This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/3133312e3130302e302e302f32322d3234203d3e203432343733.roa
File:                     3133312e3130302e302e302f32322d3234203d3e203432343733.roa (raw, json)
Hash identifier:          GxoZzI/2D8d8Zb/40KT0+GLgHX6v0ZqtbQn0ddcL04I=
Subject key identifier:   FF:F8:F3:62:50:95:3F:53:EE:8F:E6:F6:19:A9:B8:E5:E8:8E:CE:0A
Certificate issuer:       /CN=CC7F59E10868BFB993AAD4E7AC6585D3748F2855
Certificate serial:       525B9626AC627AB55685CC07C458296C1AF976A3
Authority key identifier: CC:7F:59:E1:08:68:BF:B9:93:AA:D4:E7:AC:65:85:D3:74:8F:28:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/3133312e3130302e302e302f32322d3234203d3e203432343733.roa
Signing time:             Tue 06 Jan 2026 19:16:18 +0000
ROA not before:           Tue 06 Jan 2026 19:11:18 +0000
ROA not after:            Tue 05 Jan 2027 19:16:18 +0000
asID:                     42473
IP address blocks:        131.100.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5b:96:26:ac:62:7a:b5:56:85:cc:07:c4:58:29:6c:1a:f9:76:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC7F59E10868BFB993AAD4E7AC6585D3748F2855
        Validity
            Not Before: Jan  6 19:11:18 2026 GMT
            Not After : Jan  5 19:16:18 2027 GMT
        Subject: CN=FFF8F36250953F53EE8FE6F619A9B8E5E88ECE0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:8b:84:3d:f6:69:73:73:4f:67:5a:bf:f7:
                    95:03:0f:95:2c:bf:e8:eb:83:71:3a:9d:e8:53:77:
                    28:71:07:68:d6:ed:84:77:e4:dc:37:4b:5d:cd:4d:
                    41:69:02:34:63:8a:d6:19:ab:f8:0c:91:2f:10:3b:
                    f5:87:9d:7d:e9:49:b4:3b:8f:f4:9b:84:03:a1:64:
                    e5:67:71:a9:28:61:29:cf:73:5e:42:f5:c2:64:f9:
                    7d:6d:c9:09:2f:da:9d:05:c8:a6:f7:5e:05:c6:6f:
                    85:03:b2:05:8b:d4:d2:82:82:e1:8b:ad:46:2b:09:
                    c9:8b:38:7f:fb:72:c0:88:a8:44:a2:d0:7a:6c:9b:
                    8b:37:bc:13:e5:af:f3:8f:14:51:1e:a7:26:48:62:
                    ce:90:c7:b3:cc:85:7f:0c:97:86:cb:12:69:13:b2:
                    db:f5:48:92:4a:e0:a9:47:4f:71:89:c0:78:83:0a:
                    a6:d7:63:68:7e:cc:1c:c9:a1:34:78:ec:a8:f4:2a:
                    3a:21:b2:76:04:32:f3:38:38:a9:26:e8:74:85:fa:
                    b9:a5:59:1b:86:39:76:47:dc:57:ce:2a:97:d8:40:
                    12:ba:6f:3c:23:38:fb:a8:b1:a1:69:67:18:85:c2:
                    3b:39:8e:6d:5a:3b:2e:9d:33:cf:69:69:2e:12:87:
                    9b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F8:F3:62:50:95:3F:53:EE:8F:E6:F6:19:A9:B8:E5:E8:8E:CE:0A
            X509v3 Authority Key Identifier:
                keyid:CC:7F:59:E1:08:68:BF:B9:93:AA:D4:E7:AC:65:85:D3:74:8F:28:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/3133312e3130302e302e302f32322d3234203d3e203432343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:3e:af:a4:46:a5:c5:74:60:9c:85:e5:90:93:a8:89:31:32:
         74:cd:df:a1:b6:22:47:ff:01:67:95:87:2c:be:5d:6d:ae:78:
         57:ea:55:69:91:14:22:27:01:0a:af:df:a9:ad:b4:5d:66:d8:
         2f:26:fd:ed:41:f2:cf:a3:ad:c5:29:76:d5:5b:77:ac:e6:3f:
         d2:fd:80:eb:46:78:3d:b5:f8:b4:9d:f3:ee:d0:e9:d3:9a:04:
         1d:23:60:7f:71:81:16:c9:c9:f8:45:34:08:d0:63:a6:8f:42:
         74:40:c6:be:ce:67:7b:38:61:b2:a6:d5:6a:2c:78:49:92:a1:
         2b:89:ff:ec:ab:30:b1:09:ae:86:13:f9:4b:17:04:bd:26:73:
         06:84:d1:df:af:5c:47:15:0e:56:fb:86:b9:d9:0d:6b:de:28:
         6d:c6:ce:af:f6:0a:a2:eb:ec:d9:84:82:20:ff:82:1d:0b:dc:
         c3:64:ab:17:6a:bb:71:47:45:1a:e1:8a:f0:8a:55:c2:49:6f:
         c7:09:82:2f:bf:cf:43:72:e2:a1:f9:05:6c:91:5d:1e:00:82:
         bb:2c:41:bf:f8:1a:3a:26:bc:e0:31:66:04:72:b8:11:e2:1f:
         67:e0:ff:5e:97:47:d0:ac:70:fc:a5:7b:ff:54:d9:33:07:ee:
         9c:44:19:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:25:36 2026 by rpki-client