This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133322e3235352e3233362e302f32322d3234203d3e203532343339.roa
File:                     3133322e3235352e3233362e302f32322d3234203d3e203532343339.roa (raw, json)
Hash identifier:          nH3EY/vbgd/FgpoVUV4knNkAe39hX3Sq5Er52FQ7PsQ=
Subject key identifier:   40:84:83:5E:7C:F1:D7:A4:CC:BE:62:D1:42:BA:22:16:80:8D:FF:04
Certificate issuer:       /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial:       5A54779D03AE6D8AA2EE844AD208DAF7FBCEB258
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133322e3235352e3233362e302f32322d3234203d3e203532343339.roa
Signing time:             Tue 06 Jan 2026 19:40:56 +0000
ROA not before:           Tue 06 Jan 2026 19:35:56 +0000
ROA not after:            Tue 05 Jan 2027 19:40:56 +0000
asID:                     52439
IP address blocks:        132.255.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:54:77:9d:03:ae:6d:8a:a2:ee:84:4a:d2:08:da:f7:fb:ce:b2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
        Validity
            Not Before: Jan  6 19:35:56 2026 GMT
            Not After : Jan  5 19:40:56 2027 GMT
        Subject: CN=4084835E7CF1D7A4CCBE62D142BA2216808DFF04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:59:d8:07:ed:82:6c:ea:24:93:d3:75:2b:ed:
                    26:8f:a8:57:aa:af:e9:26:e7:f6:1e:fe:00:a3:3a:
                    08:52:3f:57:b3:42:71:76:d5:ae:6a:1e:67:0b:ba:
                    3a:f5:9f:56:9a:c8:04:2c:83:97:22:af:35:78:1f:
                    29:74:6e:3a:e5:a8:f3:78:f8:df:fb:ed:ae:c0:7c:
                    5e:45:0d:e3:16:7d:1b:6d:b3:0e:f4:13:a8:47:a0:
                    3d:f1:08:08:03:74:5f:51:25:fd:49:c2:d9:14:de:
                    b3:6d:17:3a:d9:6d:2d:3f:0f:2f:16:c9:83:98:6d:
                    6d:27:0f:5b:a0:be:01:0b:db:2a:0a:f2:7c:d2:be:
                    49:fb:ff:f6:6e:18:ed:dd:79:cc:c5:df:c1:69:99:
                    31:a8:66:d8:94:48:d4:a0:09:a5:6e:23:04:5e:32:
                    a4:8a:4c:c3:1d:b5:ee:dc:2e:b8:03:46:b2:d3:91:
                    fb:0e:5e:92:a9:59:27:6d:1f:be:7f:32:cb:ba:fb:
                    e9:71:9e:2d:b8:11:0d:86:ed:83:85:52:9c:85:fc:
                    df:e9:42:74:1c:69:5a:73:34:5c:8f:f6:1e:c9:8f:
                    1c:2e:51:90:2c:8c:fa:b1:89:1b:e8:45:87:c9:5c:
                    34:8a:a6:2d:c7:f5:11:6b:0f:25:06:41:fd:ed:25:
                    49:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:84:83:5E:7C:F1:D7:A4:CC:BE:62:D1:42:BA:22:16:80:8D:FF:04
            X509v3 Authority Key Identifier:
                keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133322e3235352e3233362e302f32322d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:a1:df:48:6f:eb:7d:24:65:14:70:a0:8d:e7:f4:89:2d:4d:
         cd:dc:29:43:61:10:4e:32:57:d5:51:4f:a0:b8:d4:84:0c:97:
         58:43:e9:1e:5a:34:97:20:87:fb:56:af:46:0a:6f:a0:4b:ea:
         13:aa:89:74:1e:27:de:15:4f:b5:f4:96:2b:d6:20:78:c8:3e:
         59:30:85:48:79:9b:81:2a:cf:db:89:e1:63:9e:b1:10:28:2d:
         d9:83:19:bd:3a:13:09:3e:fa:a0:51:be:10:ff:97:a0:ce:63:
         c7:ef:06:1f:a4:43:af:0a:58:cc:6b:15:98:15:24:a7:ad:40:
         6c:55:83:c5:79:a1:f8:6a:34:a0:82:97:f7:72:cb:56:ea:63:
         89:65:fd:b5:30:93:2e:6d:61:c5:2e:58:f6:05:c2:bb:69:db:
         8c:13:c8:d3:b2:17:a9:63:7a:5f:23:ef:51:8b:c5:95:e3:ee:
         6f:c2:d6:25:93:42:12:b7:8f:90:c9:d1:32:77:ad:7a:2b:42:
         e1:ee:b1:ea:40:91:d1:8b:55:59:db:0b:47:fd:b2:41:89:09:
         af:29:83:e4:c5:01:07:6b:69:82:24:6a:b6:77:3d:8e:66:7a:
         d9:2e:81:d7:19:82:ec:92:e1:57:54:e4:57:ad:3a:da:20:ba:
         78:47:7e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:23 2026 by rpki-client