This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e392e3132382f32352d3235203d3e20323635363332.roa
File:                     3133312e3139362e392e3132382f32352d3235203d3e20323635363332.roa (raw, json)
Hash identifier:          8xi/PMh3mRxd+2qllJ1nmHwYaOv8nHtAbV1JAOtHyfg=
Subject key identifier:   2C:B2:10:1B:B2:EB:07:C1:4A:A0:CA:61:CB:2C:66:49:D6:A1:40:82
Certificate issuer:       /CN=F0F37A34F33318012581A719E771F871552D0509
Certificate serial:       100517420D19AACABF368948638BA721C2B2D8B0
Authority key identifier: F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e392e3132382f32352d3235203d3e20323635363332.roa
Signing time:             Tue 06 Jan 2026 19:46:31 +0000
ROA not before:           Tue 06 Jan 2026 19:41:31 +0000
ROA not after:            Tue 05 Jan 2027 19:46:31 +0000
asID:                     265632
IP address blocks:        131.196.9.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 15:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:05:17:42:0d:19:aa:ca:bf:36:89:48:63:8b:a7:21:c2:b2:d8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F37A34F33318012581A719E771F871552D0509
        Validity
            Not Before: Jan  6 19:41:31 2026 GMT
            Not After : Jan  5 19:46:31 2027 GMT
        Subject: CN=2CB2101BB2EB07C14AA0CA61CB2C6649D6A14082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:e3:b9:4a:11:5b:a0:30:60:ca:2c:d7:31:
                    7d:ae:be:d7:50:bc:2c:5e:5b:e2:3f:fd:70:b3:3d:
                    fc:b5:fb:2e:96:35:f2:59:7f:f9:cd:70:bc:0c:9f:
                    d6:a0:e8:22:33:30:fe:ad:50:00:eb:95:bb:ca:d8:
                    2e:b5:e3:55:c4:8c:4d:b4:39:5f:d3:42:b6:64:5d:
                    75:26:1a:3d:18:0e:a8:92:73:d1:c5:96:d9:15:61:
                    1b:c7:c4:36:76:f4:b2:db:4f:26:93:a9:6e:3d:6b:
                    58:48:e9:6a:8d:27:0b:be:9d:12:03:43:e2:44:c1:
                    63:ac:4a:57:7f:4c:7c:a3:6b:df:40:fe:d8:f0:af:
                    66:5c:f1:15:e9:a9:4a:bc:0a:78:b0:4a:76:61:09:
                    69:68:3b:07:ee:40:2d:54:41:f4:b9:73:4f:2c:46:
                    65:08:78:a5:0c:07:08:00:89:07:a2:f7:f1:b7:49:
                    d8:3e:5a:aa:d9:1e:93:d2:a3:6c:a4:53:ea:f9:4f:
                    48:03:91:08:68:7d:85:89:e4:da:3a:ad:15:86:3f:
                    29:22:49:9b:b2:65:65:95:41:11:57:0a:6b:f8:29:
                    04:a2:7c:79:3c:ab:6d:c5:8c:ba:19:94:cb:cf:37:
                    41:8c:90:c8:53:f6:9e:c0:78:63:58:26:04:b6:13:
                    b2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B2:10:1B:B2:EB:07:C1:4A:A0:CA:61:CB:2C:66:49:D6:A1:40:82
            X509v3 Authority Key Identifier:
                keyid:F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e392e3132382f32352d3235203d3e20323635363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.9.128/25

    Signature Algorithm: sha256WithRSAEncryption
         38:b0:5d:cb:18:c6:11:f4:a8:e3:7b:db:8d:96:54:4a:22:f2:
         1c:ed:5f:13:ec:d2:1e:65:50:6a:ef:6b:e5:cc:dc:24:59:da:
         0c:5a:13:e6:82:b4:cd:b5:92:55:28:3b:39:7d:09:c9:96:83:
         62:3a:71:2d:30:46:30:01:af:17:55:63:38:73:25:55:2d:68:
         a2:6c:a5:b8:68:45:2d:27:e7:9f:d1:6d:f7:00:54:a1:43:3b:
         38:aa:a0:7d:49:3c:fa:2c:14:33:3d:a5:ad:c2:42:e6:ed:30:
         e3:89:13:87:eb:15:a5:e8:93:e0:c8:eb:2a:ce:e8:c7:ad:86:
         d9:36:d1:0a:69:60:e1:6b:b4:0f:32:fb:0a:0f:a1:c4:ce:d7:
         3e:8f:9a:aa:a6:6c:3e:c7:34:f6:82:4b:49:3e:5d:46:8a:d5:
         47:97:34:c9:b5:3d:03:c4:6f:66:d5:0e:64:34:6a:ae:90:fa:
         d3:87:1d:aa:9f:34:ab:7c:35:57:46:48:1a:0a:c8:80:35:85:
         e4:e9:61:07:10:c7:ab:cf:fc:f2:13:61:0f:6d:c8:5a:58:e1:
         3b:68:f0:36:3a:e1:fc:81:f8:e1:6c:08:3d:a2:18:b6:d7:53:
         cf:57:27:1a:7e:d2:d6:74:f2:46:78:1a:6c:d5:4e:36:e5:ff:
         d9:26:8d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:39 2026 by rpki-client