This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/3134332e3230322e3136302e302f32322d3234203d3e203532343233.roa
File:                     3134332e3230322e3136302e302f32322d3234203d3e203532343233.roa (raw, json)
Hash identifier:          VhkBUKfhRkPr/CDtWf4ui3X7ghNKTMcq2VNknT8D1pg=
Subject key identifier:   BC:7B:CD:8B:F0:63:97:D7:18:FC:83:67:A7:57:5A:C8:E1:41:3D:BC
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       349BFC81B655F64722F1999A5864D2361F383337
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/3134332e3230322e3136302e302f32322d3234203d3e203532343233.roa
Signing time:             Tue 06 Jan 2026 19:16:46 +0000
ROA not before:           Tue 06 Jan 2026 19:11:46 +0000
ROA not after:            Tue 05 Jan 2027 19:16:46 +0000
asID:                     52423
IP address blocks:        143.202.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 04:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9b:fc:81:b6:55:f6:47:22:f1:99:9a:58:64:d2:36:1f:38:33:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Jan  6 19:11:46 2026 GMT
            Not After : Jan  5 19:16:46 2027 GMT
        Subject: CN=BC7BCD8BF06397D718FC8367A7575AC8E1413DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:59:59:09:0f:6f:ef:e7:d2:c6:d8:41:05:
                    e3:c5:5b:7b:26:49:6d:f1:8b:be:ff:88:65:f6:a1:
                    3c:49:bb:34:33:a8:f3:c8:4d:0c:c5:ff:ee:ee:e5:
                    0a:70:a0:d3:59:36:38:2a:fb:c2:04:68:67:97:a3:
                    26:8e:4f:91:fe:9c:81:a8:c8:a0:b9:28:1f:95:59:
                    90:65:a5:6e:65:62:1c:1d:72:64:d2:2b:bf:3f:ca:
                    61:1b:be:a2:e7:53:50:df:0d:e1:45:fe:98:58:c2:
                    7f:df:5d:aa:e0:7d:4a:d2:16:29:d4:77:b6:bf:26:
                    5e:81:41:9c:d4:8c:bc:d0:06:37:c4:18:09:39:99:
                    87:4f:87:9f:d0:56:12:66:fe:95:9f:85:69:fb:1c:
                    46:9f:54:fd:cf:ce:07:46:f4:88:ea:56:2e:95:ef:
                    ef:c6:8a:90:ed:a9:9a:e2:bf:f2:82:95:df:0d:35:
                    b4:68:08:42:4d:a4:80:7a:f9:b2:68:ee:8b:b9:2f:
                    b2:fc:37:96:95:65:ab:69:22:1b:2b:af:38:f1:83:
                    5b:b6:10:13:6c:d1:f3:39:b4:3f:a2:7c:b9:8e:d2:
                    26:ee:a8:81:82:3f:2d:5f:1e:82:86:3c:5f:45:91:
                    69:e2:ec:21:cf:1d:62:44:81:d2:6d:1a:5d:4b:de:
                    21:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7B:CD:8B:F0:63:97:D7:18:FC:83:67:A7:57:5A:C8:E1:41:3D:BC
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/3134332e3230322e3136302e302f32322d3234203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:bf:11:2f:e2:97:52:1e:cf:11:98:70:ef:51:c4:30:2a:d8:
         02:45:1e:e5:ab:07:bc:16:64:dd:cd:c4:47:0b:ba:ac:18:e1:
         d6:e8:be:62:76:27:b8:53:7a:0c:8b:4c:6c:8d:40:47:48:7f:
         34:14:35:c3:84:8f:8e:1b:c4:25:41:85:56:04:44:26:60:3d:
         54:e6:5f:af:3a:7d:e7:6d:a3:f5:8a:a5:42:36:29:36:94:89:
         c3:23:8e:d4:74:6d:3f:e9:88:fa:9f:fe:87:9b:bb:21:8d:0d:
         ce:a6:e2:d7:cf:c8:78:ab:74:ff:03:8d:00:39:08:0e:d0:57:
         e5:fb:e0:e9:36:a4:ec:73:b3:1b:bf:22:c1:83:9e:c1:00:a5:
         f0:86:cc:19:15:9e:28:de:76:d5:9f:dc:bf:fa:ca:74:2a:0c:
         bc:17:d1:d0:54:22:4e:ba:e4:3f:76:a7:be:cf:ce:34:c5:10:
         ee:e8:51:55:33:ce:58:54:b5:31:9a:fc:63:c0:ca:f3:ec:8c:
         e2:a7:08:9b:c8:7e:09:8c:9f:59:db:2c:d8:10:b8:b9:68:9e:
         17:d3:3c:14:6c:6b:cc:91:d7:00:74:ad:90:ab:98:a9:7d:f0:
         2b:2d:ae:94:2a:58:2d:5c:48:30:17:33:03:c8:e1:80:0a:e1:
         63:1e:5d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:50:21 2026 by rpki-client