This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203139393035.roa
File:                     3133322e3235312e3139322e302f31392d3234203d3e203139393035.roa (raw, json)
Hash identifier:          A4ZGUwwsD2buCYa4tD362Xv1Agy9vvodVLxv6iWdJ8Y=
Subject key identifier:   D7:D6:32:F4:BE:F9:57:B0:4B:FC:54:E2:E0:10:12:55:39:EF:0C:80
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       600A49234D7FC2F83F19749A9501F1928CA43400
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203139393035.roa
Signing time:             Tue 06 Jan 2026 19:14:18 +0000
ROA not before:           Tue 06 Jan 2026 19:09:18 +0000
ROA not after:            Tue 05 Jan 2027 19:14:18 +0000
asID:                     19905
IP address blocks:        132.251.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0a:49:23:4d:7f:c2:f8:3f:19:74:9a:95:01:f1:92:8c:a4:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Jan  6 19:09:18 2026 GMT
            Not After : Jan  5 19:14:18 2027 GMT
        Subject: CN=D7D632F4BEF957B04BFC54E2E010125539EF0C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b6:2f:0f:81:e9:3e:c8:6b:83:a6:25:cd:93:
                    ba:07:6f:23:55:1c:8a:20:0f:61:da:28:70:c8:e4:
                    ec:8d:1f:ee:19:0f:f5:6c:25:a3:01:07:af:00:9a:
                    4f:fa:cc:24:41:13:55:76:04:44:3e:95:4d:44:73:
                    6c:2a:48:99:70:23:98:05:d2:f4:4e:46:52:c9:b8:
                    a4:dc:3f:b6:7b:33:aa:6e:19:38:55:03:ce:67:bd:
                    15:7b:9d:34:af:92:0f:fa:69:c1:79:4a:27:54:d2:
                    48:25:3e:a1:a4:0e:8f:12:57:2c:08:f2:0d:7c:b0:
                    49:1f:81:24:c4:ce:a8:e5:87:0e:b8:a3:81:b9:3e:
                    62:2c:1c:82:41:68:98:db:00:ef:4d:48:66:84:a9:
                    68:c3:69:e6:72:b4:f3:4f:37:1b:49:73:0a:7b:60:
                    a9:8e:4b:82:cc:93:93:8a:4d:28:62:f2:08:f6:28:
                    8a:00:7a:8b:56:62:b0:68:c0:3d:de:84:3c:f2:19:
                    7b:09:78:48:08:80:5f:2b:be:d1:33:9a:f0:91:7f:
                    ba:3d:87:a8:ef:c0:5a:96:b2:f5:94:88:b6:b6:28:
                    72:ed:09:88:10:32:21:4e:6b:9b:5d:fa:c8:d9:14:
                    de:6c:7b:02:77:73:23:db:f4:7f:48:0d:a4:a7:e0:
                    6e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D6:32:F4:BE:F9:57:B0:4B:FC:54:E2:E0:10:12:55:39:EF:0C:80
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e3139322e302f31392d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.251.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         95:ec:9a:17:e5:da:4f:58:f6:f0:55:71:df:c9:22:04:00:d3:
         0d:6d:bb:8e:6b:eb:54:c4:8d:0b:8d:22:33:fe:88:f8:71:2f:
         7a:13:37:ac:25:fc:7b:6f:3f:2c:28:43:dc:10:4f:0e:5a:11:
         79:51:0e:ea:f9:02:e8:ae:7a:ac:38:cb:5e:87:25:f5:bb:ff:
         24:df:12:4e:41:1f:86:b5:b8:93:82:70:e7:83:ae:09:43:31:
         9a:21:3d:43:be:50:e9:30:19:67:32:25:34:05:33:b3:e6:de:
         9e:b9:f2:00:7a:65:74:1a:32:9e:9e:5a:ed:e2:47:44:09:33:
         2d:88:60:ec:d1:a2:cd:4e:44:83:d3:62:a1:85:b6:6a:7e:20:
         53:84:87:8d:72:46:87:7a:48:d5:3d:17:24:07:81:79:23:d7:
         79:08:2b:94:78:77:05:74:ff:5b:a9:5a:a1:56:c8:7e:9e:9f:
         4c:85:74:43:50:70:0a:cd:27:1f:33:b2:6d:02:d3:a3:c1:77:
         8b:ef:3f:ea:d7:cc:59:af:ee:58:23:78:ab:c5:e8:bc:38:08:
         d6:f1:78:a3:38:40:69:19:46:44:4a:07:48:51:aa:26:04:79:
         a5:20:7c:4a:e7:e4:92:f4:11:69:9a:12:63:f9:5d:69:20:a9:
         2a:49:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:35 2026 by rpki-client