:cd:6d:25:30:d6:29:3a:75:b2:0e:c3:eb:56:
         c6:5d:fd:be:eb:f9:3f:68:5b:02:12:58:5a:de:24:b2:1e:1d:
         28:58:0d:72
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUV9Y794suY2Nv0ozfmtxjc8DMSE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNjAxMDYxOTAzMzRaFw0yNzAxMDUxOTA4MzRaMDMxMTAvBgNV
BAMTKEFENDA5NUEyRjVFNjE5MUI1Njg5Q0FEQjY4RDc3MzBGNDA5NjYxN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbipD0EwTzReRehT6pmHOSOeCp
ApkFXC3M/gQQcBtk8LHMbMwpdNRjpgsFzcirQNsxFeSDAftYhcrJqvnVsRo0hqUp
o5fI1n4+BsruZyi+gdVqQPSryG5MiuGNQ790Ujdef4suHBhQt66rl6YTgWTD98/4
WDAaCoYIlRagOXl4g+tb/rDnN4YWOXg0OqjjazJXlxOJxiHFwQ0+nKPde4nSQeJL
j7jtjf3fe7R9bkZ7MW4lzvnyGN/tY/Yli2Ix52PCycjTHtc/7r0n2Xm6URhrKowc
WgJbH9iiMGWbL+F/cTDDCw2C8QNUGQAHQFZdISr9LStOGkRFSN6U7DVLFZ1VAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUrUCVovXmGRtWicrbaNdzD0CWYXswHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMxMzkzMDJlMzkzNTJlMzEzMjM4MmUz
MDJmMzEzNzJkMzIzNDIwM2QzZTIwMzIzNzM5MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB75fgDAN
BgkqhkiG9w0BAQsFAAOCAQEAiSmsdamyNSfUtORlbSdUX0zzPfcwqfdVbXPIVBU2
d/iQuyIxwpxjpf5Ua/vk+QSqiR0XX4t2UMpLYf7fW1XZd817U2UHg4ojiO+5QLjx
b/FyAhQE8eKn22fPNh210+ZUKVQrSoFYfeQoj3DS7V298J5cHiPTdBS4d/EIVD/2
zqKANBOJXfy07e1gUJ8LwIUzKFPL6+iI0NUk/Q3fAc8Y74SALVKgY7d9C2OONz7c
PJd+O3hKvckH+PQGb6imPtAz5z+mo2NLhGKd9Dp7eCBEL2K2L5g7coXJQ0+ZMuDN
bSUw1ik6dbIOw+tWxl39vuv5P2hbAhJYWt4ksh4dKFgNcg==
-----END CERTIFICATE-----
Generated at Wed Jan 21 12:22:51 2026 by rpki-client