This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/3133312e3130382e3134322e302f32342d3234203d3e203631343930.roa
File:                     3133312e3130382e3134322e302f32342d3234203d3e203631343930.roa (raw, json)
Hash identifier:          mkXSPsyUxVmTObL8MQkMLxKBc2+Otz7jxKTrXcsj2nI=
Subject key identifier:   8D:C6:D8:BF:C1:C0:D3:46:DF:4A:E2:21:BC:87:0F:81:0A:10:74:0F
Certificate issuer:       /CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
Certificate serial:       1467BD852F215C6F206BBEDD831F2B3C7FF16398
Authority key identifier: D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/3133312e3130382e3134322e302f32342d3234203d3e203631343930.roa
Signing time:             Tue 06 Jan 2026 18:57:44 +0000
ROA not before:           Tue 06 Jan 2026 18:52:44 +0000
ROA not after:            Tue 05 Jan 2027 18:57:44 +0000
asID:                     61490
IP address blocks:        131.108.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 09:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:67:bd:85:2f:21:5c:6f:20:6b:be:dd:83:1f:2b:3c:7f:f1:63:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
        Validity
            Not Before: Jan  6 18:52:44 2026 GMT
            Not After : Jan  5 18:57:44 2027 GMT
        Subject: CN=8DC6D8BFC1C0D346DF4AE221BC870F810A10740F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:00:2d:db:74:70:61:45:7c:33:0f:0e:bc:
                    de:3e:79:b2:68:4e:e6:0a:c1:dc:74:8f:1d:3a:2c:
                    05:ec:b2:f7:f5:58:7a:a6:b3:91:62:60:17:36:e8:
                    0c:0a:f8:dc:d3:95:df:a4:b9:19:57:d7:1d:d3:61:
                    ee:6d:05:9b:f9:6f:81:25:8f:c0:7b:b9:ac:c5:09:
                    4b:33:ba:d7:1c:87:c2:2b:ea:c6:2a:bb:bf:cd:a4:
                    41:ce:6d:bf:73:27:14:b9:fb:9e:93:62:75:7f:4a:
                    68:d6:16:05:ce:08:e1:98:8a:e0:90:ee:c6:c6:c5:
                    22:47:68:ad:e9:fe:24:51:90:50:7b:c4:b4:0e:3d:
                    54:ee:10:69:de:18:95:c9:51:c5:d1:b8:65:5d:c0:
                    78:8f:e2:04:80:c2:93:e5:70:f8:71:d5:8b:6e:7e:
                    83:14:d6:0c:67:65:fc:52:34:aa:23:cc:f5:b9:43:
                    5a:e7:b0:66:30:34:7d:0f:ef:ad:60:a6:ac:f8:93:
                    b0:94:a5:83:1a:77:03:b2:57:41:79:26:ac:e5:b4:
                    32:b9:9b:7a:8d:e1:e5:83:91:ee:f7:5e:92:00:36:
                    71:d5:4b:48:ef:59:05:6d:27:39:8f:b9:c3:d9:17:
                    f4:4f:59:59:3d:76:67:fc:77:b1:ce:94:f6:71:5a:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C6:D8:BF:C1:C0:D3:46:DF:4A:E2:21:BC:87:0F:81:0A:10:74:0F
            X509v3 Authority Key Identifier:
                keyid:D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/3133312e3130382e3134322e302f32342d3234203d3e203631343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f2:c7:5d:b9:ac:0d:cf:14:78:22:ca:5d:c7:75:d9:91:a2:
