This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e382e302f32322d3232203d3e20323635363332.roa
File:                     3133312e3139362e382e302f32322d3232203d3e20323635363332.roa (raw, json)
Hash identifier:          7PmklBgfKqSc1voD4MOTQ8ocHwQiKcngU9Fj8I3BXJg=
Subject key identifier:   35:E6:AE:B8:1C:11:80:52:9C:08:59:55:0C:FE:2E:F1:26:A8:4A:1A
Certificate issuer:       /CN=F0F37A34F33318012581A719E771F871552D0509
Certificate serial:       12C5B666ADE21ADAB73ACB338DE6EC0EDAB35C3F
Authority key identifier: F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e382e302f32322d3232203d3e20323635363332.roa
Signing time:             Tue 06 Jan 2026 19:46:32 +0000
ROA not before:           Tue 06 Jan 2026 19:41:32 +0000
ROA not after:            Tue 05 Jan 2027 19:46:32 +0000
asID:                     265632
IP address blocks:        131.196.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c5:b6:66:ad:e2:1a:da:b7:3a:cb:33:8d:e6:ec:0e:da:b3:5c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F37A34F33318012581A719E771F871552D0509
        Validity
            Not Before: Jan  6 19:41:32 2026 GMT
            Not After : Jan  5 19:46:32 2027 GMT
        Subject: CN=35E6AEB81C1180529C0859550CFE2EF126A84A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:7f:60:05:ca:89:b5:3c:c3:2e:c1:49:4d:
                    7b:e2:a4:9f:3f:81:df:49:32:5b:cf:8d:be:b8:1f:
                    25:b3:ba:8a:b3:f2:d5:e8:d0:91:a2:91:95:86:bc:
                    19:cf:06:e3:08:d2:c1:c0:8a:65:6d:65:4e:dd:01:
                    46:36:18:2e:a3:22:bf:ab:cd:53:10:5e:24:12:72:
                    b2:1c:1e:65:99:b2:67:45:11:d1:a0:4c:08:61:9d:
                    ec:83:5d:28:0b:48:96:48:dd:8f:43:11:a6:98:98:
                    3f:1c:d2:8f:ad:ad:f9:f6:2a:ed:69:12:8e:87:3f:
                    9c:df:ac:6b:67:c5:08:78:35:3d:b9:55:f3:7b:73:
                    56:f9:f4:1d:20:3a:93:00:6e:19:72:b7:43:e2:4e:
                    fb:3b:bf:3d:17:ee:8c:8e:4b:58:98:a3:58:7d:7f:
                    99:f9:fe:90:c8:6a:2f:5b:e6:0d:64:05:e6:7c:3c:
                    b9:0e:b4:c0:9a:71:ef:bb:00:0c:1c:b0:c9:0f:51:
                    55:38:80:9b:51:28:00:ff:7e:d3:32:c9:a3:6b:39:
                    2d:9b:d1:61:4d:c9:f5:ab:ce:34:a2:c8:3a:77:7b:
                    3a:61:c7:8d:b4:e6:19:4d:03:98:5a:c4:9e:c0:14:
                    d5:3d:2a:4a:47:5e:c9:f6:5b:9d:32:d7:df:0e:ac:
                    4d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E6:AE:B8:1C:11:80:52:9C:08:59:55:0C:FE:2E:F1:26:A8:4A:1A
            X509v3 Authority Key Identifier:
                keyid:F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e382e302f32322d3232203d3e20323635363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:95:d7:99:20:2d:c0:ab:1a:32:51:fa:20:9a:67:1f:e1:3e:
         b2:10:b0:b1:06:4c:1a:23:d4:b8:d7:4e:cf:da:df:6f:15:a0:
         d0:55:04:fc:67:fb:e7:30:11:18:de:e3:27:14:37:b2:95:8c:
         bb:50:6d:64:25:7b:e1:b4:99:3e:93:38:c7:f0:6c:dc:7a:76:
         34:15:e5:5e:76:14:b4:27:9a:f4:08:36:77:cc:03:6f:a1:82:
         d9:f1:74:7b:d0:07:5d:b0:19:55:40:a5:de:1f:c4:c4:99:40:
         8b:c8:fd:df:dd:63:34:2c:f9:18:41:69:fc:94:27:d0:7f:c3:
         37:d1:f9:1b:13:ed:7f:ee:55:06:42:73:e3:5f:e6:24:1f:25:
         75:31:b1:3e:64:39:f2:04:14:4f:7a:27:4c:fe:26:90:bb:cf:
         d2:7d:f2:2f:32:9e:02:4b:d0:9e:4f:35:fc:b2:8e:61:3d:c9:
         81:e4:dc:3e:16:ac:7d:eb:3f:b1:6a:73:5e:77:86:b0:8e:ba:
         d1:4d:1d:28:de:63:e0:38:26:59:c2:f0:17:b3:83:c1:81:48:
         c4:6b:4f:7c:7c:98:7f:26:b5:28:74:64:35:11:f9:d3:b2:9a:
         10:f2:5c:8d:92:c1:71:a0:44:9a:e9:35:90:d9:d1:cd:e9:5b:
         34:9b:a2:02
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEsW2Zq3iGtq3OsszjebsDtqzXD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBGMzdBMzRGMzMzMTgwMTI1ODFBNzE5RTc3MUY4NzE1
NTJEMDUwOTAeFw0yNjAxMDYxOTQxMzJaFw0yNzAxMDUxOTQ2MzJaMDMxMTAvBgNV
BAMTKDM1RTZBRUI4MUMxMTgwNTI5QzA4NTk1NTBDRkUyRUYxMjZBODRBMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Vn9gBcqJtTzDLsFJTXvipJ8/
gd9JMlvPjb64HyWzuoqz8tXo0JGikZWGvBnPBuMI0sHAimVtZU7dAUY2GC6jIr+r
zVMQXiQScrIcHmWZsmdFEdGgTAhhneyDXSgLSJZI3Y9DEaaYmD8c0o+trfn2Ku1p
Eo6HP5zfrGtnxQh4NT25VfN7c1b59B0gOpMAbhlyt0PiTvs7vz0X7oyOS1iYo1h9
f5n5/pDIai9b5g1kBeZ8PLkOtMCace+7AAwcsMkPUVU4gJtRKAD/ftMyyaNrOS2b
0WFNyfWrzjSiyDp3ezphx4205hlNA5haxJ7AFNU9KkpHXsn2W50y198OrE0PAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUNeauuBwRgFKcCFlVDP4u8SaoShowHwYDVR0j
BBgwFoAU8PN6NPMzGAElgacZ53H4cVUtBQkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQTBBOUM3MjMzODVGNjFBNjU5QjZFN0IwNzA4MzA3OUE1
MUFFRTRGODUyMzA1OTNCRTk2MzRCNTk3NkJDNTM5LzAvRjBGMzdBMzRGMzMzMTgw
MTI1ODFBNzE5RTc3MUY4NzE1NTJEMDUwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMEYzN0EzNEYzMzMxODAxMjU4
MUE3MTlFNzcxRjg3MTU1MkQwNTA5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUEwQTlDNzIzMzg1RjYxQTY1OUI2RTdCMDcwODMwNzlBNTFBRUU0Rjg1
MjMwNTkzQkU5NjM0QjU5NzZCQzUzOS8wLzMxMzMzMTJlMzEzOTM2MmUzODJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNTM2MzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoPECDAN
BgkqhkiG9w0BAQsFAAOCAQEAz5XXmSAtwKsaMlH6IJpnH+E+shCwsQZMGiPUuNdO
z9rfbxWg0FUE/Gf75zARGN7jJxQ3spWMu1BtZCV74bSZPpM4x/Bs3Hp2NBXlXnYU
tCea9Ag2d8wDb6GC2fF0e9AHXbAZVUCl3h/ExJlAi8j9391jNCz5GEFp/JQn0H/D
N9H5GxPtf+5VBkJz41/mJB8ldTGxPmQ58gQUT3onTP4mkLvP0n3yLzKeAkvQnk81
/LKOYT3JgeTcPhasfes/sWpzXneGsI660U0dKN5j4DgmWcLwF7ODwYFIxGtPfHyY
fya1KHRkNRH507KaEPJcjZLBcaBEmuk1kNnRzelbNJuiAg==
-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:54 2026 by rpki-client