This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3133322e3235352e3131322e302f32322d3234203d3e203532343336.roa
File:                     3133322e3235352e3131322e302f32322d3234203d3e203532343336.roa (raw, json)
Hash identifier:          JWFIA43OPzw91Gm7yONHBMSyiaAH/IIQDy6UThEUGzA=
Subject key identifier:   A1:70:C7:61:28:E6:88:EC:30:8A:3B:85:48:BA:93:CB:9D:A6:EB:21
Certificate issuer:       /CN=0DD8C886E7D641E553703DC5E196957F1368902C
Certificate serial:       5BCA35170B7CACD9584004FFC050FAA0F7A0A0FD
Authority key identifier: 0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3133322e3235352e3131322e302f32322d3234203d3e203532343336.roa
Signing time:             Tue 06 Jan 2026 19:28:45 +0000
ROA not before:           Tue 06 Jan 2026 19:23:45 +0000
ROA not after:            Tue 05 Jan 2027 19:28:45 +0000
asID:                     52436
IP address blocks:        132.255.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 09:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ca:35:17:0b:7c:ac:d9:58:40:04:ff:c0:50:fa:a0:f7:a0:a0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD8C886E7D641E553703DC5E196957F1368902C
        Validity
            Not Before: Jan  6 19:23:45 2026 GMT
            Not After : Jan  5 19:28:45 2027 GMT
        Subject: CN=A170C76128E688EC308A3B8548BA93CB9DA6EB21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9e:3c:38:1b:06:e0:6b:61:a3:bc:9d:07:57:
                    d8:8e:cd:e5:a3:cb:8a:46:2d:b8:5e:30:99:78:a5:
                    f0:03:e1:23:9c:41:ce:88:eb:c2:19:3e:0e:fd:55:
                    81:28:a1:30:00:73:83:f4:a3:28:47:a0:e2:27:c1:
                    a4:a2:af:9c:fb:30:54:e8:5c:06:bd:8c:2b:27:80:
                    93:56:5c:28:71:d9:1f:dc:06:49:b2:a5:59:d7:f6:
                    51:ea:db:36:b6:a0:af:4a:5d:5c:32:f3:b2:51:24:
                    90:4d:da:e0:13:8e:ec:b9:f1:21:d1:b8:0c:64:b0:
                    9e:db:d4:e1:4b:a9:86:fa:f0:7f:c5:3b:cb:7a:a2:
                    96:ce:c8:fe:4c:1f:c7:0f:a4:99:66:ec:e8:2c:84:
                    5b:30:5d:77:de:2b:59:5d:81:37:6b:b9:0d:46:ac:
                    85:37:d9:ff:89:45:02:58:48:96:86:06:55:23:4f:
                    85:c9:5f:46:ec:1c:4c:52:00:ae:7b:30:8a:98:72:
                    d7:27:67:be:75:3d:52:d9:50:e5:9f:3c:4d:85:b7:
                    78:7b:98:d3:d7:6a:ba:52:17:dc:b0:c3:52:87:75:
                    49:38:70:3d:85:22:5e:bf:14:b7:32:d7:b5:60:1f:
                    9c:ab:56:0e:8b:54:95:9b:c6:d0:6e:27:2c:92:99:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:70:C7:61:28:E6:88:EC:30:8A:3B:85:48:BA:93:CB:9D:A6:EB:21
            X509v3 Authority Key Identifier:
                keyid:0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3133322e3235352e3131322e302f32322d3234203d3e203532343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:eb:4f:fc:d6:f1:59:35:04:e8:2d:43:0b:fd:c3:2b:76:eb:
