This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/3133312e3136312e3134382e302f32322d3232203d3e203238303934.roa
File:                     3133312e3136312e3134382e302f32322d3232203d3e203238303934.roa (raw, json)
Hash identifier:          U/Wnwy/baIfXsVAUFk+brsaTN4IHKDvV2uEf8BhxtDI=
Subject key identifier:   A1:E5:3D:03:A0:47:1E:6B:55:C0:51:28:0B:10:52:4F:FF:81:F2:6F
Certificate issuer:       /CN=E6643CD2835B8AF96C10248E2382CB3BA81EA12A
Certificate serial:       50754D9D45C82EFF7A48EEBBC3F8660FFB3DA060
Authority key identifier: E6:64:3C:D2:83:5B:8A:F9:6C:10:24:8E:23:82:CB:3B:A8:1E:A1:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/3133312e3136312e3134382e302f32322d3232203d3e203238303934.roa
Signing time:             Tue 06 Jan 2026 19:34:41 +0000
ROA not before:           Tue 06 Jan 2026 19:29:41 +0000
ROA not after:            Tue 05 Jan 2027 19:34:41 +0000
asID:                     28094
IP address blocks:        131.161.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 20:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:75:4d:9d:45:c8:2e:ff:7a:48:ee:bb:c3:f8:66:0f:fb:3d:a0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6643CD2835B8AF96C10248E2382CB3BA81EA12A
        Validity
            Not Before: Jan  6 19:29:41 2026 GMT
            Not After : Jan  5 19:34:41 2027 GMT
        Subject: CN=A1E53D03A0471E6B55C051280B10524FFF81F26F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:77:7f:75:54:f9:45:58:ea:90:a7:4a:4a:eb:
                    1e:56:04:db:af:c7:bf:b7:4f:c5:ca:3f:42:70:57:
                    82:68:4d:34:a1:24:c7:2d:c8:24:07:f8:12:b2:1e:
                    79:e8:54:23:3b:90:5b:5f:12:d9:5e:61:14:ef:00:
                    9b:0c:e4:95:b6:8d:08:7b:fc:50:d1:06:84:c7:94:
                    a8:bb:61:67:41:d0:b7:2b:38:f7:aa:e2:b9:dd:4e:
                    ee:45:6a:b8:17:84:fe:c2:6f:5f:e4:a5:a4:17:41:
                    57:e9:0a:96:f6:88:cf:b2:07:e8:c2:49:33:c9:25:
                    a5:bd:7e:2e:1f:bb:54:ed:c5:50:f5:c1:0f:8c:92:
                    d6:fa:53:ba:54:d3:10:42:9a:8a:44:2c:e9:72:bf:
                    38:52:d8:05:98:fe:0b:1f:9b:f4:3d:24:8b:66:17:
                    7f:1f:0c:60:48:3a:cc:95:d5:50:25:d2:e5:a9:88:
                    b1:a5:aa:64:ba:ac:d6:10:1f:95:84:80:39:6c:99:
                    75:52:eb:98:b1:79:66:0e:82:b0:f4:e7:b3:2c:76:
                    23:4a:61:3c:16:df:3b:3e:91:27:64:87:65:3a:d8:
                    c6:67:bc:d9:fb:22:3d:81:c9:dd:08:56:b0:df:4a:
                    6c:19:8b:53:08:f4:65:fb:97:9c:6f:7f:f0:e4:3b:
                    4f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E5:3D:03:A0:47:1E:6B:55:C0:51:28:0B:10:52:4F:FF:81:F2:6F
            X509v3 Authority Key Identifier:
                keyid:E6:64:3C:D2:83:5B:8A:F9:6C:10:24:8E:23:82:CB:3B:A8:1E:A1:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/3133312e3136312e3134382e302f32322d3232203d3e203238303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e0:2f:a4:c3:c5:6a:63:28:6f:2e:fb:7d:b3:55:6e:52:83:ce:
         6d:40:d7:6e:14:a6:96:1d:50:2d:a4:32:ca:4d:25:33:4d:92:
         46:8c:16:72:3f:c2:e6:e3:15:dd:7f:9e:d9:74:3d:e8:f0:7c:
         dc:5c:29:0b:8b:be:e8:bb:00:fc:c2:55:aa:ef:13:de:fe:4a:
         05:b3:82:97:b8:8f:b9:98:31:e5:76:2b:37:73:40:ff:dd:b8:
         03:a4:ac:c2:51:60:de:cc:f5:01:e8:56:94:71:33:5b:eb:ef:
         80:24:79:a0:8d:26:64:07:c5:27:90:bb:1f:3c:50:cf:82:f5:
         cd:f0:0f:da:0c:54:a8:30:e0:95:d9:8f:06:29:6a:87:3d:00:
         2e:29:25:4b:41:44:89:02:9c:7f:da:49:97:1b:f2:0a:c5:26:
         38:35:6a:13:80:16:bc:8e:3c:0c:4f:df:9a:71:82:13:a6:51:
         1f:63:a1:df:1a:46:d9:d0:42:f3:71:43:18:9d:44:5d:2a:ae:
         18:6d:1b:01:d7:3c:60:d2:19:e2:81:63:8d:f8:70:f5:71:2d:
         34:dc:30:aa:80:06:2d:90:82:36:26:28:1b:07:1a:6b:5f:85:
         6a:bf:8d:de:f8:75:45:19:af:4d:8c:e3:85:7a:5e:3a:80:34:
         6d:63:06:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:04:49 2026 by rpki-client