This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3136302e302f32342d3234203d3e20323632323337.roa
File:                     3136312e302e3136302e302f32342d3234203d3e20323632323337.roa (raw, json)
Hash identifier:          33zCi7apq/tdbtLB+0iBBcWMYrVvb9tqRMHwyspDpYM=
Subject key identifier:   4C:00:BB:C1:17:E5:96:DC:DC:8A:F3:07:66:2C:2A:13:CD:04:E8:A4
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       60A02141888AC108694B0FAABA684FACD3A14879
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3136302e302f32342d3234203d3e20323632323337.roa
Signing time:             Tue 06 Jan 2026 19:08:04 +0000
ROA not before:           Tue 06 Jan 2026 19:03:04 +0000
ROA not after:            Tue 05 Jan 2027 19:08:04 +0000
asID:                     262237
IP address blocks:        161.0.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 13:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a0:21:41:88:8a:c1:08:69:4b:0f:aa:ba:68:4f:ac:d3:a1:48:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Jan  6 19:03:04 2026 GMT
            Not After : Jan  5 19:08:04 2027 GMT
        Subject: CN=4C00BBC117E596DCDC8AF307662C2A13CD04E8A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:87:a7:71:9e:86:b5:eb:a3:3e:3a:64:3f:
                    e5:ef:7a:18:df:91:be:c6:cd:36:0f:05:70:37:2c:
                    8a:cb:28:db:7a:8d:97:0e:e7:75:f4:0a:19:54:d7:
                    bd:4f:a0:38:52:3f:0b:85:b3:e3:3b:48:63:d8:a5:
                    56:5a:d6:ba:a1:56:e9:76:c9:db:34:69:f9:6e:52:
                    45:be:9a:37:d7:05:76:98:c4:f3:d6:5a:e2:ab:01:
                    fe:42:c4:85:d9:dd:e7:e5:95:bd:1f:d1:fe:af:2c:
                    2e:9c:66:16:5d:f5:d2:73:cc:7a:cc:c7:44:93:3f:
                    68:20:3f:51:a9:3e:7a:15:a9:2c:a1:0a:c5:27:ff:
                    ce:52:15:ad:af:0e:df:79:5a:af:2b:6f:c0:bc:4a:
                    33:70:84:93:a5:d1:25:05:17:a4:b9:42:1a:f5:73:
                    0f:18:99:ef:88:1a:a5:69:97:2c:4d:94:1a:fe:05:
                    39:29:fd:1c:3a:6e:7f:db:af:92:ff:00:78:30:5a:
                    63:ca:ce:07:fe:a1:bc:5b:25:fa:e0:50:38:57:db:
                    56:b2:0d:cc:28:2e:65:48:38:4d:19:d9:7b:4a:04:
                    29:11:41:d9:56:40:df:f8:c1:bf:67:30:f8:60:9a:
                    09:de:39:ee:9b:8c:21:70:fb:d2:8d:0b:05:23:dd:
                    fe:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:00:BB:C1:17:E5:96:DC:DC:8A:F3:07:66:2C:2A:13:CD:04:E8:A4
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/3136312e302e3136302e302f32342d3234203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:7b:fa:90:86:a3:fa:22:eb:5e:62:29:4d:50:dd:78:44:
         e5:a3:a2:a6:c5:44:d8:5c:dc:8c:f3:77:5b:ea:78:9e:25:d6:
         2e:5e:4f:e7:a0:ed:e4:e2:e0:b3:3d:61:3c:e0:a2:02:2a:3e:
         1b:7e:c2:fc:1a:e8:15:06:38:f5:83:a2:9f:5d:42:c0:4c:73:
         a6:09:64:c3:f3:bc:8b:f4:12:38:13:e6:25:0b:43:0e:2e:bd:
         a2:68:d3:f2:c8:c9:ed:c4:c4:3f:10:0b:a5:34:ad:c5:81:e0:
         8d:dc:92:1b:33:4c:c3:4a:09:a5:97:0d:6a:2a:1c:36:d1:0e:
         a2:3b:c9:bf:20:72:b5:45:f4:2f:87:df:b6:c3:a6:d0:61:5b:
         3a:f0:20:41:5a:6b:a1:da:9a:ab:a3:39:b5:86:e6:a2:10:b3:
         c8:cc:28:ce:7b:b2:8d:73:9b:d0:65:f1:61:59:4c:18:d3:50:
         ea:79:0a:ed:49:00:2f:46:82:c2:18:13:00:22:9e:2d:89:4d:
         78:29:94:3e:d6:c3:b4:42:d1:7a:6a:f6:94:7f:02:d0:d4:e8:
         c7:11:24:8f:4a:68:00:31:88:86:48:90:91:47:85:fc:61:10:
         1f:b8:ea:80:89:5a:00:5b:88:41:29:8a:9b:cf:cf:ef:e5:20:
         87:30:ff:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:08:29 2026 by rpki-client