This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3133312e37322e37322e302f32322d3234203d3e203238303338.roa
File:                     3133312e37322e37322e302f32322d3234203d3e203238303338.roa (raw, json)
Hash identifier:          WqQeP3jKfPkZMynPVY8RCe4ApB0QJgDh7ySA3uWvMlU=
Subject key identifier:   C7:48:2B:4D:67:5D:9D:DF:6D:4D:D9:18:4E:9B:79:E7:D4:C8:7F:B2
Certificate issuer:       /CN=CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8
Certificate serial:       549FE0C5FFE9A58F64CB55CFF44C67E028282529
Authority key identifier: CB:3D:66:30:5F:CD:8F:19:74:E1:E4:AD:92:D8:D4:F1:87:BA:51:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3133312e37322e37322e302f32322d3234203d3e203238303338.roa
Signing time:             Tue 06 Jan 2026 20:51:11 +0000
ROA not before:           Tue 06 Jan 2026 20:46:11 +0000
ROA not after:            Tue 05 Jan 2027 20:51:11 +0000
asID:                     28038
IP address blocks:        131.72.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 14:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9f:e0:c5:ff:e9:a5:8f:64:cb:55:cf:f4:4c:67:e0:28:28:25:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8
        Validity
            Not Before: Jan  6 20:46:11 2026 GMT
            Not After : Jan  5 20:51:11 2027 GMT
        Subject: CN=C7482B4D675D9DDF6D4DD9184E9B79E7D4C87FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:5a:9e:67:51:67:da:69:39:cd:9d:ca:8d:
                    50:0a:10:c5:a4:99:87:fb:ca:9b:44:0f:e6:5a:aa:
                    9d:47:c8:b5:d3:36:7d:8b:2e:8b:50:56:3e:33:7d:
                    c5:71:7f:32:56:8c:b9:57:96:ba:8c:fa:c2:09:f5:
                    bf:31:33:14:5f:b7:ba:ca:25:53:98:7c:08:9c:85:
                    2c:2b:92:04:ca:4c:d9:cf:0e:67:52:a9:d5:f9:39:
                    fe:8d:a0:e7:e8:d3:7e:d6:59:c4:db:29:6d:ef:2d:
                    dd:2a:36:47:3f:38:83:61:3b:b4:08:8e:25:af:08:
                    5f:a0:8b:25:69:5d:1c:26:b5:a5:90:21:80:35:24:
                    b6:df:ca:f1:46:6d:91:ea:5d:db:c5:81:47:cb:90:
                    06:6e:ca:ee:54:c2:b7:8f:f7:01:2b:69:41:9c:cf:
                    58:27:53:7c:d8:a9:fb:a7:f5:9b:50:97:b3:36:0c:
                    78:f9:6c:69:37:ae:75:4e:8a:6f:5e:d2:cf:0c:27:
                    3c:4a:fa:7d:45:d4:3e:04:2a:23:d8:d3:60:e3:a4:
                    01:e8:5b:09:6a:06:f5:07:a6:0f:db:2d:02:99:94:
                    a4:30:94:6e:6f:41:9a:c4:ec:60:56:1c:fb:06:d5:
                    99:7f:5e:16:36:6b:f8:de:97:0d:bf:e7:10:b4:28:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:48:2B:4D:67:5D:9D:DF:6D:4D:D9:18:4E:9B:79:E7:D4:C8:7F:B2
            X509v3 Authority Key Identifier:
                keyid:CB:3D:66:30:5F:CD:8F:19:74:E1:E4:AD:92:D8:D4:F1:87:BA:51:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3133312e37322e37322e302f32322d3234203d3e203238303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:1b:80:45:97:2d:5f:32:da:02:2b:e0:bc:35:f7:1a:95:ef:
