This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/3133312e3130382e3134312e302f32342d3234203d3e203631343930.roa
File:                     3133312e3130382e3134312e302f32342d3234203d3e203631343930.roa (raw, json)
Hash identifier:          9eXRY37KbKzffSoiguSwhFB8Y7YRbL56tmiD5WyS/U8=
Subject key identifier:   AE:67:D0:93:91:B7:55:1B:BF:81:A4:44:A1:D6:7B:E4:4A:4E:18:FF
Certificate issuer:       /CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
Certificate serial:       1D0A76B48610F92964019F9B2F32D9C999DF4465
Authority key identifier: D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/3133312e3130382e3134312e302f32342d3234203d3e203631343930.roa
Signing time:             Tue 06 Jan 2026 18:57:43 +0000
ROA not before:           Tue 06 Jan 2026 18:52:43 +0000
ROA not after:            Tue 05 Jan 2027 18:57:43 +0000
asID:                     61490
IP address blocks:        131.108.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0a:76:b4:86:10:f9:29:64:01:9f:9b:2f:32:d9:c9:99:df:44:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D74EEC332802572047CBE0FAB13F3CF2BA417AFF
        Validity
            Not Before: Jan  6 18:52:43 2026 GMT
            Not After : Jan  5 18:57:43 2027 GMT
        Subject: CN=AE67D09391B7551BBF81A444A1D67BE44A4E18FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c7:e1:01:d6:5d:f8:8c:54:66:11:e0:66:a7:
                    b4:97:d2:cd:c8:74:b5:1e:d6:dd:0c:51:46:56:be:
                    55:8c:84:e6:50:ca:e2:29:e0:f2:08:50:75:83:cf:
                    04:b7:e0:4f:2f:61:fe:32:f6:a2:c7:02:8c:39:f3:
                    c8:14:60:79:c0:06:76:8d:2e:bc:16:3c:f8:d4:48:
                    2f:6b:41:4f:b7:82:ec:0b:b3:93:bb:94:5e:c0:50:
                    4c:91:0c:17:b4:50:fc:fc:0d:31:40:9b:b4:ba:d7:
                    0a:8f:29:17:cd:c0:6a:a2:0c:43:1a:17:de:68:ee:
                    a7:a5:0d:bf:7c:e0:e6:1a:e2:ee:9a:e6:73:9d:40:
                    5b:3c:09:6c:ed:64:82:c6:80:2b:ca:04:a9:cd:92:
                    ee:e1:bb:85:00:99:1f:dd:43:88:85:c3:e0:17:43:
                    5f:04:f3:95:4f:ce:ac:b0:87:4a:56:ec:f3:f9:f5:
                    d7:87:46:7c:96:37:74:28:4e:9c:35:d1:d7:f7:36:
                    d6:56:6d:55:b9:04:70:ec:05:b8:84:1e:a3:e8:2a:
                    3a:0c:aa:8c:3c:8e:95:ef:f9:f0:a2:a1:75:f5:e7:
                    31:0b:2e:d5:f0:93:71:ed:ad:dc:6f:b1:c5:9d:e1:
                    30:c5:dc:3f:9f:16:f3:e1:09:da:a3:27:20:32:6e:
                    68:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:67:D0:93:91:B7:55:1B:BF:81:A4:44:A1:D6:7B:E4:4A:4E:18:FF
            X509v3 Authority Key Identifier:
                keyid:D7:4E:EC:33:28:02:57:20:47:CB:E0:FA:B1:3F:3C:F2:BA:41:7A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D74EEC332802572047CBE0FAB13F3CF2BA417AFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296CACF4DBEE77502940FAD50279723AF0DA139E5C75A6B5BCEBA6B1C143DB88/0/3133312e3130382e3134312e302f32342d3234203d3e203631343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:d8:4a:d5:e5:df:99:3d:57:8d:74:f2:0d:a1:dd:1f:8b:ab:
         61:7b:0a:85:83:2f:c7:8a:30:dc:a9:65:c0:1a:43:d4:70:97:
         5f:4e:e1:b3:96:61:36:bc:32:31:95:a4:05:97:3d:0b:76:a0:
         ff:58:14:5f:c9:7f:92:8b:dc:99:b8:11:a4:42:6e:5a:e6:61:
         a4:5e:72:30:4b:8f:75:7c:16:1a:73:f7:6e:b9:1f:a8:cd:a6:
         53:c4:45:d7:b2:a0:37:8b:86:0b:00:42:6f:c2:ef:8e:ca:76:
         4e:8b:fc:d2:00:70:3a:05:ba:76:79:e2:14:51:5c:ae:da:be:
         3a:c9:1d:81:e8:80:b3:b0:75:80:e6:59:2a:d8:1c:ed:97:ee:
         32:1a:ed:42:7f:39:41:4d:d1:d6:76:56:d3:a6:af:64:b4:1c:
         32:69:c7:c2:1d:6d:27:54:ea:2b:d3:38:09:f1:b7:ba:e8:6c:
         05:be:a7:87:c8:b7:f9:89:98:2c:65:9e:67:2c:10:e4:73:06:
         ee:bc:be:34:a2:ee:f5:d7:04:15:53:bf:6b:05:71:4f:21:1c:
         bc:8b:38:59:c4:3b:d9:e1:47:a3:bc:78:9d:08:2e:c8:af:b5:
         69:82:e5:db:02:33:b1:5c:af:32:cc:be:21:2f:d5:10:7e:d9:
         81:d7:ad:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:43 2026 by rpki-client