This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/3133312e37322e3232342e302f32322d3234203d3e203532333337.roa
File:                     3133312e37322e3232342e302f32322d3234203d3e203532333337.roa (raw, json)
Hash identifier:          6zTm8c0ILKlBPKyWOQCZXvpedM0HH66i/cvkIHsmP+g=
Subject key identifier:   47:96:B1:E5:BC:3F:02:48:3E:8E:8D:7B:B4:42:F8:66:3B:59:94:33
Certificate issuer:       /CN=53953B71C225D2143C92C173E8F140C5C5F22612
Certificate serial:       443BF4969B2F577403BCD354AC7FAE428F840F09
Authority key identifier: 53:95:3B:71:C2:25:D2:14:3C:92:C1:73:E8:F1:40:C5:C5:F2:26:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53953B71C225D2143C92C173E8F140C5C5F22612.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/3133312e37322e3232342e302f32322d3234203d3e203532333337.roa
Signing time:             Tue 06 Jan 2026 19:39:15 +0000
ROA not before:           Tue 06 Jan 2026 19:34:15 +0000
ROA not after:            Tue 05 Jan 2027 19:39:15 +0000
asID:                     52337
IP address blocks:        131.72.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/53953B71C225D2143C92C173E8F140C5C5F22612.crl
                          rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/53953B71C225D2143C92C173E8F140C5C5F22612.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53953B71C225D2143C92C173E8F140C5C5F22612.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3b:f4:96:9b:2f:57:74:03:bc:d3:54:ac:7f:ae:42:8f:84:0f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53953B71C225D2143C92C173E8F140C5C5F22612
        Validity
            Not Before: Jan  6 19:34:15 2026 GMT
            Not After : Jan  5 19:39:15 2027 GMT
        Subject: CN=4796B1E5BC3F02483E8E8D7BB442F8663B599433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cd:a1:a0:e7:8b:f8:b9:a5:4a:0e:23:21:fa:
                    2e:57:60:d8:15:36:01:17:36:af:3e:4b:67:92:9c:
                    06:b6:a9:83:55:54:a2:e5:81:42:83:b4:dd:77:ee:
                    3d:0f:b8:4a:5f:34:58:a8:83:e5:4c:1a:0c:25:13:
                    1c:b4:3a:3b:26:5b:00:48:b7:ba:05:88:31:9a:14:
                    fc:79:9f:31:6d:12:a8:5d:46:a1:61:c2:e1:01:30:
                    ae:22:f0:f5:68:84:44:ee:26:bb:e9:95:f1:7d:01:
                    6d:c1:4a:cd:0d:70:cc:30:d7:17:e9:46:1c:4c:d6:
                    3c:c8:24:a1:45:c2:6e:70:17:85:8f:d3:84:c5:9a:
                    2c:e1:23:f0:e7:6f:71:6d:2a:cb:4c:7b:42:74:75:
                    be:f5:f9:03:83:b9:de:4c:77:f3:9e:a7:c4:46:10:
                    fb:17:49:38:0c:ae:f9:75:eb:8a:e5:e4:a8:64:5c:
                    c5:22:57:6b:23:f5:d3:e8:b4:f2:3b:74:73:c9:e1:
                    01:50:78:d7:0f:8e:03:d9:d7:f8:b6:5d:cd:28:19:
                    58:38:77:59:04:6e:96:ed:bc:1c:e3:c7:57:99:b1:
                    09:39:cb:32:e8:5e:fe:40:86:21:00:e3:67:4a:e5:
                    01:0b:03:c3:0d:c5:bc:ac:99:00:c8:12:a4:d7:11:
                    4a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:96:B1:E5:BC:3F:02:48:3E:8E:8D:7B:B4:42:F8:66:3B:59:94:33
            X509v3 Authority Key Identifier:
                keyid:53:95:3B:71:C2:25:D2:14:3C:92:C1:73:E8:F1:40:C5:C5:F2:26:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/53953B71C225D2143C92C173E8F140C5C5F22612.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53953B71C225D2143C92C173E8F140C5C5F22612.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/321930FA337A4AC8D474ACAA8CA8F1514123E3C21B9B720CD404877AD4DCD9EA/0/3133312e37322e3232342e302f32322d3234203d3e203532333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:cb:29:1b:82:08:09:73:02:b0:3a:fc:62:e5:8d:c7:1d:12:
         66:34:3a:b3:fe:0d:fd:7a:27:77:11:d8:b7:98:a5:ba:54:80:
         73:a2:15:c8:f2:02:10:af:81:e8:e6:95:d8:76:31:c3:4b:48:
         cb:f0:e7:f9:9f:67:ed:59:64:05:f7:36:ea:63:b8:3c:c1:7a:
         78:2e:e7:8d:bb:93:64:2e:eb:74:12:00:f0:3e:38:d8:1c:72:
         71:fc:cc:09:82:b1:09:3b:57:62:99:2c:f4:e1:b1:52:08:e9:
         eb:2d:83:12:35:9d:36:43:23:9d:f9:bf:14:a8:3f:c7:22:3d:
         e9:2f:05:fe:3e:33:ab:e9:04:af:3a:59:ff:34:f7:7d:de:f9:
         86:dc:c8:ba:a1:4e:33:7e:b1:91:3b:9b:ce:d0:0b:4c:21:5e:
         62:42:0d:a1:2d:a4:34:d6:57:db:41:56:2d:5b:cc:7d:cb:6c:
         c0:2d:05:c4:74:3c:0d:a9:f1:06:bb:00:8b:09:69:01:28:ed:
         7e:50:85:bd:be:09:a2:89:84:59:13:2d:65:2f:b1:77:71:e5:
         46:a2:81:b1:91:de:dd:8a:cf:06:a3:a9:fc:ec:8d:95:f4:9d:
         14:10:94:cf:f9:56:42:dc:f9:05:c5:58:fe:5f:52:5b:25:49:
         25:5a:c0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:18 2026 by rpki-client