This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/3133312e37322e3234312e302f32342d3234203d3e203532333239.roa
File:                     3133312e37322e3234312e302f32342d3234203d3e203532333239.roa (raw, json)
Hash identifier:          jMLHUiUHAr0UM8SUSHrjED8R8+anfFxd2uH7h4JX80s=
Subject key identifier:   D6:B8:45:FA:FE:6E:4E:7F:C7:65:8F:F2:A2:6B:1A:E8:93:9D:E4:4A
Certificate issuer:       /CN=EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7
Certificate serial:       3AEB31D64F48EEA2F37C4DC383CC2EBCA76FDE5A
Authority key identifier: EC:86:9B:AF:B5:A3:88:2F:B7:CB:6D:7F:22:FD:36:68:59:61:C5:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/3133312e37322e3234312e302f32342d3234203d3e203532333239.roa
Signing time:             Mon 15 Dec 2025 20:55:03 +0000
ROA not before:           Mon 15 Dec 2025 20:50:03 +0000
ROA not after:            Mon 14 Dec 2026 20:55:03 +0000
asID:                     52329
IP address blocks:        131.72.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 21:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:eb:31:d6:4f:48:ee:a2:f3:7c:4d:c3:83:cc:2e:bc:a7:6f:de:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7
        Validity
            Not Before: Dec 15 20:50:03 2025 GMT
            Not After : Dec 14 20:55:03 2026 GMT
        Subject: CN=D6B845FAFE6E4E7FC7658FF2A26B1AE8939DE44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:90:0e:ee:4f:18:fa:12:c4:d6:a1:c1:59:
                    8d:31:48:c3:d0:2a:e5:d8:4c:f9:98:84:f1:34:34:
                    b5:a4:bc:ff:1e:a5:8c:4b:7b:3c:cc:f8:64:6d:71:
                    29:bb:0c:38:95:ea:7f:12:98:5c:83:7d:88:57:5a:
                    cb:09:a0:51:f4:65:c3:5e:37:6c:a4:1a:47:e7:c0:
                    10:75:98:d5:42:2f:b6:c3:94:99:a0:2f:c4:ea:6f:
                    6c:4c:2a:e6:10:06:ea:d9:fe:a9:3f:fe:bf:df:23:
                    cf:b8:39:a3:bd:b2:a9:2a:74:5b:a1:f2:48:41:00:
                    c1:78:22:b4:7a:43:b9:87:b6:24:c0:c8:25:a7:af:
                    10:b2:11:91:a8:78:92:84:b7:dc:72:c2:4d:05:2a:
                    df:5d:34:f7:69:a1:cc:91:b5:04:17:b2:d3:f2:1e:
                    b7:a9:cc:ba:6e:d7:36:3c:88:6c:a9:47:af:66:23:
                    f7:86:44:0d:5d:1f:2b:43:ae:5f:7f:f1:36:1f:f0:
                    fb:01:bc:45:bd:40:d0:5e:b2:13:39:f7:66:b4:58:
                    04:8f:42:c8:b9:58:7c:fe:24:27:0a:85:21:5c:82:
                    1d:b7:5d:54:8e:37:77:dd:de:3c:11:99:92:36:c1:
                    bb:26:a3:0b:44:66:54:f9:e1:d2:6b:6a:d3:80:10:
                    c7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B8:45:FA:FE:6E:4E:7F:C7:65:8F:F2:A2:6B:1A:E8:93:9D:E4:4A
            X509v3 Authority Key Identifier:
