This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3133312e3139362e3231312e302f32342d3234203d3e20323635363936.roa
File:                     3133312e3139362e3231312e302f32342d3234203d3e20323635363936.roa (raw, json)
Hash identifier:          zSJNLi6yM/hA0ckzfoHnINnfjKymuyEwGXpN/yjlVHo=
Subject key identifier:   C6:1B:90:AC:FD:06:5C:25:BA:59:5B:48:16:E8:36:B2:EB:DC:8B:79
Certificate issuer:       /CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Certificate serial:       7E1680A5588FD3B63458A99E2E45C265E6E3B88B
Authority key identifier: 0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3133312e3139362e3231312e302f32342d3234203d3e20323635363936.roa
Signing time:             Tue 06 Jan 2026 19:41:19 +0000
ROA not before:           Tue 06 Jan 2026 19:36:19 +0000
ROA not after:            Tue 05 Jan 2027 19:41:19 +0000
asID:                     265696
IP address blocks:        131.196.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 17:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:16:80:a5:58:8f:d3:b6:34:58:a9:9e:2e:45:c2:65:e6:e3:b8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
        Validity
            Not Before: Jan  6 19:36:19 2026 GMT
            Not After : Jan  5 19:41:19 2027 GMT
        Subject: CN=C61B90ACFD065C25BA595B4816E836B2EBDC8B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:04:f4:ef:44:d9:08:48:85:cd:62:29:c0:fa:
                    28:be:ea:b9:40:ef:30:73:26:a0:79:3f:ca:7a:1e:
                    6a:67:8f:f8:64:04:e4:ce:f1:2f:21:54:ee:fb:a4:
                    1a:52:00:d6:8a:f7:db:2d:9d:43:36:58:16:92:89:
                    6d:8d:5e:cc:71:d0:1e:06:66:0e:e3:45:fa:05:b9:
                    68:9c:83:4c:28:b4:2c:e5:be:b2:6a:70:65:d1:2e:
                    4b:64:92:a5:2b:a1:47:76:cd:bf:62:0e:27:25:58:
                    fe:bc:d6:22:b4:b4:88:a4:dd:34:84:8d:b0:eb:fd:
                    f0:39:79:ef:8b:0f:66:05:64:e1:db:e1:9b:ea:4e:
                    98:5d:29:7f:09:37:71:55:39:03:cb:ce:f7:47:ef:
                    98:7c:e6:1c:66:7a:a8:df:e8:62:b1:8b:61:93:47:
                    64:c4:4f:2f:24:33:4f:21:a1:c9:46:86:61:34:70:
                    d6:8e:cd:53:dd:33:b9:ff:d8:da:29:2c:45:37:1c:
                    9a:44:71:8a:a7:70:8d:02:47:c9:b1:5e:70:4e:04:
                    69:f7:0f:b2:70:b8:4a:7f:c7:5f:fe:19:fd:01:6d:
                    04:7e:a3:49:bf:67:ce:72:70:bc:f9:da:69:72:b8:
                    6a:4d:7a:04:bd:95:b1:1f:bd:93:8f:84:9a:45:3a:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1B:90:AC:FD:06:5C:25:BA:59:5B:48:16:E8:36:B2:EB:DC:8B:79
            X509v3 Authority Key Identifier:
                keyid:0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3133312e3139362e3231312e302f32342d3234203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:22:4c:ae:f3:4b:c9:61:2c:49:52:5a:04:c0:55:66:99:97:
         8d:f6:a2:47:1d:48:94:67:e9:50:f2:92:45:84:e6:4b:d5:2b:
         03:ab:b5:cb:f3:6d:2c:81:64:3c:1d:52:f0:9a:98:6e:d4:f4:
         aa:f6:ef:52:a6:11:24:45:9b:43:cd:ce:e4:b2:2a:f6:df:27:
         6e:63:54:98:13:3e:24:b9:32:ae:5d:3c:00:38:3c:22:0e:95:
         c9:10:e4:74:95:c5:84:1b:62:2b:80:6c:40:43:ef:ef:f5:42:
         dd:af:f7:ad:1b:ac:79:79:43:31:5a:ae:84:31:8a:b8:bc:5d:
         8e:45:9a:b7:36:d9:59:0d:a0:8b:b2:43:e0:1a:0e:bc:c6:d4:
         79:3d:a9:08:35:bf:25:b8:94:eb:8d:7f:6a:4a:5b:82:a2:37:
         9d:9b:b5:53:d6:23:25:c8:cb:a1:63:81:61:49:c6:35:1e:da:
         36:f7:bd:9d:e1:6a:92:f2:80:16:f6:5b:c9:fb:2f:f1:a1:fa:
         c7:c7:ac:8a:63:8f:af:6a:ec:23:b6:e1:18:cb:50:c1:a3:85:
         a4:46:10:1b:52:7a:0d:7c:5a:f6:7f:5f:ea:b1:05:b3:df:c5:
         77:36:7e:59:12:21:a4:c8:fe:29:60:be:b9:07:ab:a7:f1:ac:
         9d:ae:fd:75
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUfhaApViP07Y0WKmeLkXCZebjuIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ2MDkwM0I4Mzc1RkM1QzJDQjg5MTYzNUUwRUE4N0I1
MERBMzU5NTAeFw0yNjAxMDYxOTM2MTlaFw0yNzAxMDUxOTQxMTlaMDMxMTAvBgNV
BAMTKEM2MUI5MEFDRkQwNjVDMjVCQTU5NUI0ODE2RTgzNkIyRUJEQzhCNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXBPTvRNkISIXNYinA+ii+6rlA
7zBzJqB5P8p6Hmpnj/hkBOTO8S8hVO77pBpSANaK99stnUM2WBaSiW2NXsxx0B4G
Zg7jRfoFuWicg0wotCzlvrJqcGXRLktkkqUroUd2zb9iDiclWP681iK0tIik3TSE
jbDr/fA5ee+LD2YFZOHb4ZvqTphdKX8JN3FVOQPLzvdH75h85hxmeqjf6GKxi2GT
R2TETy8kM08hoclGhmE0cNaOzVPdM7n/2NopLEU3HJpEcYqncI0CR8mxXnBOBGn3
D7JwuEp/x1/+Gf0BbQR+o0m/Z85ycLz52mlyuGpNegS9lbEfvZOPhJpFOpWfAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUxhuQrP0GXCW6WVtIFug2suvci3kwHwYDVR0j
BBgwFoAUDWCQO4N1/FwsuJFjXg6oe1DaNZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81Q0U1Q0Q5RTQyRjk4QUM3OTdENjVFOTZBOUQwOUUzMUY1
RkJDNTg4NEQxRjgwMkZBRTgwQ0Y4RkQ1MEZERjlELzAvMEQ2MDkwM0I4Mzc1RkM1
QzJDQjg5MTYzNUUwRUE4N0I1MERBMzU5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDYwOTAzQjgzNzVGQzVDMkNC
ODkxNjM1RTBFQTg3QjUwREEzNTk1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUNFNUNEOUU0MkY5OEFDNzk3RDY1RTk2QTlEMDlFMzFGNUZCQzU4ODRE
MUY4MDJGQUU4MENGOEZENTBGREY5RC8wLzMxMzMzMTJlMzEzOTM2MmUzMjMxMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNjM5MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACD
xNMwDQYJKoZIhvcNAQELBQADggEBAKkiTK7zS8lhLElSWgTAVWaZl432okcdSJRn
6VDykkWE5kvVKwOrtcvzbSyBZDwdUvCamG7U9Kr271KmESRFm0PNzuSyKvbfJ25j
VJgTPiS5Mq5dPAA4PCIOlckQ5HSVxYQbYiuAbEBD7+/1Qt2v960brHl5QzFaroQx
iri8XY5Fmrc22VkNoIuyQ+AaDrzG1Hk9qQg1vyW4lOuNf2pKW4KiN52btVPWIyXI
y6FjgWFJxjUe2jb3vZ3hapLygBb2W8n7L/Gh+sfHrIpjj69q7CO24RjLUMGjhaRG
EBtSeg18WvZ/X+qxBbPfxXc2flkSIaTI/ilgvrkHq6fxrJ2u/XU=
-----END CERTIFICATE-----
Generated at Mon Jan 12 22:51:57 2026 by rpki-client