         b7:cc:b2:d3:ce:e6:b5:40:bb:71:3c:96:f3:28:7d:86:02:35:
         81:7d:60:28:f8:8d:98:06:b6:f3:d5:17:33:0f:f5:3e:86:8c:
         fe:9b:32:2e:ff:98:8c:b9:fd:80:e9:73:0b:a1:e7:35:8f:9a:
         eb:3a:bf:78:bb:f7:3f:b0:fe:cb:43:0c:ea:9f:e7:27:ae:ce:
         c7:83:8e:2c:c6:7f:d3:78:f0:c6:e9:ef:d8:c9:63:25:0d:82:
         7c:5d:e0:21:02:23:d0:db:1b:56:a0:b4:31:d0:35:2b:43:99:
         fc:f2:30:df:8a:ba:a4:5c:ee:b3:a1:3c:2b:a9:61:1d:1f:63:
         9f:09:aa:c1:fd:92:8c:0e:63:61:0a:17:89:c1:4f:5d:50:67:
         a6:01:79:8c:e8:5c:af:5c:a4:3b:d9:4a:38:ae:27:28:fd:0a:
         21:dd:a3:23:fa:37:58:a4:3d:df:38:91:d4:85:90:19:5f:f9:
         da:d1:01:bb:47:d1:1c:56:1d:65:56:6d:9f:65:98:a9:aa:eb:
         ce:3e:30:2f:d0:2f:c4:c6:89:01:61:42:17:7c:ff:03:ce:77:
         f1:06:d1:59:52:d8:d6:7b:20:80:3c:d5:e0:21:b6:52:27:4f:
         20:f0:6e:26
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFGe9hS8hXG8ga77dgx8rPH/xY5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc0RUVDMzMyODAyNTcyMDQ3Q0JFMEZBQjEzRjNDRjJC
QTQxN0FGRjAeFw0yNjAxMDYxODUyNDRaFw0yNzAxMDUxODU3NDRaMDMxMTAvBgNV
BAMTKDhEQzZEOEJGQzFDMEQzNDZERjRBRTIyMUJDODcwRjgxMEExMDc0MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY+AAt23RwYUV8Mw8OvN4+ebJo
TuYKwdx0jx06LAXssvf1WHqms5FiYBc26AwK+NzTld+kuRlX1x3TYe5tBZv5b4El
j8B7uazFCUszutcch8Ir6sYqu7/NpEHObb9zJxS5+56TYnV/SmjWFgXOCOGYiuCQ
7sbGxSJHaK3p/iRRkFB7xLQOPVTuEGneGJXJUcXRuGVdwHiP4gSAwpPlcPhx1Ytu
foMU1gxnZfxSNKojzPW5Q1rnsGYwNH0P761gpqz4k7CUpYMadwOyV0F5JqzltDK5
m3qN4eWDke73XpIANnHVS0jvWQVtJzmPucPZF/RPWVk9dmf8d7HOlPZxWpnXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUjcbYv8HA00bfSuIhvIcPgQoQdA8wHwYDVR0j
BBgwFoAU107sMygCVyBHy+D6sT888rpBev8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOTZDQUNGNERCRUU3NzUwMjk0MEZBRDUwMjc5NzIzQUYw
REExMzlFNUM3NUE2QjVCQ0VCQTZCMUMxNDNEQjg4LzAvRDc0RUVDMzMyODAyNTcy
MDQ3Q0JFMEZBQjEzRjNDRjJCQTQxN0FGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENzRFRUMzMzI4MDI1NzIwNDdD
QkUwRkFCMTNGM0NGMkJBNDE3QUZGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjk2Q0FDRjREQkVFNzc1MDI5NDBGQUQ1MDI3OTcyM0FGMERBMTM5RTVD
NzVBNkI1QkNFQkE2QjFDMTQzREI4OC8wLzMxMzMzMTJlMzEzMDM4MmUzMTM0MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzQzOTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg2yO
MA0GCSqGSIb3DQEBCwUAA4IBAQAa8sdduawNzxR4Ispdx3XZkaK3zLLTzua1QLtx
PJbzKH2GAjWBfWAo+I2YBrbz1RczD/U+hoz+mzIu/5iMuf2A6XMLoec1j5rrOr94
u/c/sP7LQwzqn+cnrs7Hg44sxn/TePDG6e/YyWMlDYJ8XeAhAiPQ2xtWoLQx0DUr
Q5n88jDfirqkXO6zoTwrqWEdH2OfCarB/ZKMDmNhCheJwU9dUGemAXmM6FyvXKQ7
2Uo4rico/Qoh3aMj+jdYpD3fOJHUhZAZX/na0QG7R9EcVh1lVm2fZZipquvOPjAv
0C/ExokBYUIXfP8DznfxBtFZUtjWeyCAPNXgIbZSJ08g8G4m
-----END CERTIFICATE-----
Generated at Mon Jan 12 03:34:18 2026 by rpki-client