This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3136312e302e39362e302f32302d3234203d3e203532323333.roa
File:                     3136312e302e39362e302f32302d3234203d3e203532323333.roa (raw, json)
Hash identifier:          sOLJAM0cTqjE5lYumv7PZLeCUlycjTymX3/GlIVZ4vw=
Subject key identifier:   D8:A6:70:59:B0:0B:90:E5:15:CB:DA:94:D2:D6:7C:9C:ED:81:29:EE
Certificate issuer:       /CN=D1A55CA9F61A19739707656D810C4C2DDBDB13DF
Certificate serial:       061F1A5A5A794D2DA0DECCA243265FCEA25ABF24
Authority key identifier: D1:A5:5C:A9:F6:1A:19:73:97:07:65:6D:81:0C:4C:2D:DB:DB:13:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3136312e302e39362e302f32302d3234203d3e203532323333.roa
Signing time:             Tue 06 Jan 2026 19:29:39 +0000
ROA not before:           Tue 06 Jan 2026 19:24:39 +0000
ROA not after:            Tue 05 Jan 2027 19:29:39 +0000
asID:                     52233
IP address blocks:        161.0.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1f:1a:5a:5a:79:4d:2d:a0:de:cc:a2:43:26:5f:ce:a2:5a:bf:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1A55CA9F61A19739707656D810C4C2DDBDB13DF
        Validity
            Not Before: Jan  6 19:24:39 2026 GMT
            Not After : Jan  5 19:29:39 2027 GMT
        Subject: CN=D8A67059B00B90E515CBDA94D2D67C9CED8129EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:f3:82:9b:c3:c6:d7:e8:f2:6a:de:c6:e3:
                    b7:ef:d8:ca:23:61:29:06:85:20:ff:22:37:59:f3:
                    7d:46:d2:b9:fc:7e:90:2a:3b:0a:83:53:c5:b9:40:
                    68:a5:0d:af:82:1b:f1:08:ed:90:6c:a6:d7:d5:63:
                    86:be:34:b8:3c:17:fb:ef:5f:e5:fa:2f:2b:da:32:
                    8f:07:07:84:6e:b8:5f:df:cb:6a:b3:3f:66:99:d8:
                    39:e9:c0:1a:4e:5a:74:f8:d6:e1:6c:d7:60:da:e6:
                    e5:8b:84:85:3a:8b:5f:ab:8b:7c:c0:31:da:75:11:
                    86:9c:38:5e:18:30:a8:04:ad:85:e2:b3:29:d7:01:
                    db:11:64:73:ad:bb:7c:79:ee:c4:86:b4:e4:0f:a9:
                    45:30:43:d2:59:75:36:7b:bc:e6:61:1e:fc:4f:40:
                    1f:f8:6b:c0:5e:b4:58:9a:ca:7c:67:7c:ab:97:88:
                    dd:ba:47:bd:16:13:90:c7:6d:93:10:8a:bc:5c:bd:
                    10:51:93:16:10:e3:2b:96:53:61:04:92:95:0d:4e:
                    37:60:aa:62:5a:ae:75:bf:37:a0:7c:c5:3c:44:27:
                    1c:e1:46:52:33:2b:8b:65:c0:df:2c:a3:da:d1:b7:
                    8a:35:b6:ef:f2:f0:c9:fe:15:61:10:b2:9c:55:f7:
                    91:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A6:70:59:B0:0B:90:E5:15:CB:DA:94:D2:D6:7C:9C:ED:81:29:EE
            X509v3 Authority Key Identifier:
                keyid:D1:A5:5C:A9:F6:1A:19:73:97:07:65:6D:81:0C:4C:2D:DB:DB:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3136312e302e39362e302f32302d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:41:60:a4:eb:9a:80:89:32:67:40:99:e0:8b:f3:85:85:fc:
         b9:70:ff:f2:19:41:80:73:e9:86:98:15:63:60:41:81:7e:04:
         aa:95:1e:2d:e6:9c:59:ab:46:73:46:12:f9:50:43:d9:4d:36:
         1e:d9:1f:14:c2:73:06:6a:10:58:9a:9d:80:86:f5:b8:ac:fd:
         6c:3b:8e:f9:af:ae:06:c1:2f:a5:3c:e9:e8:29:49:da:ca:f9:
         44:10:e4:98:ed:db:c6:1f:74:b0:0e:ca:68:a1:58:db:2f:f3:
         23:be:42:21:84:d3:74:92:fe:e7:01:8b:d8:46:7e:c1:82:a8:
         68:09:74:c9:ac:df:fb:00:f6:f5:5f:bf:8c:5d:af:aa:52:58:
         c8:68:e1:32:fa:cd:fb:c2:63:ff:c4:4c:89:26:47:53:68:8c:
         5d:f9:c2:d6:6e:0c:12:71:a3:37:93:25:fc:c1:03:80:b8:ba:
         e8:96:62:42:db:3d:0e:59:da:4c:c9:14:05:3b:0a:8b:87:e4:
         5d:eb:94:c6:c0:6f:5c:2d:b3:7f:9f:21:8b:b0:ee:73:b1:aa:
         e4:9b:e0:13:a3:f3:5c:07:e4:5b:29:8d:f8:1e:a7:71:50:01:
         89:72:8a:a5:7c:bd:f4:65:87:d3:a6:e5:31:12:4a:b7:e8:b0:
         20:f3:e3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:59:27 2026 by rpki-client