This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/3134332e3230382e3133322e302f32322d3234203d3e203237383433.roa
File:                     3134332e3230382e3133322e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier:          5UZNGWA8XVLhvTYRxPGIU8GjyfMkOaNKqGhEneDGOSY=
Subject key identifier:   C7:91:24:9E:B8:77:A2:BA:45:32:ED:2A:D6:93:35:A8:AB:38:4C:0A
Certificate issuer:       /CN=1D8A96BE43E9FE347873058CD625D12612C5B798
Certificate serial:       6DC031CD257BF18E4D2355B33CECDE667C8D613A
Authority key identifier: 1D:8A:96:BE:43:E9:FE:34:78:73:05:8C:D6:25:D1:26:12:C5:B7:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/3134332e3230382e3133322e302f32322d3234203d3e203237383433.roa
Signing time:             Tue 06 Jan 2026 19:14:36 +0000
ROA not before:           Tue 06 Jan 2026 19:09:36 +0000
ROA not after:            Tue 05 Jan 2027 19:14:36 +0000
asID:                     27843
IP address blocks:        143.208.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 13:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c0:31:cd:25:7b:f1:8e:4d:23:55:b3:3c:ec:de:66:7c:8d:61:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8A96BE43E9FE347873058CD625D12612C5B798
        Validity
            Not Before: Jan  6 19:09:36 2026 GMT
            Not After : Jan  5 19:14:36 2027 GMT
        Subject: CN=C791249EB877A2BA4532ED2AD69335A8AB384C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:d5:9e:01:d2:c7:1e:47:aa:8e:f4:0a:43:
                    36:fd:0d:b9:43:52:04:65:f4:d1:6a:14:97:03:3c:
                    9f:fc:8b:ec:11:3d:71:f5:6d:6e:6c:2e:47:34:49:
                    44:98:76:5f:cf:98:bf:08:ed:7d:8d:cf:9b:fc:46:
                    01:fd:b0:07:2e:62:2f:b2:95:cc:d1:27:55:c3:09:
                    5f:e6:f4:83:d0:b3:61:67:eb:ca:9d:a7:e3:2a:97:
                    29:fd:55:6c:f2:c3:7f:9e:61:c8:b0:49:4b:6d:ba:
                    2f:89:85:f4:07:58:6b:60:5e:44:c2:a7:98:7a:6c:
                    53:7b:93:b4:b5:22:4c:56:15:8a:a1:03:54:02:b7:
                    8f:1f:a4:86:3c:ec:df:ef:d1:1f:7e:da:3c:76:89:
                    84:e8:99:68:97:08:4a:40:7f:8f:84:14:26:11:83:
                    4e:60:f7:43:60:3d:b1:c5:b3:93:9d:2a:fe:80:b5:
                    0a:af:d0:60:23:62:c9:65:70:a5:f5:c2:8d:bd:cd:
                    4f:68:f4:13:22:1e:82:f5:04:81:b4:ec:f0:b8:07:
                    db:9b:6b:42:ba:a7:23:e2:ea:1f:da:9a:47:ed:48:
                    9c:91:2f:29:0e:62:2c:43:ab:b1:80:05:e9:43:65:
                    87:cd:85:80:4d:cf:4a:dc:30:7a:4c:20:3c:5f:d9:
                    cb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:91:24:9E:B8:77:A2:BA:45:32:ED:2A:D6:93:35:A8:AB:38:4C:0A
            X509v3 Authority Key Identifier:
                keyid:1D:8A:96:BE:43:E9:FE:34:78:73:05:8C:D6:25:D1:26:12:C5:B7:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/3134332e3230382e3133322e302f32322d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:e8:2f:98:3e:ff:7d:90:6e:4d:94:9c:1a:ae:8a:77:9d:5d:
         d1:5e:e7:7c:79:c0:5d:39:4b:a0:a6:bd:f1:09:d9:f2:f7:60:
         b4:e0:b7:8e:fb:84:d5:46:93:47:56:b5:25:a1:2f:a7:4f:1e:
         fc:e8:d3:d8:19:61:e7:59:21:38:d1:b3:20:54:3b:90:b6:2c:
         e6:86:e0:f5:de:0e:af:1f:c0:93:31:fa:2c:b1:7a:51:c6:96:
         ec:74:ea:f0:23:87:ab:95:ed:36:39:d9:33:c5:c4:ca:ef:ee:
         dd:a4:76:d0:d6:72:c0:c1:8c:71:3a:e1:f0:a6:3f:ef:9e:03:
         04:a9:0d:fc:4d:2d:08:51:a9:81:c1:a5:d7:71:3b:c1:90:4c:
         e8:e5:3c:dc:9c:62:6b:57:61:aa:3a:a9:d0:fd:76:2b:d4:dd:
         9c:a1:c8:2d:34:0e:84:57:4e:1e:30:27:4c:88:20:33:61:a6:
         08:27:59:db:11:a1:1d:bc:9f:47:38:54:d5:5a:8a:45:1e:d6:
         de:4f:62:16:f1:55:eb:ff:80:75:46:70:57:da:0f:3c:9d:5e:
         fe:db:c5:a7:55:fa:7b:82:cf:8d:3f:2c:c4:67:bf:3c:56:04:
         d7:dd:23:bc:7e:77:d8:53:ca:75:6e:61:83:3c:8b:bf:56:71:
         d9:fb:a0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:06:33 2026 by rpki-client