This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3132382e302f31372d3137203d3e203238303234.roa
File:                     3136312e32322e3132382e302f31372d3137203d3e203238303234.roa (raw, json)
Hash identifier:          jM/F7yju/FJ/f9nKmYPZqvfy8t9PAQYi4sKf4+bYvpc=
Subject key identifier:   75:D9:61:77:7B:84:37:EB:AB:B5:49:85:2E:B1:B3:65:F1:63:F1:7B
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       2C8CDDE4848C455151AEED990732EB93CCD895C9
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3132382e302f31372d3137203d3e203238303234.roa
Signing time:             Tue 06 Jan 2026 19:01:05 +0000
ROA not before:           Tue 06 Jan 2026 18:56:05 +0000
ROA not after:            Tue 05 Jan 2027 19:01:05 +0000
asID:                     28024
IP address blocks:        161.22.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 06:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8c:dd:e4:84:8c:45:51:51:ae:ed:99:07:32:eb:93:cc:d8:95:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Jan  6 18:56:05 2026 GMT
            Not After : Jan  5 19:01:05 2027 GMT
        Subject: CN=75D961777B8437EBABB549852EB1B365F163F17B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:02:25:5d:96:57:7c:30:1e:e3:5c:7b:dc:
                    8e:8a:d7:ae:c1:50:a2:e5:7a:82:5f:78:e0:19:4d:
                    e4:e5:f1:67:37:a2:fa:e8:87:f2:60:c5:ea:bb:a2:
                    7b:57:7c:7c:10:fb:90:66:d9:02:85:be:cb:0f:82:
                    23:f5:ab:5b:7c:bb:78:07:86:f4:1e:57:d5:c6:6f:
                    c4:e5:b6:77:54:4f:73:81:69:09:70:95:d6:a3:c2:
                    57:2a:3b:ff:a0:94:99:af:fa:dc:24:73:03:44:ab:
                    02:e9:59:da:16:38:ea:48:a4:18:38:f2:19:ff:24:
                    81:70:0a:27:0a:32:c8:0b:54:14:67:8b:04:d2:20:
                    d3:ac:fe:f4:97:63:9f:da:ce:49:5f:eb:82:69:8b:
                    3d:4b:1d:91:56:f6:20:c0:f7:cd:9b:d6:73:56:dc:
                    72:08:3a:b3:c9:a1:43:92:25:22:1d:4a:52:40:4a:
                    58:4b:75:91:68:ab:f9:20:58:9c:5c:16:78:7c:fd:
                    5e:ac:87:23:ca:b7:7d:e7:20:9b:80:06:8b:1f:64:
                    84:26:ef:54:24:fe:5e:b5:02:24:84:18:e9:55:85:
                    d4:56:60:ac:63:ca:2a:cb:89:39:8e:32:a4:48:50:
                    d5:ed:19:49:0b:9c:78:df:41:3e:8f:58:cb:e4:c1:
                    67:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D9:61:77:7B:84:37:EB:AB:B5:49:85:2E:B1:B3:65:F1:63:F1:7B
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3136312e32322e3132382e302f31372d3137203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0f:c8:cd:0c:7c:47:6e:28:5a:6c:0e:ef:8a:a0:da:fe:ac:f6:
         54:77:87:3f:9d:3b:f9:93:a6:45:2a:78:70:c3:e8:2c:84:dc:
         26:91:83:e4:3a:ae:c7:42:be:53:a0:9b:0f:40:e4:a0:08:13:
         d2:a9:ea:13:b3:34:31:53:62:cb:95:6e:74:44:95:ba:6f:8f:
         96:c8:3b:0b:88:23:01:21:3b:3b:a8:8d:7f:5e:84:b6:c3:05:
         ea:1e:fe:c0:6e:45:93:63:eb:4a:51:ef:99:77:b4:ba:f1:cd:
         69:27:2c:40:fb:7d:41:4d:e8:e0:fc:f2:51:ec:28:ef:06:a0:
         4e:78:be:16:f3:1d:73:c1:67:8a:31:51:ff:36:0c:65:b4:1f:
         7e:32:5a:65:24:90:4e:57:69:37:fc:03:e1:6b:bc:c7:be:44:
         8d:41:88:69:dc:96:f2:44:be:9d:70:11:ec:bd:c3:b3:b0:5f:
         9d:0b:67:4b:6d:11:f4:69:02:7d:6c:b3:1f:0e:81:31:b9:2b:
         c2:9f:dc:93:80:c6:24:3e:ea:cb:46:cc:a8:56:d2:d8:8f:76:
         68:4d:33:df:1f:32:9a:27:fe:a7:6c:0d:56:a1:be:e5:bb:b6:
         44:f3:46:6d:e3:5b:89:2b:46:37:94:a3:84:39:03:8f:31:34:
         52:3a:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:01:58 2026 by rpki-client