This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3133312e302e3132382e302f32342d3234203d3e203532323638.roa
File:                     3133312e302e3132382e302f32342d3234203d3e203532323638.roa (raw, json)
Hash identifier:          yz7FfXAndPNiT8vKPGbFnN30kOQL7pH13ioxowmf/U8=
Subject key identifier:   3D:C5:5F:83:1E:A6:F0:1B:83:50:72:C2:93:B6:8A:2D:83:92:13:B9
Certificate issuer:       /CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
Certificate serial:       025504399370B1B2944A819AADE1650372D41F59
Authority key identifier: 51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3133312e302e3132382e302f32342d3234203d3e203532323638.roa
Signing time:             Fri 12 Dec 2025 13:54:48 +0000
ROA not before:           Fri 12 Dec 2025 13:49:48 +0000
ROA not after:            Fri 11 Dec 2026 13:54:48 +0000
asID:                     52268
IP address blocks:        131.0.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 Jan 2026 21:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:55:04:39:93:70:b1:b2:94:4a:81:9a:ad:e1:65:03:72:d4:1f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
        Validity
            Not Before: Dec 12 13:49:48 2025 GMT
            Not After : Dec 11 13:54:48 2026 GMT
        Subject: CN=3DC55F831EA6F01B835072C293B68A2D839213B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:cf:18:a3:87:b0:ea:b8:67:44:84:3d:13:
                    12:59:a6:96:08:02:fb:62:a6:26:46:58:b2:be:11:
                    77:97:06:0f:23:34:74:a5:f2:3f:71:4f:34:d2:6f:
                    6c:3b:15:e0:57:5f:e0:57:e7:4f:98:9d:15:3c:62:
                    2b:69:99:31:75:70:c5:ab:d3:e0:b0:bb:7e:2d:f3:
                    86:22:06:b0:a3:f3:05:7a:5e:ae:f3:88:1d:81:ae:
                    d2:ed:c1:b2:2e:0d:96:1c:a5:04:db:ce:25:9f:8f:
                    da:18:45:11:ff:b8:70:6f:aa:0b:09:19:63:52:0c:
                    98:ee:79:a8:19:91:ca:85:53:e7:44:f1:39:e1:74:
                    bd:64:38:e0:5b:17:81:d8:24:66:0d:52:a5:47:13:
                    6e:0a:8c:b7:a8:af:37:e3:e3:92:8a:31:b9:db:99:
                    a2:f6:6f:ae:33:9c:c6:d7:09:5e:cd:3c:aa:97:c8:
                    19:8c:27:4b:28:91:b0:cc:09:74:66:25:84:96:e8:
                    63:e3:ef:79:1c:60:7c:a6:b4:82:8a:0e:4a:f7:8b:
                    e1:f9:8e:e6:ad:73:6e:d0:d0:8e:54:60:c8:cd:06:
                    a2:a1:6d:71:3f:45:18:26:38:27:46:bd:a2:bf:e4:
                    b7:1e:7a:e6:58:67:c9:cc:18:28:6b:58:e0:b0:55:
                    84:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C5:5F:83:1E:A6:F0:1B:83:50:72:C2:93:B6:8A:2D:83:92:13:B9
            X509v3 Authority Key Identifier:
                keyid:51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3133312e302e3132382e302f32342d3234203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:d1:3d:94:79:85:46:55:80:31:7b:61:be:8f:cb:67:e0:50:
         91:0d:63:3b:6e:6c:f8:45:0e:24:7e:96:a9:da:01:98:5f:57:
         be:b0:70:15:5b:c7:7d:03:94:3a:fe:99:f9:e6:87:90:01:3b:
         06:70:05:75:61:df:08:e1:e8:59:f9:27:61:b7:9f:3c:b0:f6:
         47:f9:38:c0:41:b9:ba:d1:be:d2:5b:07:3a:6b:44:dd:a3:01:
         77:1e:d4:37:f8:3c:93:c7:eb:59:97:15:d8:62:36:8d:52:7b:
         5f:ea:35:c9:7f:61:9b:7b:1c:4d:cd:8f:e8:6a:56:b6:d1:26:
         30:75:d7:2b:4e:a6:61:ef:70:64:99:84:9b:85:a2:bb:c8:c1:
         02:c1:59:1c:e7:ed:4e:64:ea:60:6f:cd:0a:3c:b5:f0:43:70:
         f9:95:f3:b1:d6:3e:e0:cd:5b:19:98:4d:14:94:3f:20:4c:4a:
         18:38:39:d7:02:21:00:29:9b:51:d6:f0:61:83:56:36:17:a7:
         2d:e5:44:69:bf:95:0a:b2:72:12:06:8c:69:a1:5d:7b:ca:b2:
         52:21:25:eb:d0:24:70:08:de:23:98:a3:46:57:d6:a1:b2:e8:
         d8:43:5e:9a:f8:f0:58:0d:29:fb:c4:25:dd:a3:f1:f5:2c:35:
         e6:d7:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 12:18:43 2026 by rpki-client