         a9:d8:d7:51:13:59:1d:79:d6:71:71:be:9b:2a:a2:94:9b:61:
         c1:25:d9:61:37:38:51:eb:94:66:d9:54:b3:2d:06:4e:5e:73:
         b9:08:73:16:52:9b:43:42:51:8f:d8:f3:6d:86:f3:7e:b0:f2:
         36:0a:26:9e:d9:d4:62:9a:2b:22:f0:7b:31:04:76:db:7c:78:
         41:6a:23:88:8a:0a:cf:ea:39:54:24:ee:32:c4:60:d2:da:44:
         ac:36:4b:53:3f:89:f7:ec:c1:c6:84:07:1c:2c:24:ed:6d:0e:
         77:6b:12:ba:24:5a:46:d6:05:56:66:91:cc:2a:68:2d:98:f6:
         4b:75:88:af:e5:ee:3a:cb:7b:fa:f4:77:55:c9:ab:3a:b4:e2:
         17:44:e6:64:54:cd:38:fd:58:c1:b7:38:a0:0a:3e:54:7f:7e:
         63:18:d9:c5:2f:60:27:e4:f0:47:42:6e:b1:d4:0f:dc:93:dd:
         a1:19:a3:ce:67:77:7c:e9:f5:ff:ad:aa:05:07:89:98:47:73:
         70:7b:eb:9e:c5:d9:e1:ef:e6:be:e1:bf:01:43:1d:b7:aa:4e:
         65:ea:e8:a8:14:c6:bf:f6:2c:d5:c2:d8:6a:f2:09:07:35:99:
         71:ff:7b:cc
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUVJ/gxf/ppY9ky1XP9Exn4CgoJSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0IzRDY2MzA1RkNEOEYxOTc0RTFFNEFEOTJEOEQ0RjE4
N0JBNTFFODAeFw0yNjAxMDYyMDQ2MTFaFw0yNzAxMDUyMDUxMTFaMDMxMTAvBgNV
BAMTKEM3NDgyQjRENjc1RDlEREY2RDRERDkxODRFOUI3OUU3RDRDODdGQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwRFqeZ1Fn2mk5zZ3KjVAKEMWk
mYf7yptED+Zaqp1HyLXTNn2LLotQVj4zfcVxfzJWjLlXlrqM+sIJ9b8xMxRft7rK
JVOYfAichSwrkgTKTNnPDmdSqdX5Of6NoOfo037WWcTbKW3vLd0qNkc/OINhO7QI
jiWvCF+giyVpXRwmtaWQIYA1JLbfyvFGbZHqXdvFgUfLkAZuyu5UwreP9wEraUGc
z1gnU3zYqfun9ZtQl7M2DHj5bGk3rnVOim9e0s8MJzxK+n1F1D4EKiPY02DjpAHo
WwlqBvUHpg/bLQKZlKQwlG5vQZrE7GBWHPsG1Zl/XhY2a/jelw2/5xC0KJpDAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUx0grTWddnd9tTdkYTpt559TIf7IwHwYDVR0j
BBgwFoAUyz1mMF/Njxl04eStktjU8Ye6UegwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82OUQ0NEYzNjQ5MDcwNUNGMTMzOTI5NTI4QkI2NzkzQzMz
NDREMTBGNzkyNTRCNjI0NjUxMzEyNUExMDQyMDIwLzAvQ0IzRDY2MzA1RkNEOEYx
OTc0RTFFNEFEOTJEOEQ0RjE4N0JBNTFFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjNENjYzMDVGQ0Q4RjE5NzRF
MUU0QUQ5MkQ4RDRGMTg3QkE1MUU4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjlENDRGMzY0OTA3MDVDRjEzMzkyOTUyOEJCNjc5M0MzMzQ0RDEwRjc5
MjU0QjYyNDY1MTMxMjVBMTA0MjAyMC8wLzMxMzMzMTJlMzczMjJlMzczMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzgzMDMzMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKDSEgwDQYJ
KoZIhvcNAQELBQADggEBAHkbgEWXLV8y2gIr4Lw19xqV76nY11ETWR151nFxvpsq
opSbYcEl2WE3OFHrlGbZVLMtBk5ec7kIcxZSm0NCUY/Y822G836w8jYKJp7Z1GKa
KyLwezEEdtt8eEFqI4iKCs/qOVQk7jLEYNLaRKw2S1M/iffswcaEBxwsJO1tDndr
ErokWkbWBVZmkcwqaC2Y9kt1iK/l7jrLe/r0d1XJqzq04hdE5mRUzTj9WMG3OKAK
PlR/fmMY2cUvYCfk8EdCbrHUD9yT3aEZo85nd3zp9f+tqgUHiZhHc3B7657F2eHv
5r7hvwFDHbeqTmXq6KgUxr/2LNXC2GryCQc1mXH/e8w=
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:11 2026 by rpki-client