This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/3133312e3136312e3138342e302f32322d3234203d3e203532343434.roa
File:                     3133312e3136312e3138342e302f32322d3234203d3e203532343434.roa (raw, json)
Hash identifier:          tPTsvbzqrYJAU5gSZ5VVV2fYbioszQ4xAhu4KIsIwkY=
Subject key identifier:   5F:EF:F9:51:D1:66:E4:64:AF:AB:5A:89:09:B4:B3:BA:F9:EF:D9:7F
Certificate issuer:       /CN=C6954B6A710E06C327505B5B0F1F380B7FE7B0B4
Certificate serial:       60C074825C2B2F2CEE0610A09396D656C8760BFB
Authority key identifier: C6:95:4B:6A:71:0E:06:C3:27:50:5B:5B:0F:1F:38:0B:7F:E7:B0:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/3133312e3136312e3138342e302f32322d3234203d3e203532343434.roa
Signing time:             Tue 06 Jan 2026 19:01:29 +0000
ROA not before:           Tue 06 Jan 2026 18:56:29 +0000
ROA not after:            Tue 05 Jan 2027 19:01:29 +0000
asID:                     52444
IP address blocks:        131.161.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c0:74:82:5c:2b:2f:2c:ee:06:10:a0:93:96:d6:56:c8:76:0b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6954B6A710E06C327505B5B0F1F380B7FE7B0B4
        Validity
            Not Before: Jan  6 18:56:29 2026 GMT
            Not After : Jan  5 19:01:29 2027 GMT
        Subject: CN=5FEFF951D166E464AFAB5A8909B4B3BAF9EFD97F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:d5:63:38:46:a5:1c:f5:11:a2:2e:63:c3:
                    b6:28:e5:07:25:f7:6b:cd:1c:99:2e:cd:df:50:6d:
                    5f:e0:6f:a2:3c:40:53:2b:52:8a:7f:2b:ef:1c:9c:
                    d4:f5:96:f9:72:22:79:1e:ef:3b:28:3c:39:19:93:
                    f3:d4:b0:03:cf:86:62:6d:6f:7b:97:f6:ea:c8:f6:
                    ba:c0:fe:f4:16:45:9c:ac:17:d5:f2:0e:a9:12:4a:
                    d3:01:d9:33:5f:97:b6:f7:4f:96:9a:94:4e:7c:8a:
                    d8:b9:dd:2f:ca:6f:d0:88:3a:ef:0d:ce:52:20:3a:
                    9e:f2:1d:a5:8f:68:ed:e5:bb:d3:1b:6c:56:d5:f6:
                    af:63:9b:2d:56:55:15:99:05:fd:b6:8a:e8:05:26:
                    37:f6:90:8b:87:8e:15:68:13:31:33:e5:60:7c:d9:
                    28:c4:f6:51:01:38:a4:82:06:3b:e7:2b:0f:61:c7:
                    5a:4a:31:73:ff:19:c3:84:8e:85:30:30:7b:3e:07:
                    8b:3f:40:f6:cc:af:8a:b1:b3:57:97:49:c8:9d:7d:
                    6d:11:51:33:9a:ae:2b:9d:55:71:59:bf:a9:42:ff:
                    96:0d:42:64:8e:7e:28:90:73:72:ea:42:15:b6:5b:
                    10:a2:3d:2b:77:8d:c6:ec:1c:7b:30:06:5f:51:9c:
                    26:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EF:F9:51:D1:66:E4:64:AF:AB:5A:89:09:B4:B3:BA:F9:EF:D9:7F
            X509v3 Authority Key Identifier:
                keyid:C6:95:4B:6A:71:0E:06:C3:27:50:5B:5B:0F:1F:38:0B:7F:E7:B0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/3133312e3136312e3138342e302f32322d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:00:fb:40:1d:2b:a4:44:f1:62:6d:42:9a:14:c5:97:49:e1:
