This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/3133312e3130302e3138302e302f32322d3234203d3e20323632313837.roa
File:                     3133312e3130302e3138302e302f32322d3234203d3e20323632313837.roa (raw, json)
Hash identifier:          EzJ54+J+E5v4g4DJQ3FZb2DRlU16lbjpr7z8lx4NDVs=
Subject key identifier:   7F:ED:62:F1:CD:D3:8E:AD:0A:0F:88:45:9D:4C:B4:CD:2C:B2:38:DB
Certificate issuer:       /CN=6C7F5FF558448E94BE5C9035CCB3AACE6543C218
Certificate serial:       20E6256D71B884AA5564EC5324088920EA5C1E20
Authority key identifier: 6C:7F:5F:F5:58:44:8E:94:BE:5C:90:35:CC:B3:AA:CE:65:43:C2:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/3133312e3130302e3138302e302f32322d3234203d3e20323632313837.roa
Signing time:             Tue 06 Jan 2026 19:33:40 +0000
ROA not before:           Tue 06 Jan 2026 19:28:40 +0000
ROA not after:            Tue 05 Jan 2027 19:33:40 +0000
asID:                     262187
IP address blocks:        131.100.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e6:25:6d:71:b8:84:aa:55:64:ec:53:24:08:89:20:ea:5c:1e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7F5FF558448E94BE5C9035CCB3AACE6543C218
        Validity
            Not Before: Jan  6 19:28:40 2026 GMT
            Not After : Jan  5 19:33:40 2027 GMT
        Subject: CN=7FED62F1CDD38EAD0A0F88459D4CB4CD2CB238DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d2:3d:16:c3:57:c1:78:f7:4f:18:c2:a0:57:
                    c0:4b:3e:6a:b1:d3:99:8d:99:54:a4:af:d4:f9:72:
                    28:4d:d6:0e:6f:fc:fa:7f:81:5f:28:83:c5:d0:e7:
                    60:08:c2:fd:53:0e:77:69:76:ac:72:38:9c:19:93:
                    f2:0f:f2:81:ba:80:f3:9f:0e:dc:12:9d:28:2a:e4:
                    39:f0:6c:45:be:df:69:49:91:c3:aa:dd:71:3c:af:
                    45:18:f4:db:38:ba:17:66:33:3c:7a:e6:0d:de:39:
                    4c:dd:e6:3b:a2:be:f3:93:e6:6e:d9:46:cf:82:3b:
                    2f:1b:e8:89:16:f3:7f:c2:97:0a:fa:2a:96:71:12:
                    2c:77:e2:01:2f:2c:86:56:6d:4b:42:2b:ff:23:82:
                    45:39:0c:17:e2:cc:2f:3c:7d:13:b6:b3:dd:a9:ba:
                    eb:34:2b:47:d8:6a:6e:45:bb:d9:55:91:54:cc:73:
                    5a:81:2f:8d:94:29:3f:9b:6d:60:5f:e2:8d:02:86:
                    81:c2:ae:1b:af:fa:09:af:a4:12:74:d7:11:14:15:
                    a5:9c:59:5e:c4:fb:6a:55:dd:af:6f:f8:a6:c9:91:
                    1a:cc:22:a4:78:a4:12:e7:40:09:85:a0:a9:93:22:
                    eb:dd:f7:a4:09:ce:09:43:9f:65:be:98:87:7a:9d:
                    90:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:ED:62:F1:CD:D3:8E:AD:0A:0F:88:45:9D:4C:B4:CD:2C:B2:38:DB
            X509v3 Authority Key Identifier:
                keyid:6C:7F:5F:F5:58:44:8E:94:BE:5C:90:35:CC:B3:AA:CE:65:43:C2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/3133312e3130302e3138302e302f32322d3234203d3e20323632313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:d0:3e:35:7d:cd:a0:1b:29:3d:ba:89:56:80:f0:df:63:63:
         52:20:3e:db:d4:1a:de:57:ba:3d:9e:76:61:9d:5e:26:47:b0:
         43:00:f3:6d:eb:e4:cc:9e:b7:14:3e:40:f5:7d:69:70:88:e8:
         09:cd:77:5a:fc:d3:44:2b:87:86:31:a0:65:84:01:06:84:2e:
         8f:6b:68:8a:c2:de:a3:d0:96:54:0a:34:e8:77:7e:bf:c1:b4:
         b4:97:96:71:5b:6a:09:15:5a:8c:b4:b9:57:33:bc:a2:bf:df:
         05:72:4f:ad:1a:6b:af:bc:cb:5e:36:2c:14:48:9f:06:08:30:
         96:79:9e:e9:41:2e:78:9e:96:2a:aa:2d:bb:d2:fd:49:2b:44:
         30:e2:d7:d0:e0:dd:db:da:78:6d:f8:ca:a4:13:7b:88:64:11:
         d0:aa:4f:31:1a:b7:3a:21:bb:cd:7f:55:48:bc:87:d9:2a:a4:
         c2:b2:2a:42:97:bb:a9:ce:6a:60:ca:16:a0:cb:7d:88:7a:6e:
         8a:74:fa:ef:8a:3a:a0:a4:a9:52:87:52:af:ac:e3:2b:0f:68:
         f6:c5:23:03:a6:e5:c3:4d:2d:54:d2:75:0a:49:28:a6:7b:26:
         6b:51:6c:a4:8d:7d:1f:e1:b1:16:bf:c1:e9:07:36:ab:ed:12:
         69:73:14:b1
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUIOYlbXG4hKpVZOxTJAiJIOpcHiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM3RjVGRjU1ODQ0OEU5NEJFNUM5MDM1Q0NCM0FBQ0U2
NTQzQzIxODAeFw0yNjAxMDYxOTI4NDBaFw0yNzAxMDUxOTMzNDBaMDMxMTAvBgNV
BAMTKDdGRUQ2MkYxQ0REMzhFQUQwQTBGODg0NTlENENCNENEMkNCMjM4REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV0j0Ww1fBePdPGMKgV8BLPmqx
05mNmVSkr9T5cihN1g5v/Pp/gV8og8XQ52AIwv1TDndpdqxyOJwZk/IP8oG6gPOf
DtwSnSgq5DnwbEW+32lJkcOq3XE8r0UY9Ns4uhdmMzx65g3eOUzd5juivvOT5m7Z
Rs+COy8b6IkW83/Clwr6KpZxEix34gEvLIZWbUtCK/8jgkU5DBfizC88fRO2s92p
uus0K0fYam5Fu9lVkVTMc1qBL42UKT+bbWBf4o0ChoHCrhuv+gmvpBJ01xEUFaWc
WV7E+2pV3a9v+KbJkRrMIqR4pBLnQAmFoKmTIuvd96QJzglDn2W+mId6nZARAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUf+1i8c3Tjq0KD4hFnUy0zSyyONswHwYDVR0j
BBgwFoAUbH9f9VhEjpS+XJA1zLOqzmVDwhgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zODUwQzg0NUFBOEIyMUFCRjUyQ0ZFRTIyMzhGRDhBQTBG
MDJGREU1Njg5NkE1MzIyNTlGMUQyMEE0QUQwMUEyLzAvNkM3RjVGRjU1ODQ0OEU5
NEJFNUM5MDM1Q0NCM0FBQ0U2NTQzQzIxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QzdGNUZGNTU4NDQ4RTk0QkU1
QzkwMzVDQ0IzQUFDRTY1NDNDMjE4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzg1MEM4NDVBQThCMjFBQkY1MkNGRUUyMjM4RkQ4QUEwRjAyRkRFNTY4
OTZBNTMyMjU5RjFEMjBBNEFEMDFBMi8wLzMxMzMzMTJlMzEzMDMwMmUzMTM4MzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM4Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKD
ZLQwDQYJKoZIhvcNAQELBQADggEBAGLQPjV9zaAbKT26iVaA8N9jY1IgPtvUGt5X
uj2edmGdXiZHsEMA823r5MyetxQ+QPV9aXCI6AnNd1r800Qrh4YxoGWEAQaELo9r
aIrC3qPQllQKNOh3fr/BtLSXlnFbagkVWoy0uVczvKK/3wVyT60aa6+8y142LBRI
nwYIMJZ5nulBLnieliqqLbvS/UkrRDDi19Dg3dvaeG34yqQTe4hkEdCqTzEatzoh
u81/VUi8h9kqpMKyKkKXu6nOamDKFqDLfYh6bop0+u+KOqCkqVKHUq+s4ysPaPbF
IwOm5cNNLVTSdQpJKKZ7JmtRbKSNfR/hsRa/wekHNqvtEmlzFLE=
-----END CERTIFICATE-----
Generated at Mon Jan 12 11:01:25 2026 by rpki-client