This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/3133322e3235352e302e302f32322d3234203d3e20323633363932.roa
File:                     3133322e3235352e302e302f32322d3234203d3e20323633363932.roa (raw, json)
Hash identifier:          2dMZjvAIOLRLk7Z9FnCJ1KWBPymOWi61mn8LKHbj6Tk=
Subject key identifier:   E7:DC:48:E5:AD:8D:58:08:C0:EB:5C:32:0D:3B:D3:72:46:3D:F6:7C
Certificate issuer:       /CN=6D3556529CE5599E78565FB2F26BF5285D573D92
Certificate serial:       2E9102F3C7E77BADA31D34693BA033C89B1D7921
Authority key identifier: 6D:35:56:52:9C:E5:59:9E:78:56:5F:B2:F2:6B:F5:28:5D:57:3D:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/3133322e3235352e302e302f32322d3234203d3e20323633363932.roa
Signing time:             Tue 06 Jan 2026 19:29:59 +0000
ROA not before:           Tue 06 Jan 2026 19:24:59 +0000
ROA not after:            Tue 05 Jan 2027 19:29:59 +0000
asID:                     263692
IP address blocks:        132.255.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/6D3556529CE5599E78565FB2F26BF5285D573D92.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/6D3556529CE5599E78565FB2F26BF5285D573D92.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 02:30:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:91:02:f3:c7:e7:7b:ad:a3:1d:34:69:3b:a0:33:c8:9b:1d:79:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D3556529CE5599E78565FB2F26BF5285D573D92
        Validity
            Not Before: Jan  6 19:24:59 2026 GMT
            Not After : Jan  5 19:29:59 2027 GMT
        Subject: CN=E7DC48E5AD8D5808C0EB5C320D3BD372463DF67C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:fd:af:de:c4:8e:f1:42:66:00:69:18:1c:
                    55:8e:65:6c:c6:62:50:14:ef:7b:88:3c:4c:e5:76:
                    76:4a:3b:22:f8:55:0a:61:ea:02:a2:2a:75:39:01:
                    a0:07:78:31:6c:5c:8f:07:2a:1c:31:51:7e:0e:a0:
                    44:89:e6:6b:95:bd:2a:31:23:be:c9:f0:95:75:e5:
                    97:4d:40:32:6f:d5:ec:c5:f8:49:7b:96:96:f1:94:
                    50:3b:8a:a8:7c:89:9c:66:5b:35:ad:25:3e:a0:04:
                    a4:ff:c4:f1:66:ee:cc:e8:d6:e9:43:21:5b:7d:80:
                    d8:15:d3:53:5d:ee:6d:0e:d8:21:48:e2:d9:42:ab:
                    9b:f3:95:c1:4d:37:96:58:c3:56:e7:f5:eb:58:d2:
                    d6:83:ce:94:a9:d4:62:9a:bc:b7:4c:ad:ca:91:ac:
                    57:39:ce:62:74:cb:ff:29:63:73:b0:b6:65:59:65:
                    39:3c:be:88:d6:1a:e0:0b:54:b4:82:20:7e:ba:9c:
                    79:46:a0:c4:5b:c9:3a:c4:7a:61:75:1d:86:d5:d6:
                    a8:26:78:8c:4d:2c:42:dc:e6:16:75:f3:39:ef:f6:
                    fc:36:cd:2e:d0:c8:7d:a0:b5:50:ee:ca:79:8a:91:
                    bc:62:1f:b3:0e:c3:3d:82:f7:3b:e7:da:0e:98:f2:
                    03:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DC:48:E5:AD:8D:58:08:C0:EB:5C:32:0D:3B:D3:72:46:3D:F6:7C
            X509v3 Authority Key Identifier:
