This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133312e3139362e33322e302f32322d3234203d3e203238313130.roa
File:                     3133312e3139362e33322e302f32322d3234203d3e203238313130.roa (raw, json)
Hash identifier:          dONhZefLZnek3BJxKuQrwvATbn1DlINZY9BziKB3Uno=
Subject key identifier:   24:FD:9B:79:9B:79:FC:E7:BB:5A:51:32:76:74:17:E8:4B:F4:5F:AA
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       0436A093559FB1DFB89F6FD52CC418BCBB682FEF
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133312e3139362e33322e302f32322d3234203d3e203238313130.roa
Signing time:             Tue 06 Jan 2026 19:34:55 +0000
ROA not before:           Tue 06 Jan 2026 19:29:55 +0000
ROA not after:            Tue 05 Jan 2027 19:34:55 +0000
asID:                     28110
IP address blocks:        131.196.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 06:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:36:a0:93:55:9f:b1:df:b8:9f:6f:d5:2c:c4:18:bc:bb:68:2f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Jan  6 19:29:55 2026 GMT
            Not After : Jan  5 19:34:55 2027 GMT
        Subject: CN=24FD9B799B79FCE7BB5A5132767417E84BF45FAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:39:dd:65:35:8d:03:6a:b0:bf:26:ca:83:97:
                    9d:40:b5:2a:34:15:58:a7:73:69:02:4e:51:06:aa:
                    e8:c9:f4:74:49:e0:cf:04:d1:22:df:e9:0a:28:f8:
                    a5:58:4d:94:a6:b8:19:3c:99:bc:e3:b3:ae:f4:91:
                    44:12:6d:bc:eb:b9:10:8a:59:ca:b6:03:f1:d3:5b:
                    e6:8c:c0:54:9d:b9:3d:de:38:16:0e:40:7a:cf:81:
                    c4:e9:4a:ad:35:cb:b0:93:be:c4:e6:70:85:8f:c9:
                    76:8d:d8:db:80:33:4b:21:e5:44:3c:94:aa:45:f9:
                    42:18:85:66:9c:0e:74:bd:56:76:df:b7:ab:c3:79:
                    27:11:ca:3a:15:33:30:87:98:0f:42:51:ab:67:50:
                    58:cb:ab:01:fc:34:89:ad:be:30:ab:42:89:3c:ed:
                    4e:5e:f0:24:6b:c9:57:92:21:ae:6b:4b:37:44:9d:
                    05:52:1e:ac:3d:7e:9a:7b:f1:a6:c1:30:97:a2:08:
                    79:08:08:f0:10:ec:aa:e8:ac:9e:de:60:d9:0d:d1:
                    7d:00:b2:e3:d3:b9:be:3e:1b:f5:ec:aa:b7:e2:d0:
                    8d:43:c6:e1:ca:7b:c7:b4:26:b1:0b:9e:b7:20:83:
                    ee:2a:2f:b8:df:c9:8d:a8:a6:49:09:04:e6:81:6e:
                    2e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FD:9B:79:9B:79:FC:E7:BB:5A:51:32:76:74:17:E8:4B:F4:5F:AA
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133312e3139362e33322e302f32322d3234203d3e203238313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:94:1a:a0:86:b1:22:35:9a:b8:0e:b8:df:4b:bb:5f:3c:fc:
         78:61:43:8f:6a:db:36:3b:e0:74:fe:aa:53:83:ef:4b:dd:63:
         3c:c4:4a:a1:ec:48:af:f6:4e:c8:9a:33:08:ad:83:cf:2e:19:
         38:0a:ad:5a:25:cd:d9:b1:fb:04:09:eb:96:23:9f:23:72:ae:
         e6:89:2f:f9:2d:40:de:91:9e:c1:bc:1e:e6:a4:6a:45:28:dc:
         f2:b9:39:cc:88:c9:b0:c9:39:03:36:ed:a8:20:4c:d9:81:5a:
         60:ce:09:7b:50:6b:6f:02:95:a6:0a:cc:98:6f:67:b2:e1:b2:
         2e:e2:a1:91:20:e1:cd:ed:ad:5d:d2:4b:b0:26:4f:99:59:3b:
         bc:7b:18:e8:2c:27:c4:56:90:f0:78:1e:08:9b:11:51:4b:cd:
         a3:a2:d3:a2:fb:a0:96:e5:d4:aa:b3:cf:1d:4b:1e:a2:bb:70:
         fc:23:88:61:88:2d:06:b4:59:67:35:24:3c:92:d4:08:8d:50:
         c7:18:f1:9c:4a:f0:89:05:a3:ff:bd:05:24:20:9e:85:cc:86:
         62:7d:57:72:74:fb:34:47:41:fc:b4:4a:6d:3b:a4:4d:be:f7:
         7d:cb:87:1e:67:13:00:55:6b:83:8e:6b:7e:0a:d7:1c:c6:b4:
         69:d0:b2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:14 2026 by rpki-client