         fe:02:27:c4:d7:1c:da:e1:fc:d1:90:84:6a:de:ce:cb:b9:f9:
         71:a7:0e:35:85:23:c5:b1:ca:8b:67:22:ae:c7:3c:94:d8:c9:
         9c:f8:7a:75:24:05:77:77:4d:bf:e0:d6:56:60:a6:ba:f0:9c:
         16:f2:91:a2:12:92:a9:fe:bb:44:47:03:28:51:7c:c6:7c:f8:
         3a:50:9f:d3:e3:4b:6a:dd:7f:97:ae:a1:49:a9:38:c2:0a:fd:
         79:05:27:20:f5:55:81:e1:4b:0b:36:15:0f:3b:9d:4c:d9:51:
         aa:95:c7:be:ff:08:36:e6:09:a4:52:bb:92:17:27:62:18:78:
         cf:c1:13:07:bb:b0:78:98:b3:a3:8b:6d:87:b5:60:35:3f:dd:
         f5:c3:06:cb:3b:43:56:aa:09:7d:6c:b1:9f:da:c1:7e:91:42:
         4a:71:f6:7d:46:bf:81:cb:2a:a6:61:af:3a:96:9e:9a:ca:2d:
         d6:cf:05:da:f5:e0:3e:40:c2:f6:52:b3:79:63:01:3a:5e:9a:
         e6:57:e7:3e:49:59:5b:2f:9f:cc:34:60:3f:73:89:34:56:e5:
         93:0d:2d:15:bd:41:0a:35:12:e4:9a:af:38:dd:39:e3:02:31:
         d1:87:ce:57
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUW8o1Fwt8rNlYQAT/wFD6oPegoP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEREOEM4ODZFN0Q2NDFFNTUzNzAzREM1RTE5Njk1N0Yx
MzY4OTAyQzAeFw0yNjAxMDYxOTIzNDVaFw0yNzAxMDUxOTI4NDVaMDMxMTAvBgNV
BAMTKEExNzBDNzYxMjhFNjg4RUMzMDhBM0I4NTQ4QkE5M0NCOURBNkVCMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpnjw4Gwbga2GjvJ0HV9iOzeWj
y4pGLbheMJl4pfAD4SOcQc6I68IZPg79VYEooTAAc4P0oyhHoOInwaSir5z7MFTo
XAa9jCsngJNWXChx2R/cBkmypVnX9lHq2za2oK9KXVwy87JRJJBN2uATjuy58SHR
uAxksJ7b1OFLqYb68H/FO8t6opbOyP5MH8cPpJlm7OgshFswXXfeK1ldgTdruQ1G
rIU32f+JRQJYSJaGBlUjT4XJX0bsHExSAK57MIqYctcnZ751PVLZUOWfPE2Ft3h7
mNPXarpSF9yww1KHdUk4cD2FIl6/FLcy17VgH5yrVg6LVJWbxtBuJyySmT5/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUoXDHYSjmiOwwijuFSLqTy52m6yEwHwYDVR0j
BBgwFoAUDdjIhufWQeVTcD3F4ZaVfxNokCwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQjU1NEM0NzFBNzBBQjczQjk2NUIxNTY5QUE0NTRGQTMy
MTFGRDE0MkM4MzFBRUUxRUFGODlGQTBGRDEyRUI4LzAvMEREOEM4ODZFN0Q2NDFF
NTUzNzAzREM1RTE5Njk1N0YxMzY4OTAyQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wREQ4Qzg4NkU3RDY0MUU1NTM3
MDNEQzVFMTk2OTU3RjEzNjg5MDJDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkI1NTRDNDcxQTcwQUI3M0I5NjVCMTU2OUFBNDU0RkEzMjExRkQxNDJD
ODMxQUVFMUVBRjg5RkEwRkQxMkVCOC8wLzMxMzMzMjJlMzIzNTM1MmUzMTMxMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzQzMzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChP9w
MA0GCSqGSIb3DQEBCwUAA4IBAQC/60/81vFZNQToLUML/cMrduv+AifE1xza4fzR
kIRq3s7Luflxpw41hSPFscqLZyKuxzyU2Mmc+Hp1JAV3d02/4NZWYKa68JwW8pGi
EpKp/rtERwMoUXzGfPg6UJ/T40tq3X+XrqFJqTjCCv15BScg9VWB4UsLNhUPO51M
2VGqlce+/wg25gmkUruSFydiGHjPwRMHu7B4mLOji22HtWA1P931wwbLO0NWqgl9
bLGf2sF+kUJKcfZ9Rr+ByyqmYa86lp6ayi3WzwXa9eA+QML2UrN5YwE6XprmV+c+
SVlbL5/MNGA/c4k0VuWTDS0VvUEKNRLkmq843TnjAjHRh85X
-----END CERTIFICATE-----
Generated at Sun Jan 11 17:55:13 2026 by rpki-client