                keyid:EC:86:9B:AF:B5:A3:88:2F:B7:CB:6D:7F:22:FD:36:68:59:61:C5:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/3133312e37322e3234312e302f32342d3234203d3e203532333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:ba:a7:8b:de:3a:55:9d:76:f1:d0:2e:69:fb:8f:96:ac:b1:
         f3:bc:ff:34:b7:dc:08:e7:6f:a3:0d:bd:27:91:33:c9:b6:fc:
         b0:dc:f7:8b:de:71:72:7b:dd:94:91:23:ab:c7:fb:5c:06:47:
         e7:2c:f3:52:b5:da:86:55:c9:40:9a:29:83:94:10:0f:dd:0c:
         e5:3f:66:c8:17:98:63:58:ad:b1:8e:f9:e0:b4:12:94:10:2d:
         ef:1a:47:5e:94:12:13:0d:dc:f5:75:d2:c3:b7:04:6f:6a:e8:
         88:cf:c3:56:6c:7e:80:29:71:32:0d:42:68:b5:af:32:8a:2e:
         d1:f1:d5:99:95:55:29:e3:f9:a3:e7:cb:bf:24:50:73:bf:76:
         7e:95:21:7c:d6:a4:13:a4:42:d0:e4:a1:6a:12:f8:12:7a:79:
         9d:e5:92:9a:b8:97:8e:b5:ee:18:a5:28:20:06:80:9d:67:9c:
         5a:ed:05:d7:de:36:e7:be:17:93:ef:98:1c:ef:42:57:36:df:
         72:a0:b4:8b:3f:72:3d:df:eb:00:01:8c:4c:0a:73:f7:32:39:
         74:9c:fd:51:23:a8:47:3b:04:32:33:e8:0b:41:d5:98:06:88:
         c6:e6:89:d2:91:f1:08:d6:09:33:4a:83:91:bd:78:ff:7d:b3:
         07:aa:af:b1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOusx1k9I7qLzfE3Dg8wuvKdv3lowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM4NjlCQUZCNUEzODgyRkI3Q0I2RDdGMjJGRDM2Njg1
OTYxQzVCNzAeFw0yNTEyMTUyMDUwMDNaFw0yNjEyMTQyMDU1MDNaMDMxMTAvBgNV
BAMTKEQ2Qjg0NUZBRkU2RTRFN0ZDNzY1OEZGMkEyNkIxQUU4OTM5REU0NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kZAO7k8Y+hLE1qHBWY0xSMPQ
KuXYTPmYhPE0NLWkvP8epYxLezzM+GRtcSm7DDiV6n8SmFyDfYhXWssJoFH0ZcNe
N2ykGkfnwBB1mNVCL7bDlJmgL8Tqb2xMKuYQBurZ/qk//r/fI8+4OaO9sqkqdFuh
8khBAMF4IrR6Q7mHtiTAyCWnrxCyEZGoeJKEt9xywk0FKt9dNPdpocyRtQQXstPy
HrepzLpu1zY8iGypR69mI/eGRA1dHytDrl9/8TYf8PsBvEW9QNBeshM592a0WASP
Qsi5WHz+JCcKhSFcgh23XVSON3fd3jwRmZI2wbsmowtEZlT54dJratOAEMdNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU1rhF+v5uTn/HZY/yomsa6JOd5EowHwYDVR0j
BBgwFoAU7Iabr7WjiC+3y21/Iv02aFlhxbcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNTJFMkQyNTBGNUJBQUJFRjI2NEU5RTBBNTJGRjcxRThD
OUFDQkRDODc4MzVBNUJGQkM1QUZFRTY4OUM3MUVBLzAvRUM4NjlCQUZCNUEzODgy
RkI3Q0I2RDdGMjJGRDM2Njg1OTYxQzVCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzg2OUJBRkI1QTM4ODJGQjdD
QjZEN0YyMkZEMzY2ODU5NjFDNUI3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzUyRTJEMjUwRjVCQUFCRUYyNjRFOUUwQTUyRkY3MUU4QzlBQ0JEQzg3
ODM1QTVCRkJDNUFGRUU2ODlDNzFFQS8wLzMxMzMzMTJlMzczMjJlMzIzNDMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAINI8TAN
BgkqhkiG9w0BAQsFAAOCAQEAmLqni946VZ128dAuafuPlqyx87z/NLfcCOdvow29
J5Ezybb8sNz3i95xcnvdlJEjq8f7XAZH5yzzUrXahlXJQJopg5QQD90M5T9myBeY
Y1itsY754LQSlBAt7xpHXpQSEw3c9XXSw7cEb2roiM/DVmx+gClxMg1CaLWvMoou
0fHVmZVVKeP5o+fLvyRQc792fpUhfNakE6RC0OShahL4Enp5neWSmriXjrXuGKUo
IAaAnWecWu0F1942574Xk++YHO9CVzbfcqC0iz9yPd/rAAGMTApz9zI5dJz9USOo
RzsEMjPoC0HVmAaIxuaJ0pHxCNYJM0qDkb14/32zB6qvsQ==
-----END CERTIFICATE-----
Generated at Mon Dec 22 07:43:08 2025 by rpki-client