         34:79:bd:df:00:a4:93:57:92:3e:c1:58:89:4e:0e:bd:8a:19:
         b9:14:e2:7e:82:39:f2:8e:a6:1d:9d:40:7d:c3:66:24:e2:60:
         4e:24:68:d4:3c:0c:cb:11:32:96:64:c0:04:93:d5:61:c7:2e:
         f1:dc:5f:d2:3c:e3:2a:4d:5b:b3:d6:9f:78:3e:47:19:a6:d1:
         5f:19:d0:93:2d:df:d2:4c:84:d8:95:6b:fb:0b:90:02:86:ae:
         58:a6:25:dd:08:5f:53:7b:12:40:79:8a:1c:d8:b4:1d:88:d7:
         da:8f:73:61:d8:c9:3e:40:49:76:50:6a:4d:34:ba:36:22:5a:
         d5:f8:72:6d:25:e1:2c:9f:95:f1:48:ac:1b:bc:29:15:72:ac:
         e9:47:e3:ce:8c:d2:70:96:54:bb:bf:75:38:f0:74:16:38:98:
         47:4a:3e:70:34:b8:ee:78:80:0f:c3:b7:8e:02:4b:6d:ce:df:
         62:2e:27:2c:29:c2:76:5a:25:25:5f:97:42:e4:cc:49:49:14:
         4a:03:13:45:53:c2:89:9f:b1:d1:5a:47:4d:a8:43:a8:9b:e8:
         c0:b0:4e:85:30:22:48:4b:6f:eb:57:b0:3c:ab:ca:ba:09:40:
         34:74:4d:25
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYMB0glwrLyzuBhCgk5bWVsh2C/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY5NTRCNkE3MTBFMDZDMzI3NTA1QjVCMEYxRjM4MEI3
RkU3QjBCNDAeFw0yNjAxMDYxODU2MjlaFw0yNzAxMDUxOTAxMjlaMDMxMTAvBgNV
BAMTKDVGRUZGOTUxRDE2NkU0NjRBRkFCNUE4OTA5QjRCM0JBRjlFRkQ5N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj+tVjOEalHPURoi5jw7Yo5Qcl
92vNHJkuzd9QbV/gb6I8QFMrUop/K+8cnNT1lvlyInke7zsoPDkZk/PUsAPPhmJt
b3uX9urI9rrA/vQWRZysF9XyDqkSStMB2TNfl7b3T5aalE58iti53S/Kb9CIOu8N
zlIgOp7yHaWPaO3lu9MbbFbV9q9jmy1WVRWZBf22iugFJjf2kIuHjhVoEzEz5WB8
2SjE9lEBOKSCBjvnKw9hx1pKMXP/GcOEjoUwMHs+B4s/QPbMr4qxs1eXScidfW0R
UTOariudVXFZv6lC/5YNQmSOfiiQc3LqQhW2WxCiPSt3jcbsHHswBl9RnCZxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUX+/5UdFm5GSvq1qJCbSzuvnv2X8wHwYDVR0j
BBgwFoAUxpVLanEOBsMnUFtbDx84C3/nsLQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzhENDdEM0FEQjFDNUQ0NjhBNEYwODMyQkU1RTBBRjAx
MEY4RTMxRTM5MDQ4RTk5NzlFOTQwN0NCRUE4NjVELzAvQzY5NTRCNkE3MTBFMDZD
MzI3NTA1QjVCMEYxRjM4MEI3RkU3QjBCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNjk1NEI2QTcxMEUwNkMzMjc1
MDVCNUIwRjFGMzgwQjdGRTdCMEI0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUM4RDQ3RDNBREIxQzVENDY4QTRGMDgzMkJFNUUwQUYwMTBGOEUzMUUz
OTA0OEU5OTc5RTk0MDdDQkVBODY1RC8wLzMxMzMzMTJlMzEzNjMxMmUzMTM4MzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzQzNDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg6G4
MA0GCSqGSIb3DQEBCwUAA4IBAQBDAPtAHSukRPFibUKaFMWXSeE0eb3fAKSTV5I+
wViJTg69ihm5FOJ+gjnyjqYdnUB9w2Yk4mBOJGjUPAzLETKWZMAEk9Vhxy7x3F/S
POMqTVuz1p94PkcZptFfGdCTLd/STITYlWv7C5AChq5YpiXdCF9TexJAeYoc2LQd
iNfaj3Nh2Mk+QEl2UGpNNLo2IlrV+HJtJeEsn5XxSKwbvCkVcqzpR+POjNJwllS7
v3U48HQWOJhHSj5wNLjueIAPw7eOAkttzt9iLicsKcJ2WiUlX5dC5MxJSRRKAxNF
U8KJn7HRWkdNqEOom+jAsE6FMCJIS2/rV7A8q8q6CUA0dE0l
-----END CERTIFICATE-----
Generated at Tue Jan 13 06:13:58 2026 by rpki-client