This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/3133312e302e3233322e302f32322d3234203d3e203631343730.roa
File:                     3133312e302e3233322e302f32322d3234203d3e203631343730.roa (raw, json)
Hash identifier:          hDN+qJMZoOj1DoehMfp8Fiu9Qkeo/3pfR2ZgKr2PqSo=
Subject key identifier:   B8:BE:57:AD:85:B3:7B:57:D4:43:29:F9:9F:9C:CE:E1:32:7A:EE:42
Certificate issuer:       /CN=48C3545237B1DDEF78ABA1776BAB15B728086643
Certificate serial:       024C58A22F04ACFB2053A70D637F637FEFA73B48
Authority key identifier: 48:C3:54:52:37:B1:DD:EF:78:AB:A1:77:6B:AB:15:B7:28:08:66:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/3133312e302e3233322e302f32322d3234203d3e203631343730.roa
Signing time:             Tue 06 Jan 2026 19:47:59 +0000
ROA not before:           Tue 06 Jan 2026 19:42:59 +0000
ROA not after:            Tue 05 Jan 2027 19:47:59 +0000
asID:                     61470
IP address blocks:        131.0.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 00:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4c:58:a2:2f:04:ac:fb:20:53:a7:0d:63:7f:63:7f:ef:a7:3b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C3545237B1DDEF78ABA1776BAB15B728086643
        Validity
            Not Before: Jan  6 19:42:59 2026 GMT
            Not After : Jan  5 19:47:59 2027 GMT
        Subject: CN=B8BE57AD85B37B57D44329F99F9CCEE1327AEE42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:66:01:38:26:74:1c:45:b2:9f:2f:e7:14:
                    0d:f4:d9:2b:39:b7:29:7a:8e:3b:08:f9:5d:e0:8b:
                    8e:76:3f:81:c4:02:ac:c9:04:a4:73:de:16:3b:70:
                    87:0c:49:37:7f:d9:cf:43:f6:e0:9c:0f:15:e0:73:
                    1a:44:36:ba:c3:39:21:0f:ec:c3:30:9f:ab:6e:97:
                    f9:50:13:c0:82:9e:95:17:37:6a:0c:fb:b5:ef:d9:
                    cb:1c:53:52:eb:78:1d:0a:1c:dd:88:23:2e:22:80:
                    2c:8c:9a:85:63:a0:23:4e:82:ce:41:77:88:91:ef:
                    52:39:a8:da:72:ee:84:17:d4:5f:88:18:78:30:b6:
                    44:15:66:20:47:cb:44:30:d8:4c:e5:96:f1:b2:a7:
                    54:9a:33:4b:5d:f5:5c:bb:2e:2d:a1:a1:32:20:bb:
                    93:21:64:fa:fe:8b:d7:d7:0e:26:ad:56:57:4d:1a:
                    f9:e6:2d:28:6a:82:0c:11:81:c6:96:0d:13:af:16:
                    ff:07:f9:ca:b5:20:db:ea:59:e7:ee:1c:c1:35:c6:
                    aa:5d:93:34:1c:fc:f4:fa:00:39:68:7a:46:b2:51:
                    aa:5e:8e:06:89:55:ec:4f:e5:3a:96:f4:ea:d3:65:
                    fc:f8:66:77:ea:f2:d1:21:bd:8d:bc:31:0d:9c:e5:
                    80:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BE:57:AD:85:B3:7B:57:D4:43:29:F9:9F:9C:CE:E1:32:7A:EE:42
            X509v3 Authority Key Identifier:
                keyid:48:C3:54:52:37:B1:DD:EF:78:AB:A1:77:6B:AB:15:B7:28:08:66:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/3133312e302e3233322e302f32322d3234203d3e203631343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:68:21:54:24:df:bf:9d:b1:45:ef:29:36:0f:a5:81:4c:35:
         9f:e5:ce:4a:d7:be:b5:24:bf:40:86:c4:52:d0:ca:f0:60:75:
         e3:aa:c9:3d:56:1f:f8:50:64:27:ad:ee:11:cd:d8:9a:70:e4:
         92:6b:ac:a9:1a:a7:9e:eb:29:3a:8a:c0:f2:0b:a3:34:75:11:
         29:e7:80:96:c5:73:9d:c2:15:ef:e2:8a:18:59:c0:79:3b:2b:
         ca:e8:a5:3d:60:39:09:44:ed:00:93:bb:9f:4e:60:02:81:fe:
         29:51:63:0d:06:8e:e1:27:ee:15:2d:78:29:7d:3a:d1:aa:5e:
         73:4e:92:b6:f1:62:c2:52:e8:9e:4d:34:cb:c8:cb:ed:f6:ef:
         79:85:5c:e6:b0:c2:53:98:92:15:7f:3b:c1:58:bd:40:f8:49:
         eb:88:f5:6c:04:c2:d1:03:c0:99:31:5f:20:50:a0:19:82:2a:
         fc:fb:fb:c7:67:a0:fa:00:db:1e:d6:99:4d:7b:08:72:f1:28:
         f9:8c:70:2f:4f:ad:36:fc:fb:25:8d:ff:98:db:aa:38:33:bb:
         d9:72:db:32:73:8c:7d:a8:59:46:62:14:b3:ce:1d:af:5a:06:
         fe:e8:cd:2e:8e:f8:83:e9:e0:31:69:c3:d4:52:2e:05:43:9b:
         5b:51:34:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:00:34 2026 by rpki-client