This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/3133312e3130382e342e302f32322d3234203d3e20333934363834.roa
File:                     3133312e3130382e342e302f32322d3234203d3e20333934363834.roa (raw, json)
Hash identifier:          4bj55bpk+KsfrDe8ZWIXYzRJ3zGkuPonKPGOMDrkjqo=
Subject key identifier:   F7:F9:49:00:56:ED:C2:B5:4B:D8:A3:42:96:13:E5:8C:32:7C:38:0B
Certificate issuer:       /CN=DC17BDE9178A893A0E44505700003A43E9C81665
Certificate serial:       53C84D01A62DEAE1F7EACC5AE7F41F84E41AF0C2
Authority key identifier: DC:17:BD:E9:17:8A:89:3A:0E:44:50:57:00:00:3A:43:E9:C8:16:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/3133312e3130382e342e302f32322d3234203d3e20333934363834.roa
Signing time:             Tue 06 Jan 2026 19:37:50 +0000
ROA not before:           Tue 06 Jan 2026 19:32:50 +0000
ROA not after:            Tue 05 Jan 2027 19:37:50 +0000
asID:                     394684
IP address blocks:        131.108.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 07:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c8:4d:01:a6:2d:ea:e1:f7:ea:cc:5a:e7:f4:1f:84:e4:1a:f0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC17BDE9178A893A0E44505700003A43E9C81665
        Validity
            Not Before: Jan  6 19:32:50 2026 GMT
            Not After : Jan  5 19:37:50 2027 GMT
        Subject: CN=F7F9490056EDC2B54BD8A3429613E58C327C380B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:76:87:5c:79:29:29:26:2e:d3:a5:04:06:24:
                    6f:f8:18:87:63:25:b3:6e:98:81:42:a5:aa:0f:25:
                    4c:fe:54:fa:d2:09:94:4b:01:c2:c4:9f:c7:22:88:
                    1f:3d:ae:12:22:2f:1b:74:b3:73:25:18:e2:e2:81:
                    0a:cc:1a:b5:c7:68:f6:16:2a:40:52:77:f9:2c:27:
                    28:31:61:bc:44:29:1d:0a:b5:64:87:d0:d4:9c:2c:
                    c2:1a:dd:4d:b9:0e:93:fd:87:24:a4:67:08:b9:f1:
                    7b:fc:e9:67:b5:3a:f6:4c:6d:b3:58:9d:2b:a6:10:
                    f7:6c:23:9e:01:f8:23:9c:6c:0f:06:3e:f3:aa:35:
                    a0:54:69:33:6d:41:6e:e8:16:d1:6c:13:8b:0a:00:
                    fa:d4:3a:e5:37:3f:fe:4f:56:1c:73:e8:b0:aa:2b:
                    c2:c0:41:27:b8:d8:20:83:be:42:3b:72:84:ec:33:
                    dc:99:60:0e:5b:13:c6:4e:9e:5b:34:91:6e:0e:9a:
                    b6:19:79:cd:33:e0:f1:f5:69:37:f9:ab:a6:a4:2a:
                    ab:f9:99:ed:5f:69:6a:94:3d:14:cf:86:18:4a:fc:
                    53:3b:d4:c4:9c:37:bf:e5:42:5e:4f:e4:8a:80:26:
                    1f:f3:db:5c:47:5a:1e:24:ae:81:85:9e:c6:9c:84:
                    36:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F9:49:00:56:ED:C2:B5:4B:D8:A3:42:96:13:E5:8C:32:7C:38:0B
            X509v3 Authority Key Identifier:
                keyid:DC:17:BD:E9:17:8A:89:3A:0E:44:50:57:00:00:3A:43:E9:C8:16:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/3133312e3130382e342e302f32322d3234203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:9e:34:93:64:05:a6:59:6c:4c:5d:c4:71:a1:2a:35:55:96:
         60:14:ce:4d:dd:31:fa:82:b1:ae:23:81:f2:4a:34:a7:9a:4f:
         a8:a1:9b:6e:7e:44:4b:8f:ec:26:0c:a1:5d:5e:26:52:1f:a8:
         db:af:bb:21:39:c1:43:57:fd:42:4e:9f:e9:ad:2d:bf:52:60:
         06:4d:d9:3f:f8:95:8d:10:62:07:ac:29:bc:03:ec:35:d2:7f:
         46:83:86:c5:4f:ea:12:9a:c8:09:a3:11:8f:64:c6:ef:29:bc:
         8e:8a:54:87:d2:8c:9d:ab:67:94:e0:87:7c:58:9f:54:f2:32:
         7a:81:11:72:81:88:a5:c5:48:a2:18:47:59:d7:28:d9:19:31:
         02:b0:d6:de:31:7a:5f:7e:64:a5:4a:2a:11:38:83:52:d0:73:
         85:cb:3e:cb:e5:fb:b2:3e:0b:57:63:3e:bf:f3:84:25:eb:b7:
         75:af:5c:cd:ca:b1:a7:50:d3:a1:ec:e4:40:3e:fd:79:eb:c1:
         ba:94:21:ce:39:a6:2f:16:78:64:c6:99:84:ea:65:bc:66:d1:
         f4:2f:e4:30:9d:0b:69:11:eb:58:d3:41:44:bd:3b:03:23:eb:
         39:32:df:88:a0:5c:cf:38:49:68:19:5f:4b:b9:80:0c:a6:3d:
         30:d4:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:58:46 2026 by rpki-client