This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/3133312e3139362e3234342e302f32322d3234203d3e20323635353631.roa
File:                     3133312e3139362e3234342e302f32322d3234203d3e20323635353631.roa (raw, json)
Hash identifier:          E+V7b4+cuKrnwnAfs7SUhQnBtIOuLCt9F2RKZkpbyQs=
Subject key identifier:   A9:13:17:D9:9D:B4:4F:D6:83:2F:75:E2:E5:CC:13:1A:D2:8B:A1:C4
Certificate issuer:       /CN=F3DA76435F27BF1767EBDE8272C18338BE1596E1
Certificate serial:       4565952D29A6206CC5A3BAAD64B6F90EB8D38539
Authority key identifier: F3:DA:76:43:5F:27:BF:17:67:EB:DE:82:72:C1:83:38:BE:15:96:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/3133312e3139362e3234342e302f32322d3234203d3e20323635353631.roa
Signing time:             Tue 06 Jan 2026 19:09:45 +0000
ROA not before:           Tue 06 Jan 2026 19:04:45 +0000
ROA not after:            Tue 05 Jan 2027 19:09:45 +0000
asID:                     265561
IP address blocks:        131.196.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:65:95:2d:29:a6:20:6c:c5:a3:ba:ad:64:b6:f9:0e:b8:d3:85:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DA76435F27BF1767EBDE8272C18338BE1596E1
        Validity
            Not Before: Jan  6 19:04:45 2026 GMT
            Not After : Jan  5 19:09:45 2027 GMT
        Subject: CN=A91317D99DB44FD6832F75E2E5CC131AD28BA1C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:0b:60:81:28:60:cb:1d:45:31:f7:90:eb:
                    fe:36:58:25:a0:f7:d4:5a:1a:ad:44:96:9e:ef:bb:
                    c5:fc:0b:05:c6:60:3e:05:52:e3:c8:43:c0:75:33:
                    b5:a6:aa:8d:5b:26:3f:da:bd:b9:e9:11:a0:31:40:
                    f1:20:83:43:5e:b9:21:67:5e:b5:61:ae:2e:15:d1:
                    b8:0c:72:42:fb:2f:88:ab:97:5f:e7:35:c4:3b:6d:
                    08:fd:3d:a4:07:82:49:8e:0e:5d:55:d7:49:7b:18:
                    d2:e8:6b:e4:3f:46:7c:7e:77:c0:4b:39:74:f6:7d:
                    f9:bd:f0:1a:be:93:0d:de:9a:3a:1b:2d:d7:78:39:
                    ba:0f:39:29:cf:2e:82:11:d7:92:98:c4:77:75:5a:
                    9e:89:86:01:7a:91:85:b2:45:c1:cd:9e:17:5e:36:
                    3f:55:e3:f1:4f:2b:62:cf:09:36:e3:b9:b3:05:c9:
                    91:ce:9a:bd:8a:a2:22:8c:af:5b:a4:52:81:b3:63:
                    37:51:ff:f8:71:37:9a:4b:e5:14:b1:00:72:56:67:
                    42:93:7f:65:aa:e6:de:88:a7:90:51:a7:95:d8:60:
                    e1:30:1f:2a:43:ff:de:c9:4b:4b:ed:63:6e:f4:5c:
                    22:ce:b5:1b:28:89:d2:ce:3b:eb:1e:82:9c:fb:e7:
                    1f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:13:17:D9:9D:B4:4F:D6:83:2F:75:E2:E5:CC:13:1A:D2:8B:A1:C4
            X509v3 Authority Key Identifier:
                keyid:F3:DA:76:43:5F:27:BF:17:67:EB:DE:82:72:C1:83:38:BE:15:96:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DA76435F27BF1767EBDE8272C18338BE1596E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/822C0569E475B90ACE239E6907F3A66CF1AFDD9A2FE281569C440868789C007E/0/3133312e3139362e3234342e302f32322d3234203d3e20323635353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:15:7d:49:00:5b:22:9e:8d:17:cd:7d:69:6d:1d:9b:1a:9a:
         82:5e:08:f2:74:41:26:88:8d:c0:e0:1c:0f:d4:56:a0:a9:fb:
         b0:41:bc:a2:e1:35:b2:66:a9:c0:5f:77:3d:4d:35:ff:ec:1c:
         bc:85:8a:de:64:60:4f:c9:a1:67:c1:da:12:ec:8f:71:ee:55:
         9e:7e:0b:48:51:fb:b3:9b:2a:4d:91:2f:c8:03:33:79:38:7e:
         e8:be:8c:06:89:fb:e1:a3:d3:c0:4f:c3:ff:a9:c2:64:e5:6f:
         38:73:da:dd:71:42:59:1d:69:20:c8:fb:67:d7:fd:62:97:1d:
         fd:88:cc:99:cd:d1:6b:ba:ec:bd:8a:18:3e:e5:79:4c:a1:e2:
         fd:e3:01:49:ef:8b:28:c9:77:15:9b:39:bf:bb:7c:ed:54:7c:
         d6:39:ab:b6:d5:55:d7:77:a5:95:fe:4b:8b:17:6d:21:a7:83:
         3a:3a:4d:45:34:f9:36:c4:8d:3a:6b:52:6e:fc:1e:7d:76:4f:
         a9:76:9d:3d:78:05:25:3e:5e:ba:20:51:8d:44:a0:b5:30:eb:
         9d:d0:16:ae:e1:2b:72:6d:65:b8:6e:48:b3:ea:f7:0f:6b:a3:
         f8:ff:a3:bd:c9:4b:0d:e1:53:17:fe:e5:1f:2b:2a:78:f2:23:
         84:a2:41:1e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIURWWVLSmmIGzFo7qtZLb5DrjThTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNEQTc2NDM1RjI3QkYxNzY3RUJERTgyNzJDMTgzMzhC
RTE1OTZFMTAeFw0yNjAxMDYxOTA0NDVaFw0yNzAxMDUxOTA5NDVaMDMxMTAvBgNV
BAMTKEE5MTMxN0Q5OURCNDRGRDY4MzJGNzVFMkU1Q0MxMzFBRDI4QkExQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nwtggShgyx1FMfeQ6/42WCWg
99RaGq1Elp7vu8X8CwXGYD4FUuPIQ8B1M7Wmqo1bJj/avbnpEaAxQPEgg0NeuSFn
XrVhri4V0bgMckL7L4irl1/nNcQ7bQj9PaQHgkmODl1V10l7GNLoa+Q/Rnx+d8BL
OXT2ffm98Bq+kw3emjobLdd4OboPOSnPLoIR15KYxHd1Wp6JhgF6kYWyRcHNnhde
Nj9V4/FPK2LPCTbjubMFyZHOmr2KoiKMr1ukUoGzYzdR//hxN5pL5RSxAHJWZ0KT
f2Wq5t6Ip5BRp5XYYOEwHypD/97JS0vtY270XCLOtRsoidLOO+segpz75x9dAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUqRMX2Z20T9aDL3Xi5cwTGtKLocQwHwYDVR0j
BBgwFoAU89p2Q18nvxdn696CcsGDOL4VluEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjJDMDU2OUU0NzVCOTBBQ0UyMzlFNjkwN0YzQTY2Q0Yx
QUZERDlBMkZFMjgxNTY5QzQ0MDg2ODc4OUMwMDdFLzAvRjNEQTc2NDM1RjI3QkYx
NzY3RUJERTgyNzJDMTgzMzhCRTE1OTZFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GM0RBNzY0MzVGMjdCRjE3NjdF
QkRFODI3MkMxODMzOEJFMTU5NkUxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODIyQzA1NjlFNDc1QjkwQUNFMjM5RTY5MDdGM0E2NkNGMUFGREQ5QTJG
RTI4MTU2OUM0NDA4Njg3ODlDMDA3RS8wLzMxMzMzMTJlMzEzOTM2MmUzMjM0MzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzUzNTM2MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKD
xPQwDQYJKoZIhvcNAQELBQADggEBAEYVfUkAWyKejRfNfWltHZsamoJeCPJ0QSaI
jcDgHA/UVqCp+7BBvKLhNbJmqcBfdz1NNf/sHLyFit5kYE/JoWfB2hLsj3HuVZ5+
C0hR+7ObKk2RL8gDM3k4fui+jAaJ++Gj08BPw/+pwmTlbzhz2t1xQlkdaSDI+2fX
/WKXHf2IzJnN0Wu67L2KGD7leUyh4v3jAUnviyjJdxWbOb+7fO1UfNY5q7bVVdd3
pZX+S4sXbSGngzo6TUU0+TbEjTprUm78Hn12T6l2nT14BSU+XrogUY1EoLUw653Q
Fq7hK3JtZbhuSLPq9w9ro/j/o73JSw3hUxf+5R8rKnjyI4SiQR4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:41:29 2026 by rpki-client