This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/3133312e3136312e3135322e302f32322d3234203d3e203237383138.roa
File:                     3133312e3136312e3135322e302f32322d3234203d3e203237383138.roa (raw, json)
Hash identifier:          B0ZkBZm5INQiSxSRrC7t6lysGfOWljvMGW8pQHHec1I=
Subject key identifier:   90:B5:C8:12:51:16:C8:3C:86:DF:F7:B1:F4:FC:79:6D:A4:5B:56:A0
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       44389AA74D0BDB75EA09D149D0E50592C129DC37
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/3133312e3136312e3135322e302f32322d3234203d3e203237383138.roa
Signing time:             Tue 06 Jan 2026 19:20:23 +0000
ROA not before:           Tue 06 Jan 2026 19:15:23 +0000
ROA not after:            Tue 05 Jan 2027 19:20:23 +0000
asID:                     27818
IP address blocks:        131.161.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:38:9a:a7:4d:0b:db:75:ea:09:d1:49:d0:e5:05:92:c1:29:dc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Jan  6 19:15:23 2026 GMT
            Not After : Jan  5 19:20:23 2027 GMT
        Subject: CN=90B5C8125116C83C86DFF7B1F4FC796DA45B56A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:a3:ea:58:0a:01:12:b2:f3:56:78:41:f1:
                    b4:66:a7:65:f1:2e:dc:3a:51:e7:fb:1a:24:3b:4f:
                    e1:74:80:df:00:5a:db:82:a9:f3:bb:a1:3f:b9:32:
                    bb:52:75:ab:85:fc:01:2c:9c:84:82:bb:b4:fb:2f:
                    b3:cd:3f:42:b1:9b:88:22:03:2a:f9:77:2e:f4:01:
                    e7:14:a5:ce:87:57:37:58:60:67:75:e4:6b:07:76:
                    74:f4:7b:9e:7a:bc:07:2d:c5:2b:7f:67:ad:ab:39:
                    54:12:5a:40:c0:8e:6f:cc:35:db:c7:35:57:a4:f0:
                    54:19:1a:6f:9b:43:57:16:98:00:99:a3:49:4b:80:
                    6f:0d:be:ed:0f:ae:8c:a1:d5:5e:2f:55:21:74:40:
                    7e:6c:26:72:fe:45:2f:3a:c7:e2:cc:1b:ea:4f:04:
                    4b:54:c8:eb:77:40:2a:6c:34:76:56:cd:74:33:ad:
                    97:8b:94:53:0d:3c:38:02:6f:a5:cb:5b:5d:55:c8:
                    9e:4d:a8:48:8f:b0:57:6b:66:b5:75:fa:b8:75:98:
                    a8:d3:55:16:ac:e7:38:30:ea:fb:18:a5:4a:91:71:
                    bb:15:14:99:11:7b:c1:14:11:68:92:94:7a:c0:30:
                    55:76:83:aa:94:7e:86:64:ec:2b:d6:b9:f1:00:13:
                    17:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B5:C8:12:51:16:C8:3C:86:DF:F7:B1:F4:FC:79:6D:A4:5B:56:A0
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/3133312e3136312e3135322e302f32322d3234203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:73:cf:1b:81:3c:4c:c1:87:8d:fd:4d:e5:2e:95:23:00:f9:
         22:45:2d:1a:15:b4:3d:43:2d:7c:28:8d:0f:24:23:6a:33:dd:
         3e:fc:3a:b7:d8:1c:aa:1e:81:07:4a:ad:f7:85:be:ae:cd:cb:
         d7:9d:b1:be:04:6a:8d:f8:ae:98:79:81:bc:cd:59:b1:af:60:
         45:0a:72:89:9d:fa:82:9c:62:b7:ac:7a:9c:7d:66:63:92:e7:
         67:f3:b2:ea:b2:4f:34:db:29:29:2a:ed:4c:5c:80:93:51:97:
         dc:f9:89:a9:5a:80:61:a8:8d:13:51:1c:b6:cd:37:40:9a:21:
         7f:14:46:96:4c:27:08:7e:44:f9:d0:7e:17:08:2b:4c:88:d0:
         a5:45:33:74:4b:81:e0:b2:59:f6:9a:34:d6:dd:18:88:17:cf:
         6a:62:be:dc:3a:9f:31:7f:ff:7e:e5:de:33:60:02:00:48:b8:
         41:cf:42:45:ff:d7:0a:05:49:05:e4:d3:2f:3e:fa:70:b2:29:
         aa:c4:8a:c6:d6:80:6f:3f:f6:a0:d2:21:ea:29:39:7c:3f:41:
         c4:4e:51:ff:7c:cc:c1:ad:2e:00:8d:d7:8c:e4:7e:95:c3:10:
         96:8a:a7:04:c9:01:50:07:c2:3b:eb:b4:30:e7:64:d1:58:87:
         d8:00:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:27 2026 by rpki-client