This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/3133312e3130382e302e302f32322d3234203d3e203631343837.roa
File:                     3133312e3130382e302e302f32322d3234203d3e203631343837.roa (raw, json)
Hash identifier:          APR+r0LmK0qmYICIe6wxJKLCWrob8If59Q9MMDhBDWw=
Subject key identifier:   E3:57:EB:2F:91:34:BA:11:C7:37:02:8E:F7:AB:51:8E:DB:7D:D7:D9
Certificate issuer:       /CN=1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE
Certificate serial:       71C14E1F7BCE70F56BB895854635F7234CB3D2B3
Authority key identifier: 1F:23:04:7C:7E:B6:E1:CE:F1:8D:DE:AF:82:09:86:08:FD:96:EF:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/3133312e3130382e302e302f32322d3234203d3e203631343837.roa
Signing time:             Tue 06 Jan 2026 19:18:24 +0000
ROA not before:           Tue 06 Jan 2026 19:13:24 +0000
ROA not after:            Tue 05 Jan 2027 19:18:24 +0000
asID:                     61487
IP address blocks:        131.108.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c1:4e:1f:7b:ce:70:f5:6b:b8:95:85:46:35:f7:23:4c:b3:d2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE
        Validity
            Not Before: Jan  6 19:13:24 2026 GMT
            Not After : Jan  5 19:18:24 2027 GMT
        Subject: CN=E357EB2F9134BA11C737028EF7AB518EDB7DD7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:5e:63:69:44:7b:d9:cc:8c:dc:a0:76:73:
                    bf:b0:fa:93:fc:98:19:12:0e:60:34:4f:cd:f6:3c:
                    f0:b5:cf:e9:7d:63:c2:df:97:94:b1:d5:af:bd:ee:
                    14:c3:8a:56:ac:07:c0:4a:fb:06:9b:b2:f6:0c:61:
                    a2:9a:e5:d6:50:99:e6:a7:4a:e8:bf:80:b9:76:f4:
                    c7:d4:21:af:cb:53:14:3b:c0:28:26:0c:c4:61:fe:
                    ab:3f:80:54:6e:ad:d1:52:73:1a:9b:90:78:0b:dd:
                    bf:de:2c:0f:18:86:2f:9f:71:73:af:af:7a:0c:48:
                    d0:b5:80:91:e2:ed:9f:41:f5:87:44:aa:5e:f3:84:
                    d6:9e:1c:d9:5d:2d:a1:aa:07:37:09:49:48:54:84:
                    38:07:07:0f:f6:9f:6a:61:c8:d5:cf:55:c8:b2:a7:
                    f3:5b:fb:66:77:44:7d:39:bf:b7:12:bb:35:3c:c3:
                    b9:0c:d8:d2:09:58:15:a9:cb:e2:cf:73:30:b9:cd:
                    f2:e3:fd:6c:cf:69:3c:a3:63:a7:2b:70:4a:bb:89:
                    db:2c:d8:06:f7:95:d5:ef:3b:1c:41:ca:41:26:2c:
                    01:1d:7b:9a:45:0e:2e:bf:33:a8:83:a9:be:73:e8:
                    e0:e4:57:a7:11:46:91:3f:40:2b:31:80:92:c4:61:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:57:EB:2F:91:34:BA:11:C7:37:02:8E:F7:AB:51:8E:DB:7D:D7:D9
            X509v3 Authority Key Identifier:
                keyid:1F:23:04:7C:7E:B6:E1:CE:F1:8D:DE:AF:82:09:86:08:FD:96:EF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/3133312e3130382e302e302f32322d3234203d3e203631343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:5f:05:e1:f0:4c:dc:ed:92:52:f8:a7:a3:4c:72:f0:59:e1:
         1f:0d:f3:27:3f:85:ff:b4:af:ac:e6:bf:8b:ea:d1:dd:4d:e7:
         42:2f:26:22:2a:77:54:20:e7:b3:2c:b1:9b:5e:d8:bb:53:8d:
         bc:00:8d:b7:bb:b2:e9:23:01:34:57:c5:11:6f:b3:21:5c:02:
         b1:ef:56:06:b1:86:6a:c9:72:76:d1:88:2b:24:f6:14:50:b6:
         30:1a:ac:78:a2:64:dc:40:59:92:e9:07:51:b2:a2:d3:de:2b:
         a0:41:4b:c2:91:6b:ca:cf:49:00:64:fc:7c:bb:f1:15:04:28:
         e3:a8:14:6d:4c:f8:89:96:72:9d:32:9b:6a:8a:52:86:f0:58:
         3c:f0:94:02:0e:34:e5:f6:c8:54:74:fd:df:d9:bc:07:db:53:
         e4:fb:c7:07:47:bc:4f:e1:01:12:82:f0:50:fd:0f:a7:a0:52:
         cd:db:cb:b5:58:36:4c:bd:2c:88:1f:c4:a0:a4:cb:46:0b:0e:
         fa:38:14:b8:0a:51:e0:95:34:61:18:19:69:a9:6a:87:5d:a4:
         64:99:1f:24:79:c0:c6:4a:94:32:ca:e1:47:34:36:6f:f3:7a:
         e0:c9:1b:87:19:fa:43:4a:6d:e9:8f:23:d5:83:15:1e:a2:73:
         e9:66:d6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:53:02 2026 by rpki-client