This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa
File:                     3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa (raw, json)
Hash identifier:          0oK6u3qQTCYAUxIJ5H5Pyw/qzRID2Y+mC8Cf14poLx0=
Subject key identifier:   CC:92:B0:03:81:AE:C6:C2:9F:94:24:AA:59:30:D4:8D:52:B9:A3:AB
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       0CABBEB538A3528BFFB0813E820294FCEF418EEF
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa
Signing time:             Tue 06 Jan 2026 19:14:12 +0000
ROA not before:           Tue 06 Jan 2026 19:09:12 +0000
ROA not after:            Tue 05 Jan 2027 19:14:12 +0000
asID:                     19905
IP address blocks:        132.251.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ab:be:b5:38:a3:52:8b:ff:b0:81:3e:82:02:94:fc:ef:41:8e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Jan  6 19:09:12 2026 GMT
            Not After : Jan  5 19:14:12 2027 GMT
        Subject: CN=CC92B00381AEC6C29F9424AA5930D48D52B9A3AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:2b:93:35:57:d3:a3:ac:e5:cf:f4:9d:d1:
                    cf:87:32:54:84:b7:43:dd:ea:09:38:42:f7:0e:84:
                    64:ef:1a:59:39:45:7c:fa:cc:f8:9b:4a:41:1f:be:
                    c2:6a:2b:2d:e2:3f:3f:e5:38:a9:42:51:49:75:50:
                    97:3e:4a:15:79:4e:a2:b2:d3:1b:5f:d3:ee:6a:3b:
                    8c:f4:65:a8:04:51:d1:49:f7:09:cf:80:58:44:63:
                    dd:5b:87:a5:1d:4e:5b:ed:79:99:b2:50:fd:4f:9c:
                    e8:50:81:f8:28:95:be:23:ce:b2:ac:94:a1:48:94:
                    4f:da:40:8a:09:1b:b6:a8:2a:2a:0b:57:ae:5e:93:
                    51:ae:17:7d:6a:c8:73:07:35:bf:b5:3c:1d:3e:ed:
                    b6:e4:7c:c7:06:c4:f3:4d:82:90:01:45:a0:b2:ff:
                    c2:e8:51:e2:9e:13:1c:4c:fd:33:fd:56:d2:4d:29:
                    e0:76:e9:0e:57:83:f9:fb:6a:e7:e8:cf:5d:74:bb:
                    56:c4:e6:c6:ff:0e:dd:93:3e:36:15:c5:e6:65:5f:
                    8b:33:23:5c:dc:2b:ce:a5:d8:f2:22:a1:aa:f8:35:
                    29:d2:49:48:ea:f0:07:22:14:c4:75:cc:b5:e8:92:
                    c9:b5:15:6e:8c:30:32:b5:27:ca:4c:1e:96:9c:28:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:92:B0:03:81:AE:C6:C2:9F:94:24:AA:59:30:D4:8D:52:B9:A3:AB
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.251.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         61:a0:51:d7:55:2a:a9:a9:8c:55:8e:90:14:f7:44:bc:5a:a9:
         5c:e5:ed:f8:02:89:5b:a6:72:68:09:df:ec:84:7f:fb:49:33:
         27:eb:8d:6f:77:a0:c9:3e:ab:1d:2c:f0:09:5a:5d:98:a4:73:
         21:b4:ba:5b:4e:94:64:bf:af:e1:df:02:d1:5a:38:c1:40:2d:
         9a:3a:59:37:fe:ae:7c:95:48:72:81:ac:7d:b5:c4:28:5d:44:
         18:f0:b0:a0:58:d4:0f:9f:8c:15:1a:e0:09:ab:ac:f2:20:37:
         85:c1:9a:dd:66:f4:8b:0d:09:87:67:f0:7f:e2:e7:af:f6:78:
         f1:6a:04:98:ff:f2:4c:c0:92:5c:ca:12:f0:44:c9:d1:89:d5:
         5d:7f:31:54:b0:2c:dd:50:66:64:e0:28:27:c2:2b:e9:a9:64:
         71:0e:6b:1c:46:da:5e:59:64:f2:da:ac:dd:85:62:76:f5:51:
         cc:4a:dc:10:60:6b:40:9a:f6:e3:4f:9b:d3:3e:86:9e:fc:d7:
         03:9b:f3:fb:5e:c3:42:10:0f:3e:2a:49:bb:77:d6:19:45:03:
         11:71:dd:dc:6c:e9:d2:a8:e0:d4:fd:f2:f2:b0:3b:c5:65:d4:
         08:15:91:13:1f:c1:7f:91:70:ac:e8:19:15:94:84:0c:11:eb:
         35:00:22:ff
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDKu+tTijUov/sIE+ggKU/O9Bju8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE
MjE3OTA0NjAeFw0yNjAxMDYxOTA5MTJaFw0yNzAxMDUxOTE0MTJaMDMxMTAvBgNV
BAMTKENDOTJCMDAzODFBRUM2QzI5Rjk0MjRBQTU5MzBENDhENTJCOUEzQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTrCuTNVfTo6zlz/Sd0c+HMlSE
t0Pd6gk4QvcOhGTvGlk5RXz6zPibSkEfvsJqKy3iPz/lOKlCUUl1UJc+ShV5TqKy
0xtf0+5qO4z0ZagEUdFJ9wnPgFhEY91bh6UdTlvteZmyUP1PnOhQgfgolb4jzrKs
lKFIlE/aQIoJG7aoKioLV65ek1GuF31qyHMHNb+1PB0+7bbkfMcGxPNNgpABRaCy
/8LoUeKeExxM/TP9VtJNKeB26Q5Xg/n7aufoz110u1bE5sb/Dt2TPjYVxeZlX4sz
I1zcK86l2PIioar4NSnSSUjq8AciFMR1zLXoksm1FW6MMDK1J8pMHpacKEFnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUzJKwA4GuxsKflCSqWTDUjVK5o6swHwYDVR0j
BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx
Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy
QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw
MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5
NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMxMzMzMjJlMzIzNTMxMmUzMTMyMzgy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMTM5MzkzMDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGhPuA
MA0GCSqGSIb3DQEBCwUAA4IBAQBhoFHXVSqpqYxVjpAU90S8Wqlc5e34AolbpnJo
Cd/shH/7STMn641vd6DJPqsdLPAJWl2YpHMhtLpbTpRkv6/h3wLRWjjBQC2aOlk3
/q58lUhygax9tcQoXUQY8LCgWNQPn4wVGuAJq6zyIDeFwZrdZvSLDQmHZ/B/4uev
9njxagSY//JMwJJcyhLwRMnRidVdfzFUsCzdUGZk4CgnwivpqWRxDmscRtpeWWTy
2qzdhWJ29VHMStwQYGtAmvbjT5vTPoae/NcDm/P7XsNCEA8+Kkm7d9YZRQMRcd3c
bOnSqODU/fLysDvFZdQIFZETH8F/kXCs6BkVlIQMEes1ACL/
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:33 2026 by rpki-client