This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203231353735.roa
File:                     3133322e3235312e3132382e302f31382d3234203d3e203231353735.roa (raw, json)
Hash identifier:          XhAhU3bCU5BQJmcgB6aYwqkaOPSEYGM2qJrMWKEDmuk=
Subject key identifier:   94:84:83:9B:86:81:0C:C1:99:B0:C6:70:B6:9C:F1:55:8C:13:10:81
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       7D6454610C9C62F02603CCEB225B21298DC215FE
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203231353735.roa
Signing time:             Tue 06 Jan 2026 19:14:18 +0000
ROA not before:           Tue 06 Jan 2026 19:09:18 +0000
ROA not after:            Tue 05 Jan 2027 19:14:18 +0000
asID:                     21575
IP address blocks:        132.251.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:64:54:61:0c:9c:62:f0:26:03:cc:eb:22:5b:21:29:8d:c2:15:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Jan  6 19:09:18 2026 GMT
            Not After : Jan  5 19:14:18 2027 GMT
        Subject: CN=9484839B86810CC199B0C670B69CF1558C131081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c1:ca:9c:a6:3d:e1:a3:17:7d:89:2b:72:ca:
                    d9:37:40:3b:7f:19:d6:f4:9a:ad:c6:69:f8:dc:38:
                    c4:5e:dd:a4:47:52:4d:fa:24:ea:ac:b3:50:e1:af:
                    53:b5:7a:77:0a:8b:51:47:de:61:99:30:59:9b:ea:
                    1d:09:02:02:a9:5b:09:cc:9c:02:b6:e0:13:15:ad:
                    db:45:b0:8e:fc:d0:b3:d2:0a:97:e6:a5:94:78:2f:
                    cb:2d:b4:d0:78:31:bf:a2:02:10:a3:40:78:37:8b:
                    d2:4f:28:fa:ba:86:44:2d:d5:8c:37:42:55:95:3f:
                    8c:ed:0b:7b:d2:5f:b1:2d:8d:30:a8:b1:18:07:79:
                    e0:5c:92:fd:d5:86:f9:c3:e7:0d:b3:cd:a9:86:cf:
                    5f:5e:24:3e:84:74:0e:92:84:06:93:ae:56:f4:68:
                    60:61:a9:fc:a6:c2:15:11:3c:42:aa:43:5e:8f:2f:
                    9c:29:4d:bc:a1:76:e6:42:30:7f:eb:35:a8:32:44:
                    a5:f4:e2:bc:71:0d:67:d3:c2:37:b0:c9:f9:dc:38:
                    a5:2d:2c:21:f6:27:b2:c5:4e:7a:d1:45:4c:f2:32:
                    a2:3a:f2:0a:23:f1:ad:4f:0e:ef:0e:fa:59:0e:f8:
                    de:83:4e:8b:3a:18:c0:50:f3:a7:a8:0d:10:13:a9:
                    ee:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:84:83:9B:86:81:0C:C1:99:B0:C6:70:B6:9C:F1:55:8C:13:10:81
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3132382e302f31382d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.251.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         22:bc:57:9f:02:21:f3:c7:08:e2:9b:da:3c:ab:79:6d:b6:f5:
         65:fd:54:bd:56:ee:8f:36:f7:8e:72:a5:78:a6:35:20:86:33:
         97:3c:93:4b:22:08:9a:7f:e9:41:ee:ef:13:bc:3e:45:48:6f:
         1b:5a:7e:2a:b4:30:91:02:74:e1:d5:03:56:68:ea:ff:a6:84:
         e0:68:46:e7:d0:c7:37:d6:53:af:f4:e3:4f:f6:d5:4f:6c:04:
         a3:dc:6b:93:57:43:2e:92:9e:52:14:d5:ca:28:8b:92:3c:fd:
         f5:12:62:13:0b:fe:07:92:f3:cb:50:ca:f0:f9:37:4b:53:f3:
         67:21:d3:f6:07:14:fe:b6:c8:14:83:79:5e:ec:32:79:73:e4:
         34:bb:cd:96:16:67:29:e6:21:77:3f:e1:55:05:c0:94:02:f3:
         fe:98:71:10:01:10:2d:56:9f:45:f9:0d:48:1e:c3:c6:6e:56:
         f8:20:5d:f0:c0:94:b4:4f:e1:72:57:e8:07:a6:9a:de:f8:5e:
         3c:67:39:20:ff:5a:cf:98:ff:8a:f7:5a:ae:a6:6d:e9:d2:1e:
         2d:13:60:96:67:30:7c:f9:ce:a6:a8:55:18:33:77:42:f7:fb:
         1c:ec:8e:f8:1f:16:26:00:2b:3a:b0:e0:cc:42:58:a3:ca:b5:
         93:ad:cc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:55:04 2026 by rpki-client