This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/3133312e3130382e3134332e302f32342d3234203d3e203631343930.roa
File:                     3133312e3130382e3134332e302f32342d3234203d3e203631343930.roa (raw, json)
Hash identifier:          GUYRfUDp4zx/WxYLKxY0/lEbFX0kAMIp0LNSAveRtRw=
Subject key identifier:   F1:96:09:A6:34:C7:37:CD:C6:21:D5:9D:6B:63:9F:93:37:D2:2F:39
Certificate issuer:       /CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
Certificate serial:       3AD101A7997964AF078DE98162E1AEC8978907A5
Authority key identifier: D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/3133312e3130382e3134332e302f32342d3234203d3e203631343930.roa
Signing time:             Tue 06 Jan 2026 18:57:44 +0000
ROA not before:           Tue 06 Jan 2026 18:52:44 +0000
ROA not after:            Tue 05 Jan 2027 18:57:44 +0000
asID:                     61490
IP address blocks:        131.108.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 09:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d1:01:a7:99:79:64:af:07:8d:e9:81:62:e1:ae:c8:97:89:07:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
        Validity
            Not Before: Jan  6 18:52:44 2026 GMT
            Not After : Jan  5 18:57:44 2027 GMT
        Subject: CN=F19609A634C737CDC621D59D6B639F9337D22F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:ae:5b:61:ed:3f:d3:1b:f9:97:49:55:bf:
                    25:8a:52:fa:ab:f7:06:a3:dd:22:06:c4:1f:0b:ed:
                    da:ee:4f:4a:78:cc:b7:b0:08:c9:66:be:2e:58:6b:
                    a5:0e:58:6f:ab:29:86:d6:07:b3:5b:73:0d:54:26:
                    a8:1d:5b:72:e9:e5:6f:a1:a7:ed:1d:de:de:24:ab:
                    32:c5:d4:4b:f2:0d:52:7e:bd:38:d8:68:8d:6e:05:
                    b4:0d:7b:fa:95:ed:07:99:90:5e:10:5d:93:8f:06:
                    bc:03:08:9f:e5:d6:aa:55:a7:7c:2e:cf:eb:23:c1:
                    41:3e:c0:a3:c7:28:a0:1f:51:43:75:5a:2f:1f:d8:
                    c6:92:f5:c9:ca:36:88:bb:b5:51:6e:0a:1c:e3:87:
                    83:12:8a:90:51:1d:96:04:8d:b8:e9:c8:7b:cb:6c:
                    88:71:9c:28:c8:e1:b8:bb:72:8c:85:80:8e:c4:a1:
                    1e:8e:49:c8:c0:c7:f7:0c:07:59:4d:b8:95:14:df:
                    4c:26:39:5f:7c:d7:bd:43:c3:02:d0:13:6e:d7:b8:
                    e3:09:05:88:d9:7b:ac:fa:b8:ac:ab:1c:18:4f:19:
                    13:dc:08:63:ab:61:99:04:14:d2:bf:96:c8:64:67:
                    52:a3:4d:47:ca:85:ba:dd:9d:bd:7a:16:9a:8d:ba:
                    8c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:96:09:A6:34:C7:37:CD:C6:21:D5:9D:6B:63:9F:93:37:D2:2F:39
            X509v3 Authority Key Identifier:
                keyid:D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/3133312e3130382e3134332e302f32342d3234203d3e203631343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:9a:e3:65:e4:47:96:47:1b:7e:1f:92:b8:ca:84:4b:e7:2b:
         7a:24:ba:32:ec:4c:d4:f3:9c:da:08:3c:40:ab:11:dd:fc:2f:
         c6:40:72:60:f7:eb:58:98:4e:b8:ff:58:3e:53:45:9f:41:cc:
         ad:54:ff:e0:29:84:18:30:8d:f1:87:b0:24:d6:7d:50:b9:38:
         8a:87:8b:c0:43:d8:4f:2a:61:82:cc:28:2b:ee:82:ef:ae:a5:
         de:89:5c:35:18:2f:ec:3f:15:90:10:9a:a6:b0:b1:3a:06:8a:
         f0:57:72:5a:f6:a1:7f:fd:d4:05:26:ab:bd:4a:05:3c:56:8c:
         5f:d4:85:78:d1:ee:d7:49:db:af:b0:37:5c:1b:31:2b:8c:4b:
         a0:29:88:a8:2b:eb:00:01:46:cd:60:e7:41:42:4b:5c:4d:66:
         3d:c3:fb:91:ff:d5:10:af:ad:fa:f8:a2:0d:49:1c:f2:59:2c:
         bf:46:60:f0:13:b3:b2:4a:41:86:cd:8e:65:23:88:db:59:d4:
         22:8d:9f:28:41:fd:67:90:78:a0:ff:83:0a:ba:28:57:8a:63:
         2a:5b:91:67:28:91:b9:9b:01:d0:cb:9c:ab:1f:9f:8f:6c:d3:
         f2:12:50:d2:17:da:e8:c6:41:84:13:d9:27:6b:58:1f:f0:92:
         0b:a9:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:38:32 2026 by rpki-client