This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/3133312e302e3130382e302f32322d3234203d3e20323637393036.roa
File:                     3133312e302e3130382e302f32322d3234203d3e20323637393036.roa (raw, json)
Hash identifier:          vqkn37jbJa+xlGDs79ZYteRQn1aPm+nC3N7Ff10pkac=
Subject key identifier:   3E:14:C5:DA:40:EA:81:6B:3A:8B:04:DA:8B:93:C2:64:F5:CF:F9:93
Certificate issuer:       /CN=4C23F5AA03BB1AFD7BAEE8E36D98415754948835
Certificate serial:       3A7AEDA42C10611AEEDFC42117F1796690179D98
Authority key identifier: 4C:23:F5:AA:03:BB:1A:FD:7B:AE:E8:E3:6D:98:41:57:54:94:88:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/3133312e302e3130382e302f32322d3234203d3e20323637393036.roa
Signing time:             Fri 16 Jan 2026 23:01:01 +0000
ROA not before:           Fri 16 Jan 2026 22:56:01 +0000
ROA not after:            Fri 15 Jan 2027 23:01:01 +0000
asID:                     267906
IP address blocks:        131.0.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7a:ed:a4:2c:10:61:1a:ee:df:c4:21:17:f1:79:66:90:17:9d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C23F5AA03BB1AFD7BAEE8E36D98415754948835
        Validity
            Not Before: Jan 16 22:56:01 2026 GMT
            Not After : Jan 15 23:01:01 2027 GMT
        Subject: CN=3E14C5DA40EA816B3A8B04DA8B93C264F5CFF993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ef:c4:40:2c:8e:97:ef:07:a0:e7:1f:e2:2a:
                    fc:46:61:16:33:19:b8:f7:1c:77:e2:2a:7a:e7:0c:
                    90:ba:09:13:29:93:59:df:41:81:63:60:7f:3f:15:
                    09:ba:c7:96:d6:d4:86:a4:3b:24:ff:07:17:a4:95:
                    a2:d2:31:6a:05:c0:d6:8e:8f:bd:68:1d:5a:1b:e9:
                    c0:43:30:f3:d4:67:0e:f2:2d:12:fe:55:2a:64:3c:
                    d2:cd:b9:79:36:8b:df:28:e0:ec:50:85:6f:ef:4f:
                    7f:0f:e9:98:ed:70:6d:79:d3:ef:6f:0f:8b:3d:14:
                    8e:ad:8d:3c:8d:04:f8:77:78:d4:8e:5e:27:14:a7:
                    c8:87:20:5a:25:cf:17:ad:b7:dc:28:7e:54:04:14:
                    cd:ec:da:6b:fd:ed:f9:26:2e:80:af:77:e6:ce:48:
                    0f:1d:0e:a6:37:31:da:d2:19:94:34:f1:51:f5:d7:
                    23:36:e3:a4:32:3f:c8:4c:6e:c0:05:76:4c:bb:14:
                    65:f5:56:85:fb:eb:50:69:72:85:57:e0:20:10:28:
                    79:57:88:51:87:77:0c:5b:e3:b2:e8:0a:ee:72:97:
                    c1:02:b7:d5:7a:13:83:7d:7e:d1:86:55:d1:bf:07:
                    3a:1a:51:df:66:d3:9c:e1:12:99:52:59:29:72:78:
                    d3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:14:C5:DA:40:EA:81:6B:3A:8B:04:DA:8B:93:C2:64:F5:CF:F9:93
            X509v3 Authority Key Identifier:
                keyid:4C:23:F5:AA:03:BB:1A:FD:7B:AE:E8:E3:6D:98:41:57:54:94:88:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/3133312e302e3130382e302f32322d3234203d3e20323637393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:90:fc:d3:12:fe:d8:11:53:36:a7:55:11:27:88:2a:d8:1c:
         f2:7e:3b:27:54:56:5e:e8:fa:80:6d:33:09:ec:b9:3e:c7:05:
         e2:b5:1b:d1:5d:bd:7c:a3:0f:49:6c:f4:64:bd:5b:2b:2e:68:
         18:13:6c:4e:b7:d1:0a:f4:dd:0b:fa:d8:a4:bc:76:39:29:3b:
         5d:e0:70:f3:af:37:f2:18:e3:c6:01:78:c9:9b:a1:7f:43:c6:
         10:c5:d6:17:e2:93:2d:87:57:2d:7e:2a:32:f9:9a:df:62:43:
         b4:9e:6c:ec:42:4e:ff:58:a5:d1:b9:f3:b1:9c:04:91:fa:d1:
         f9:fc:aa:b0:62:de:5f:cb:6f:1d:ea:2c:5e:0c:a1:49:3d:ec:
         d9:3c:8e:bd:ae:09:bc:60:52:6b:18:44:12:1f:d3:3b:14:91:
         50:ad:67:7e:9d:28:9a:12:ae:93:13:84:1c:d5:63:4f:a4:88:
         87:3e:97:22:8e:4c:86:09:df:de:4c:44:e5:63:32:e3:34:89:
         6f:87:7c:fc:cb:14:48:56:f7:c2:14:e4:4d:d1:d9:b3:c5:97:
         79:95:85:f6:b4:3d:e8:a7:aa:29:8d:9d:4e:0e:ef:b6:74:70:
         3a:c2:72:ab:e9:af:c5:ea:45:fc:84:3e:a6:18:76:47:99:3d:
         5b:ed:ed:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:41 2026 by rpki-client