                keyid:6D:35:56:52:9C:E5:59:9E:78:56:5F:B2:F2:6B:F5:28:5D:57:3D:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/6D3556529CE5599E78565FB2F26BF5285D573D92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/3133322e3235352e302e302f32322d3234203d3e20323633363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:d5:f7:01:29:c3:ec:f5:a3:26:0f:18:80:cd:d2:07:f6:41:
         bc:d0:bd:66:f5:02:ff:a0:a6:f3:ba:ba:61:b6:ee:d2:92:d4:
         79:45:89:c7:e9:69:02:7c:c4:64:45:fe:8f:03:df:27:20:b9:
         d5:0c:17:bf:a6:ae:08:04:95:9b:f4:c7:e0:8a:dd:69:74:78:
         0e:d1:6f:33:96:c9:aa:2d:eb:d8:12:fd:cc:bd:0a:be:bf:c7:
         40:3b:d7:2d:d7:50:4f:37:cc:58:71:e2:ef:68:4f:69:41:b3:
         f7:65:03:9c:30:e0:ab:76:0e:c0:cd:cc:e8:84:3a:ad:80:63:
         98:30:df:2c:38:7d:12:61:85:df:68:f4:a3:5a:0e:a9:b1:3c:
         cd:0b:55:6e:fd:30:d2:f3:cb:da:30:93:23:d1:e1:70:39:0a:
         2c:32:d5:f0:49:3a:b6:9c:f5:5f:6a:e3:43:80:a8:5d:09:6e:
         4f:55:f2:93:bd:c2:96:46:a3:ad:91:12:65:94:2e:09:e7:cb:
         7b:21:bd:ce:bb:5f:02:54:1f:a0:15:d2:c3:cc:ba:f2:cd:84:
         75:ad:ec:8b:85:5e:99:20:39:39:dc:30:86:e6:79:0e:c0:3d:
         31:59:6e:c1:35:26:b1:a7:53:eb:bd:4c:bf:ce:69:af:25:fa:
         18:0d:57:e3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULpEC88fne62jHTRpO6AzyJsdeSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQzNTU2NTI5Q0U1NTk5RTc4NTY1RkIyRjI2QkY1Mjg1
RDU3M0Q5MjAeFw0yNjAxMDYxOTI0NTlaFw0yNzAxMDUxOTI5NTlaMDMxMTAvBgNV
BAMTKEU3REM0OEU1QUQ4RDU4MDhDMEVCNUMzMjBEM0JEMzcyNDYzREY2N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7fP2v3sSO8UJmAGkYHFWOZWzG
YlAU73uIPEzldnZKOyL4VQph6gKiKnU5AaAHeDFsXI8HKhwxUX4OoESJ5muVvSox
I77J8JV15ZdNQDJv1ezF+El7lpbxlFA7iqh8iZxmWzWtJT6gBKT/xPFm7szo1ulD
IVt9gNgV01Nd7m0O2CFI4tlCq5vzlcFNN5ZYw1bn9etY0taDzpSp1GKavLdMrcqR
rFc5zmJ0y/8pY3OwtmVZZTk8vojWGuALVLSCIH66nHlGoMRbyTrEemF1HYbV1qgm
eIxNLELc5hZ18znv9vw2zS7QyH2gtVDuynmKkbxiH7MOwz2C9zvn2g6Y8gMrAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU59xI5a2NWAjA61wyDTvTckY99nwwHwYDVR0j
BBgwFoAUbTVWUpzlWZ54Vl+y8mv1KF1XPZIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85QzUzNzFGODNBMEY1QjBFOUE4QkUyQUMxRjU3OTU2RkVG
OUI4RDYwREQ0RUY1QUREOTIwMTY5NDQyMjk4NDkwLzAvNkQzNTU2NTI5Q0U1NTk5
RTc4NTY1RkIyRjI2QkY1Mjg1RDU3M0Q5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RDM1NTY1MjlDRTU1OTlFNzg1
NjVGQjJGMjZCRjUyODVENTczRDkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUM1MzcxRjgzQTBGNUIwRTlBOEJFMkFDMUY1Nzk1NkZFRjlCOEQ2MERE
NEVGNUFERDkyMDE2OTQ0MjI5ODQ5MC8wLzMxMzMzMjJlMzIzNTM1MmUzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMzM2MzkzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoT/ADAN
BgkqhkiG9w0BAQsFAAOCAQEAftX3ASnD7PWjJg8YgM3SB/ZBvNC9ZvUC/6Cm87q6
Ybbu0pLUeUWJx+lpAnzEZEX+jwPfJyC51QwXv6auCASVm/TH4IrdaXR4DtFvM5bJ
qi3r2BL9zL0Kvr/HQDvXLddQTzfMWHHi72hPaUGz92UDnDDgq3YOwM3M6IQ6rYBj
mDDfLDh9EmGF32j0o1oOqbE8zQtVbv0w0vPL2jCTI9HhcDkKLDLV8Ek6tpz1X2rj
Q4CoXQluT1Xyk73ClkajrZESZZQuCefLeyG9zrtfAlQfoBXSw8y68s2Eda3si4Ve
mSA5OdwwhuZ5DsA9MVluwTUmsadT671Mv85pryX6GA1X4w==
-----END CERTIFICATE-----
Generated at Mon Jan 12 08:00:23 2026 by rpki-client