This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/3133312e3232312e32342e302f32322d3234203d3e203237393330.roa
File:                     3133312e3232312e32342e302f32322d3234203d3e203237393330.roa (raw, json)
Hash identifier:          cbZVov481vHKnGeTlu0VmHLgMtrE6Zycacev/CIkzgs=
Subject key identifier:   D1:AE:4C:5D:F7:F4:E1:B3:E8:52:A5:49:33:4D:60:B5:E4:05:5F:BE
Certificate issuer:       /CN=B351C9CE7CE0D4DEB6D594AC423842D3729A0807
Certificate serial:       3007CB210C96E075406DE2EAB56120A5169EF7A8
Authority key identifier: B3:51:C9:CE:7C:E0:D4:DE:B6:D5:94:AC:42:38:42:D3:72:9A:08:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/3133312e3232312e32342e302f32322d3234203d3e203237393330.roa
Signing time:             Tue 06 Jan 2026 19:02:32 +0000
ROA not before:           Tue 06 Jan 2026 18:57:32 +0000
ROA not after:            Tue 05 Jan 2027 19:02:32 +0000
asID:                     27930
IP address blocks:        131.221.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:07:cb:21:0c:96:e0:75:40:6d:e2:ea:b5:61:20:a5:16:9e:f7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B351C9CE7CE0D4DEB6D594AC423842D3729A0807
        Validity
            Not Before: Jan  6 18:57:32 2026 GMT
            Not After : Jan  5 19:02:32 2027 GMT
        Subject: CN=D1AE4C5DF7F4E1B3E852A549334D60B5E4055FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:58:47:13:c7:57:30:18:61:65:a5:9e:08:8d:
                    bb:81:22:55:47:6b:76:69:b0:8c:70:40:c0:ce:fe:
                    a1:56:9e:36:9b:44:2b:f3:66:71:16:2d:a2:3f:14:
                    1c:2d:2c:44:2f:83:b4:bf:15:f3:15:c2:a0:02:59:
                    b7:24:f5:96:20:49:aa:c6:ea:0e:32:6f:70:f7:12:
                    98:99:b7:3b:a0:4d:ba:d1:a5:07:d6:ed:1c:83:c2:
                    d9:33:43:4f:e1:cd:89:f1:35:9b:ba:5c:ba:0b:a4:
                    06:20:93:81:87:5b:5d:82:34:45:1c:e6:0c:3e:b6:
                    a8:cf:81:e1:b7:fa:8b:3e:28:e6:6d:94:0d:ee:38:
                    8d:19:be:d0:00:11:c3:ea:f9:cd:0a:6e:3a:b3:50:
                    e4:bc:5c:96:aa:8a:5e:e9:5c:7c:7b:9f:19:fb:5c:
                    09:ff:e7:a9:ee:43:51:f7:5e:eb:1a:10:d6:d8:3e:
                    93:93:96:92:75:4b:61:f9:36:9f:e8:c5:67:71:08:
                    3e:fa:63:5d:37:4e:92:74:13:1e:08:bf:4b:12:c3:
                    80:49:35:07:14:48:d8:2c:63:9e:df:21:3d:8b:56:
                    96:4a:52:bd:60:95:64:fe:48:1e:41:89:d3:ad:26:
                    f4:02:34:3c:7c:51:c1:5a:55:21:fb:c7:8f:c3:7d:
                    ba:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AE:4C:5D:F7:F4:E1:B3:E8:52:A5:49:33:4D:60:B5:E4:05:5F:BE
            X509v3 Authority Key Identifier:
                keyid:B3:51:C9:CE:7C:E0:D4:DE:B6:D5:94:AC:42:38:42:D3:72:9A:08:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/3133312e3232312e32342e302f32322d3234203d3e203237393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:81:2c:98:23:f5:a1:21:0c:e0:f9:92:bf:7e:2f:97:c1:87:
         9b:cf:4c:9c:6e:76:36:61:c6:b8:44:33:f9:a9:f1:de:97:f7:
         73:87:d3:1d:f3:22:45:7b:69:01:7c:c3:d3:d0:a7:17:d5:34:
         cf:a4:a9:7b:b4:cb:86:ae:59:36:18:a1:3c:cd:9d:31:e4:06:
         f0:af:24:0d:f5:38:d2:0a:73:25:01:4a:7f:78:64:05:a9:3e:
         35:a9:25:7d:52:02:b0:ce:2b:d0:31:9a:8d:48:4d:93:e3:14:
         e6:e8:6a:49:06:3d:ad:54:db:f6:d0:db:c4:db:bc:d5:f8:5e:
         ed:26:0b:f0:cf:4d:b2:24:ec:a5:11:4d:87:5a:42:aa:87:99:
         1b:b4:86:e0:0b:00:1d:3e:db:36:a0:47:a1:72:ec:09:07:cb:
         ef:3d:ed:c3:f4:d6:7d:86:c6:c8:67:8f:54:2c:89:4e:ad:b5:
         c7:94:93:fb:14:1a:81:c6:f5:81:9f:6a:02:51:cf:1d:dd:df:
         35:84:6c:6e:f3:8e:ca:9c:5f:47:be:33:55:b8:6a:5b:d7:71:
         8d:4d:87:4d:6b:de:c3:51:da:c7:7f:58:e5:f6:07:07:e2:96:
         a2:e9:20:5f:09:9a:7f:d3:39:83:8e:03:8b:c4:a3:d6:85:fb:
         0f:42:63:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:05:28 2026 by rpki-client