This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3134332e302e37362e302f32322d3234203d3e203131303134.roa
File:                     3134332e302e37362e302f32322d3234203d3e203131303134.roa (raw, json)
Hash identifier:          TWhpWHUQD3yBzhxWdGSJFdDYtXJExjf7I9ZiDJ99Q9M=
Subject key identifier:   73:65:32:94:D8:FD:9F:63:6C:53:44:E7:70:EA:EC:7C:D3:B7:4D:33
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       2AA2857369FC04CC2DFF96947FD2D235D9CD85C3
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3134332e302e37362e302f32322d3234203d3e203131303134.roa
Signing time:             Tue 06 Jan 2026 19:20:19 +0000
ROA not before:           Tue 06 Jan 2026 19:15:19 +0000
ROA not after:            Tue 05 Jan 2027 19:20:19 +0000
asID:                     11014
IP address blocks:        143.0.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 17:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a2:85:73:69:fc:04:cc:2d:ff:96:94:7f:d2:d2:35:d9:cd:85:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Jan  6 19:15:19 2026 GMT
            Not After : Jan  5 19:20:19 2027 GMT
        Subject: CN=73653294D8FD9F636C5344E770EAEC7CD3B74D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ec:a5:37:cb:5a:a0:e2:24:b4:3b:a1:8b:ce:
                    b5:8a:10:23:ef:c0:df:0c:e2:97:dc:ad:df:25:4d:
                    4b:eb:74:cb:2f:9f:58:5b:6c:af:9c:20:2a:52:3e:
                    a5:b9:12:7b:14:a1:c8:52:54:d7:c9:41:9e:35:d4:
                    92:31:bc:93:24:f8:0e:5e:4d:07:2f:eb:bc:a8:28:
                    96:e6:67:90:fc:0c:66:df:88:2b:5b:b2:d9:d4:b9:
                    18:39:bb:ad:82:70:de:34:83:75:8c:7b:46:ff:af:
                    b4:f4:c5:96:83:fd:e2:54:59:b9:b2:ce:b3:2e:2f:
                    46:4c:f9:36:57:e9:e3:03:b9:aa:1a:af:cd:be:9d:
                    e8:36:25:94:73:5c:1f:a1:92:fe:6f:62:1f:e2:ef:
                    af:b0:5f:d7:47:c7:13:04:fa:53:7c:db:64:e5:fd:
                    a6:f3:ff:f7:9d:59:d0:ab:d7:9c:08:3b:4b:5a:d6:
                    88:c2:19:08:d8:e1:00:b3:dc:a7:c8:50:b7:1a:4d:
                    51:af:8a:22:76:ad:3c:1e:0c:6c:eb:20:fd:62:ab:
                    e1:a7:d3:b0:5a:9c:75:9f:15:df:47:4e:08:9d:f9:
                    56:66:c9:d8:e7:8b:97:b0:63:98:93:64:73:53:53:
                    b3:ac:df:38:2a:fa:12:42:f6:c5:f2:21:44:b2:6a:
                    28:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:65:32:94:D8:FD:9F:63:6C:53:44:E7:70:EA:EC:7C:D3:B7:4D:33
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3134332e302e37362e302f32322d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:73:23:68:a7:48:a5:21:ba:03:23:bf:1b:3a:ef:10:a4:4c:
         00:a7:05:98:b6:36:76:02:89:29:15:b5:85:bf:26:78:3f:e9:
         8d:d7:dc:ec:3c:7d:c1:7d:ab:46:e0:f6:be:15:d5:9e:b0:1a:
         b5:b2:fd:75:bb:ca:c8:1f:0c:1b:9c:b6:b6:f6:df:21:cb:38:
         7d:ce:c7:b4:98:2c:48:1f:c2:b0:a3:fa:c8:ca:59:a7:af:49:
         7d:78:1a:09:6c:5c:b7:61:b3:ea:c3:71:71:fd:e7:7f:93:59:
         0f:55:a5:8e:3e:ba:09:9e:bf:cf:9d:17:fb:49:49:c5:2f:3e:
         4e:7b:2c:10:92:9b:7e:8d:31:51:a4:5c:30:fc:e0:d5:cf:8f:
         91:c1:82:df:f5:c4:39:05:45:02:f6:37:37:e0:8e:36:29:3e:
         72:97:71:52:a6:0f:2b:f4:ec:d3:93:d7:ce:31:21:68:f0:31:
         b5:6e:0b:4f:7c:c6:01:15:cf:c7:0d:9e:e3:66:cf:c6:86:f7:
         7c:e0:6c:9a:2f:e5:28:49:56:eb:9c:5a:4d:80:48:db:cb:3a:
         78:37:17:46:24:03:d3:ab:73:7a:84:0d:14:5b:8a:85:84:62:
         92:7e:1d:87:0e:4a:c6:0e:83:64:70:9f:85:3e:2c:5e:24:b1:
         89:cf:ec:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:52:58 2026 by rpki-client