This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230312e3133312e3132312e302f32342d3234203d3e203139393035.roa
File:                     3230312e3133312e3132312e302f32342d3234203d3e203139393035.roa (raw, json)
Hash identifier:          G0SLoM8kw3cK+veabbzaV8cVnyzsnzNgLbfBhjEKJiY=
Subject key identifier:   A3:92:07:CA:F2:99:67:DD:AD:16:7E:2A:66:FC:9A:FC:AB:4B:33:1E
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       3613CD880EDECC87DBE02B6C9EC8DB4722430E1E
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230312e3133312e3132312e302f32342d3234203d3e203139393035.roa
Signing time:             Tue 06 Jan 2026 19:14:18 +0000
ROA not before:           Tue 06 Jan 2026 19:09:18 +0000
ROA not after:            Tue 05 Jan 2027 19:14:18 +0000
asID:                     19905
IP address blocks:        201.131.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:13:cd:88:0e:de:cc:87:db:e0:2b:6c:9e:c8:db:47:22:43:0e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Jan  6 19:09:18 2026 GMT
            Not After : Jan  5 19:14:18 2027 GMT
        Subject: CN=A39207CAF29967DDAD167E2A66FC9AFCAB4B331E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:fa:b2:48:05:34:d1:8e:d9:38:6b:db:51:
                    ae:32:02:d6:ce:d7:a8:64:86:da:48:ec:cd:a5:2d:
                    5a:39:1c:c8:d2:52:4f:69:60:44:87:36:a7:9e:94:
                    5d:d3:ec:7b:bc:6f:55:7a:34:85:c6:48:c2:e7:26:
                    67:e6:01:61:23:43:36:51:eb:1f:21:f4:38:aa:63:
                    2c:55:95:4b:9b:0c:26:bc:e2:aa:2e:47:cc:0b:7a:
                    49:49:4d:d1:f5:e3:63:44:35:ab:98:a7:3e:da:18:
                    6b:21:01:af:80:bb:d2:82:bc:3f:3c:a0:95:83:60:
                    cd:46:43:60:b8:80:e9:45:da:98:e2:f2:4d:1b:7d:
                    a6:b5:58:99:a4:ba:f5:9b:9f:d3:dd:e5:b1:54:05:
                    ec:df:f8:b1:18:51:63:bc:4b:e7:18:ca:df:2d:b1:
                    cb:e6:ff:c0:be:54:4b:7c:07:7b:20:cc:90:84:9e:
                    06:25:42:e4:e3:cc:f3:8e:55:07:56:cb:f4:c5:c5:
                    ab:a0:9a:3a:47:91:56:ab:21:85:c2:58:92:2f:c2:
                    7b:43:71:cf:d7:5a:6e:cb:f4:c0:ba:cc:a9:21:b6:
                    cb:8b:3e:f7:f8:bf:f4:e7:2a:50:55:90:46:5f:f9:
                    d9:c8:08:fc:f0:c0:8d:aa:e9:9d:57:90:84:6e:d1:
                    fd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:92:07:CA:F2:99:67:DD:AD:16:7E:2A:66:FC:9A:FC:AB:4B:33:1E
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230312e3133312e3132312e302f32342d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:7a:7f:57:7f:65:50:1b:ca:52:ea:7a:b0:55:5b:6a:81:6a:
         5a:f4:bb:69:a4:df:ac:aa:18:0e:9f:53:8e:c8:f2:0d:2a:d9:
         8a:00:0c:11:18:a9:1f:9d:fd:fa:a1:d4:b7:81:ed:ee:ea:ad:
         fa:84:c7:7a:dd:ec:27:68:97:58:2f:d7:83:f2:6e:f3:90:7d:
         6a:5b:80:61:be:28:2e:d7:72:ae:e4:d0:a1:dc:05:49:6e:ae:
         fd:7c:e7:46:fc:39:63:95:8d:55:28:26:a7:c6:e7:0b:50:73:
         4d:e0:d0:a4:4a:41:09:67:32:80:05:7c:12:4d:06:44:2c:88:
         4b:38:98:66:80:ac:ce:88:dd:af:3d:59:45:8b:de:bc:0a:a6:
         b1:99:31:8e:0d:ba:22:63:a7:6c:3f:a2:81:3b:98:18:87:1a:
         ff:d9:1e:ee:a7:95:8d:93:49:0d:a8:69:94:0b:10:82:a9:a4:
         e3:86:ad:3d:5c:54:bd:d6:09:c0:76:d6:fa:80:df:39:e5:27:
         39:3a:f0:5b:ec:9a:b3:0a:8e:26:4c:1c:bb:9e:4b:b5:99:f8:
         d5:8c:ff:e5:12:2d:c3:95:a5:f7:ff:a6:55:6a:a5:62:4c:f6:
         44:02:dc:dc:eb:0a:bf:26:27:b9:4a:97:f7:5a:98:81:a8:c9:
         bf:f3:36:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:55 2026 by rpki-client