This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3133312e3130382e31362e302f32322d3232203d3e20323633373434.roa
File:                     3133312e3130382e31362e302f32322d3232203d3e20323633373434.roa (raw, json)
Hash identifier:          6cduiGIB2qNeC8HsTg4Hzkl+hYVCnqU4xyRoCSYWYjM=
Subject key identifier:   BB:24:0D:3C:40:07:8D:22:1A:12:6B:38:8B:9C:70:27:9D:AD:15:71
Certificate issuer:       /CN=632D71062751773B5FA51AC0AB69127826F756A2
Certificate serial:       30B96826653F4230B80D82EF58325CEFF4A107EE
Authority key identifier: 63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3133312e3130382e31362e302f32322d3232203d3e20323633373434.roa
Signing time:             Tue 06 Jan 2026 19:10:42 +0000
ROA not before:           Tue 06 Jan 2026 19:05:42 +0000
ROA not after:            Tue 05 Jan 2027 19:10:42 +0000
asID:                     263744
IP address blocks:        131.108.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b9:68:26:65:3f:42:30:b8:0d:82:ef:58:32:5c:ef:f4:a1:07:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632D71062751773B5FA51AC0AB69127826F756A2
        Validity
            Not Before: Jan  6 19:05:42 2026 GMT
            Not After : Jan  5 19:10:42 2027 GMT
        Subject: CN=BB240D3C40078D221A126B388B9C70279DAD1571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0e:70:b4:14:39:93:0e:a1:a3:16:8b:c8:6a:
                    a9:13:bf:13:eb:33:7e:74:8d:63:6c:71:13:f9:69:
                    25:12:87:76:bf:09:28:66:1d:4b:74:33:a0:1e:c3:
                    15:5a:63:5c:71:39:5b:e2:26:bc:bb:f4:83:35:8a:
                    fb:a4:25:15:94:50:39:0a:fc:61:f4:b3:6c:f4:6c:
                    55:d2:7c:64:f8:36:8f:e4:78:59:ab:3b:e0:7c:7b:
                    d5:2c:da:55:1a:e6:02:a9:46:b5:a1:b7:12:e1:f4:
                    4f:df:e6:4a:5d:51:b6:79:42:66:21:f8:6f:27:e4:
                    11:69:46:ef:be:fc:b5:e2:44:09:24:00:97:3e:89:
                    12:da:a9:d5:56:2c:1d:3e:e6:db:68:53:6a:dd:44:
                    2f:bb:78:47:2b:68:01:6b:09:04:fb:a5:64:46:72:
                    5c:0e:e5:74:23:3a:1a:7d:5e:8a:c7:cc:06:12:ab:
                    21:b0:ed:6a:cc:2e:5f:34:f5:c6:fe:53:c2:b7:8a:
                    af:79:b1:b3:fa:f0:84:08:a3:a2:a9:8f:31:c3:5e:
                    26:cb:a0:3a:47:4e:2c:c7:4a:2d:36:06:1e:58:8a:
                    86:dc:d9:f8:93:b9:21:c9:c3:4e:8f:39:a4:4b:3d:
                    88:d0:b9:61:37:3f:83:38:17:41:fd:cc:44:e3:15:
                    a9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:24:0D:3C:40:07:8D:22:1A:12:6B:38:8B:9C:70:27:9D:AD:15:71
            X509v3 Authority Key Identifier:
                keyid:63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3133312e3130382e31362e302f32322d3232203d3e20323633373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:75:13:0f:19:de:e1:e8:3c:6b:c2:0f:e7:2d:32:25:c0:ca:
         38:58:16:3a:f3:3b:30:e7:61:f1:49:f7:f5:a9:29:78:b7:25:
         f7:a7:11:c8:00:9a:32:57:e1:0b:a2:53:26:47:f1:c3:f1:a0:
         b0:97:c8:2a:fb:f1:61:df:7e:cb:d8:c6:5a:ec:6c:41:00:55:
         d5:8f:e8:b5:83:88:08:d0:72:5e:60:52:ca:14:3d:a3:ee:3e:
         88:c1:ef:40:c7:f8:09:fc:8e:42:a1:11:44:4c:76:fb:8e:a2:
         4d:86:3b:50:98:89:6f:52:70:52:ff:4f:b8:56:c4:2b:d9:df:
         1f:29:1f:fd:e2:d6:bf:2b:78:08:b3:5b:e5:b4:0e:40:ac:8d:
         45:ef:28:58:d3:7d:51:e5:a4:42:61:47:d0:76:14:b3:a9:83:
         36:0f:c5:66:ff:e1:7d:37:70:ff:31:5e:e5:9f:87:af:8b:9c:
         91:75:81:6e:1b:14:6c:bf:8e:e6:5e:c0:89:ab:3e:f8:c6:7e:
         50:4a:ab:00:a7:12:bd:e1:f2:37:85:93:ce:74:b3:d4:aa:f4:
         95:c5:b9:99:b7:39:b8:79:66:cf:62:1a:56:c0:76:1c:53:91:
         7f:91:ae:14:b1:cf:86:a2:d4:6d:e0:72:5b:45:2f:44:97:2d:
         c8:57:08:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:13 2026 by rpki-client