This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/3133312e3232312e382e302f32322d3234203d3e20323633363930.roa
File:                     3133312e3232312e382e302f32322d3234203d3e20323633363930.roa (raw, json)
Hash identifier:          k1De1iaoffN5anV2wHPgIzefe4wBZidqGF/5n6pXPWs=
Subject key identifier:   F8:51:A9:01:C1:0D:86:31:99:8B:CD:74:6C:89:98:55:1D:59:08:67
Certificate issuer:       /CN=7DEC8FC037FE46A30FD532A83FCDEC72B729CC04
Certificate serial:       17A7E9572FD54D7C1F9E648E6B6A84B3054EDD51
Authority key identifier: 7D:EC:8F:C0:37:FE:46:A3:0F:D5:32:A8:3F:CD:EC:72:B7:29:CC:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/3133312e3232312e382e302f32322d3234203d3e20323633363930.roa
Signing time:             Tue 06 Jan 2026 19:15:46 +0000
ROA not before:           Tue 06 Jan 2026 19:10:46 +0000
ROA not after:            Tue 05 Jan 2027 19:15:46 +0000
asID:                     263690
IP address blocks:        131.221.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a7:e9:57:2f:d5:4d:7c:1f:9e:64:8e:6b:6a:84:b3:05:4e:dd:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DEC8FC037FE46A30FD532A83FCDEC72B729CC04
        Validity
            Not Before: Jan  6 19:10:46 2026 GMT
            Not After : Jan  5 19:15:46 2027 GMT
        Subject: CN=F851A901C10D8631998BCD746C8998551D590867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fd:46:73:b7:d0:c4:50:19:cf:bd:82:28:ba:
                    fd:57:0e:48:e2:da:7f:27:e3:e4:b3:b7:f3:82:44:
                    15:7e:ea:0d:c1:d4:3f:13:6a:64:76:6b:07:97:f6:
                    94:23:db:9f:50:29:90:77:0a:a7:f8:6f:10:9f:3f:
                    a8:8e:02:2a:97:e0:5d:f2:ae:00:24:92:d8:36:85:
                    9a:0c:15:c6:ca:7f:e1:50:a5:8d:a6:65:73:12:35:
                    70:dc:18:9a:e8:f7:43:e0:65:6b:da:af:a0:49:0d:
                    d3:4b:e1:71:53:11:c3:fa:f8:35:c5:40:69:8a:31:
                    1e:bd:10:53:14:48:aa:e7:d9:45:2d:4e:24:97:51:
                    92:a5:78:d3:ba:34:b3:06:a5:76:57:98:04:ae:bf:
                    fa:2c:a5:d8:5e:d2:59:96:05:f4:0b:45:2b:31:a0:
                    88:35:f0:68:c3:99:19:55:ac:55:b1:b2:5c:98:d8:
                    ef:ac:2a:11:91:ea:60:22:2c:34:7f:fa:95:ae:79:
                    72:ab:4a:4f:2a:27:28:8a:f6:7f:52:86:36:90:41:
                    06:e5:e7:8a:fd:7c:a0:f0:90:55:e8:23:20:7e:ab:
                    66:35:68:d0:b4:8b:c4:cd:c6:7b:52:88:6b:a0:a2:
                    01:b8:42:ff:f0:fb:14:b4:00:27:e6:c2:8d:35:56:
                    ce:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:51:A9:01:C1:0D:86:31:99:8B:CD:74:6C:89:98:55:1D:59:08:67
            X509v3 Authority Key Identifier:
                keyid:7D:EC:8F:C0:37:FE:46:A3:0F:D5:32:A8:3F:CD:EC:72:B7:29:CC:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DEC8FC037FE46A30FD532A83FCDEC72B729CC04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6835E0579C68E4B706030A9D2B7DEEEA9EBB69E97F5A21E3B9FABE7362B92030/0/3133312e3232312e382e302f32322d3234203d3e20323633363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:27:89:f1:2b:af:31:07:b6:08:7c:cb:c0:7b:d4:3d:af:6e:
         d4:85:64:49:47:15:8b:95:52:53:8d:21:40:54:50:75:0f:c9:
         5f:46:bc:6a:28:36:9d:d3:fd:e6:71:53:e5:4c:4d:14:dd:36:
         a7:bd:ac:45:f2:c2:ae:9e:f4:d8:61:ad:43:71:28:48:d9:d5:
         9c:b7:48:a3:08:0e:87:da:01:c9:ff:96:56:b0:9b:f3:e5:94:
         41:d4:f6:d3:0b:a1:f1:44:e4:b0:bb:d0:59:5d:fc:be:6e:4d:
         ba:f7:5f:e9:3f:3a:25:45:d4:31:05:36:0c:f7:dd:22:8a:1a:
         e9:6f:d7:97:55:30:f3:3f:92:35:00:21:91:44:55:e7:c4:8a:
         e8:41:17:a0:3d:37:5f:42:32:c0:d8:e2:a8:e9:2a:48:82:ee:
         6f:9c:40:01:7b:d5:2e:6b:1b:12:c2:cf:61:42:17:17:aa:2b:
         45:ac:71:82:6b:ff:b4:e1:e2:61:d5:62:d0:43:a1:a8:05:59:
         24:53:b5:68:3e:21:76:96:41:34:4b:6d:b5:2b:65:da:53:02:
         60:75:53:70:c4:33:00:76:3c:e4:28:d1:c2:d5:f2:aa:bc:57:
         f7:ad:19:ca:6a:49:07:87:55:2a:6b:36:88:46:45:46:3f:03:
         85:a3:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:05 2026 by rpki-client