This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e3131302e36342e302f31392d3234203d3e203139313639.roa
File:                     3230302e3131302e36342e302f31392d3234203d3e203139313639.roa (raw, json)
Hash identifier:          0lNVW/fguQkm0cbKgrCFtKHafQms/gFOBXR4u+d7avA=
Subject key identifier:   39:A2:03:CA:EB:34:9A:4C:AD:01:7C:94:65:07:7E:E1:26:2F:1D:EF
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       3AD085515F621F615ED174A76507F8BF973E50DC
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e3131302e36342e302f31392d3234203d3e203139313639.roa
Signing time:             Tue 06 Jan 2026 19:08:31 +0000
ROA not before:           Tue 06 Jan 2026 19:03:31 +0000
ROA not after:            Tue 05 Jan 2027 19:08:31 +0000
asID:                     19169
IP address blocks:        200.110.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 19:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d0:85:51:5f:62:1f:61:5e:d1:74:a7:65:07:f8:bf:97:3e:50:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Jan  6 19:03:31 2026 GMT
            Not After : Jan  5 19:08:31 2027 GMT
        Subject: CN=39A203CAEB349A4CAD017C9465077EE1262F1DEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:6a:68:e4:3a:fe:4d:fb:cd:23:1c:fd:a0:
                    ee:47:1d:3c:e9:d4:4b:d3:70:b0:57:15:4e:ac:83:
                    96:a6:dc:b3:ac:5f:1e:aa:d9:99:2a:70:80:c4:b9:
                    b6:2d:8f:02:0b:a4:77:91:20:91:6c:be:2e:03:eb:
                    bf:1c:e7:73:2b:9a:c3:93:34:21:6b:76:69:2b:64:
                    a8:3c:b7:c4:fe:69:29:12:da:e0:c5:39:d3:61:3d:
                    d7:69:b6:4a:3b:d5:57:7f:41:77:be:40:f4:ce:d0:
                    2f:3b:c0:fb:ab:1f:0b:3b:a3:8c:3b:a3:30:c0:ba:
                    03:f5:f0:e5:a0:a6:9d:53:04:a9:2a:2a:b4:4d:e9:
                    87:22:29:64:9c:02:1e:1b:f7:9a:49:ab:55:f9:ad:
                    85:f5:7e:4e:07:c4:c8:11:2b:5a:9c:50:9c:66:5d:
                    b6:93:89:74:ec:72:f4:48:ed:a2:a2:5e:ce:4d:af:
                    9d:8c:e7:3f:79:c6:6a:60:2e:cb:a7:16:52:4e:5d:
                    37:81:9d:99:6c:76:a8:ed:3d:09:b7:77:22:38:9d:
                    53:da:7f:df:43:7c:c2:17:23:52:13:9b:ad:14:d5:
                    f6:2c:ff:00:a9:e7:3f:64:3a:28:3a:35:3a:61:e7:
                    ca:d9:6d:60:dc:38:62:26:c7:2b:73:b0:44:c1:a7:
                    15:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A2:03:CA:EB:34:9A:4C:AD:01:7C:94:65:07:7E:E1:26:2F:1D:EF
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e3131302e36342e302f31392d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0e:7a:8b:a6:7c:93:f4:00:8c:77:5b:48:1f:db:b0:dc:6f:f6:
         8e:73:d8:33:ba:6d:08:12:17:f2:0d:80:76:71:f1:c8:24:7f:
         8e:f8:9e:ee:5e:22:e1:0b:d8:2f:10:a3:d8:39:6b:e2:91:f5:
         f8:2f:18:88:b6:97:8d:30:23:57:17:1f:e6:76:fe:b8:e1:02:
         f8:44:63:c3:08:83:13:dd:6b:25:bb:60:ea:e6:e9:b4:21:83:
         2e:61:7d:7a:64:7d:a1:51:6c:a7:18:0c:7a:6f:46:88:df:04:
         f2:41:04:fa:49:48:16:6e:63:db:4e:5f:b9:cc:f5:b7:a3:f0:
         1f:3b:2b:94:aa:ca:b3:e4:34:8b:bc:74:aa:7d:11:39:c1:3a:
         a6:a4:c5:0d:7a:fb:47:11:27:17:29:01:d8:fe:df:7f:ec:46:
         87:0a:3d:fe:b4:0d:be:ae:a5:df:94:ed:fb:fd:b0:ec:73:fb:
         0a:cc:9f:5d:7f:77:34:ad:92:ea:b5:54:46:7b:a0:11:4b:58:
         b7:6c:c8:b4:c0:04:1b:98:d9:2c:1c:da:f3:de:90:38:e2:20:
         f4:a0:77:e3:50:74:74:81:5f:7a:7b:f8:05:d7:f7:9b:9c:f0:
         06:af:36:ae:7c:da:d5:b8:89:ae:4d:7a:e5:b8:c7:a1:a6:2b:
         5f:27:a9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:22:52 2026 by rpki-client