This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3138342e302e302f31362d3234203d3e203139393035.roa
File:                     3133322e3138342e302e302f31362d3234203d3e203139393035.roa (raw, json)
Hash identifier:          YKccxSjNfom8wxs3h97rQOMEASp27aW9Sx6amFe0CsQ=
Subject key identifier:   21:2E:E4:54:8B:75:69:53:01:2A:42:0B:62:AF:49:35:10:9C:2A:94
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       14C924A7C093199094EC000184D8E46C55A57D5D
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3138342e302e302f31362d3234203d3e203139393035.roa
Signing time:             Tue 06 Jan 2026 19:14:12 +0000
ROA not before:           Tue 06 Jan 2026 19:09:12 +0000
ROA not after:            Tue 05 Jan 2027 19:14:12 +0000
asID:                     19905
IP address blocks:        132.184.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 10:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c9:24:a7:c0:93:19:90:94:ec:00:01:84:d8:e4:6c:55:a5:7d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Jan  6 19:09:12 2026 GMT
            Not After : Jan  5 19:14:12 2027 GMT
        Subject: CN=212EE4548B756953012A420B62AF4935109C2A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:86:3b:90:51:53:fd:df:cf:f2:fe:62:08:
                    d7:d2:57:5c:b5:38:cd:37:3d:62:66:1a:56:d1:04:
                    9a:f1:e5:c5:04:65:80:be:42:72:45:96:ad:d7:12:
                    b6:96:f4:8a:e5:e7:59:c0:0f:58:b0:2f:0b:cf:5d:
                    27:e6:b5:c1:5f:3b:a8:ff:be:07:22:31:30:66:16:
                    a3:9b:4f:be:c6:3d:26:0b:88:3a:16:be:66:ce:46:
                    03:ff:9d:ab:79:e6:6e:78:09:c3:84:ae:1d:dc:89:
                    f3:a5:11:d1:04:c9:77:ab:9c:51:b5:e4:39:39:e5:
                    f6:36:69:e0:18:f8:2b:20:bd:28:09:6d:da:82:7c:
                    4e:6b:9c:a5:fb:cb:ca:3a:92:b8:b7:d1:5d:fc:03:
                    75:88:ef:d0:60:8b:5d:c4:ce:5a:89:98:d3:ad:c5:
                    f4:e7:05:53:3d:0e:1a:3e:e9:42:b0:6b:43:4e:7d:
                    ff:73:3c:f6:00:15:da:a2:9f:9b:5f:8b:b0:96:1d:
                    00:87:b9:1c:7c:35:8c:92:a2:82:c5:7c:82:88:5a:
                    aa:dc:b7:18:08:5c:b4:8b:cd:00:fe:ac:66:02:ee:
                    c1:51:6e:86:64:12:16:d3:5e:f2:cd:d1:37:59:2d:
                    98:d5:6b:8f:e2:3c:5f:81:ef:16:62:c8:5b:7c:b6:
                    b0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2E:E4:54:8B:75:69:53:01:2A:42:0B:62:AF:49:35:10:9C:2A:94
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3138342e302e302f31362d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.184.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:51:a4:b7:4c:29:5f:0d:4d:ab:8f:70:90:ea:3a:2f:0a:12:
         28:d7:83:be:e8:c6:f9:5d:33:40:b1:6b:bb:89:8c:b5:cd:fe:
         3f:b8:be:c6:03:9a:a2:3e:24:b3:7f:eb:a6:86:26:cf:91:c8:
         90:54:07:37:ff:ea:1d:94:e8:ec:99:5e:6e:bb:12:2c:76:85:
         38:3f:9c:e5:a5:18:c7:42:36:e3:55:db:61:b1:33:50:eb:55:
         2f:d1:67:f0:fe:d6:4c:a3:e9:e7:29:08:18:77:2e:d5:c7:65:
         9e:cb:0b:02:aa:f0:aa:d7:eb:2d:7a:2a:4e:26:ab:67:cb:3c:
         ab:23:35:5a:54:25:88:7d:84:05:e4:54:ec:d3:c8:00:c2:1c:
         e3:63:a6:76:c6:74:8c:a0:38:72:a0:ae:9f:3d:cc:8d:1b:5b:
         1f:57:49:0c:c1:cf:6b:bb:06:c5:1d:65:f7:73:56:e9:f8:b6:
         8a:98:7a:28:1a:b7:27:22:30:48:65:d3:43:b2:2e:ad:17:9f:
         44:2f:29:9c:bf:c8:29:04:67:1f:ff:47:6f:c1:9d:25:d1:46:
         d8:2a:fd:09:73:59:99:25:b9:d8:af:bf:35:5b:f1:10:ff:8f:
         84:6a:0c:e8:7b:64:e0:ae:ed:65:c8:a5:37:2b:06:66:2f:47:
         ad:34:74:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:42:26 2026 by rpki-client