This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3134332e3133372e32342e302f32322d3232203d3e203532323432.roa
File:                     3134332e3133372e32342e302f32322d3232203d3e203532323432.roa (raw, json)
Hash identifier:          RhdD39wru5gyH/MB7gXivIeW7ua4RzVDg21Md/jL+Js=
Subject key identifier:   66:60:05:C9:C6:C0:8F:38:FA:94:BB:D2:C8:7C:8A:86:B7:E0:C8:4E
Certificate issuer:       /CN=16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581
Certificate serial:       61EECAC011FA1E78AEC69FE8918EBDB5D2713FBC
Authority key identifier: 16:B8:B4:85:2A:1C:88:45:AD:B2:F8:E8:F7:CD:40:D7:AD:13:A5:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3134332e3133372e32342e302f32322d3232203d3e203532323432.roa
Signing time:             Tue 06 Jan 2026 19:00:27 +0000
ROA not before:           Tue 06 Jan 2026 18:55:27 +0000
ROA not after:            Tue 05 Jan 2027 19:00:27 +0000
asID:                     52242
IP address blocks:        143.137.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ee:ca:c0:11:fa:1e:78:ae:c6:9f:e8:91:8e:bd:b5:d2:71:3f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581
        Validity
            Not Before: Jan  6 18:55:27 2026 GMT
            Not After : Jan  5 19:00:27 2027 GMT
        Subject: CN=666005C9C6C08F38FA94BBD2C87C8A86B7E0C84E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:02:d6:6a:fe:1b:6f:e1:e1:f1:1c:fb:10:
                    98:d8:a1:ca:92:3a:db:97:16:d0:2a:ce:9b:4a:41:
                    1d:af:5b:37:f4:bf:c1:10:70:28:d1:1a:a6:f0:e9:
                    60:92:83:6f:35:b1:33:e5:6d:92:80:46:9c:96:62:
                    ea:ef:11:09:3a:9e:84:3f:33:72:93:9f:17:64:d1:
                    d9:f0:58:84:a7:ae:59:db:74:1a:c0:c1:3b:5f:a5:
                    83:63:ca:83:ca:c4:95:78:a5:bf:0c:92:59:16:36:
                    5a:d5:f6:29:93:50:15:a3:cf:e9:cc:51:6b:ec:1c:
                    fb:9a:07:b6:21:8b:7e:64:79:bf:2b:14:4a:cb:87:
                    c6:f3:1a:26:2e:10:08:fd:b9:a8:fa:d8:94:bc:13:
                    81:70:3c:4a:bd:4a:8c:1a:c8:01:1f:85:41:60:48:
                    0c:00:83:2f:5d:80:47:44:6c:3e:ba:67:45:22:16:
                    da:84:a4:9e:cc:65:ec:81:d7:7d:9e:26:65:a1:27:
                    4a:11:3a:ad:da:bf:56:76:58:28:a6:d5:f1:e2:cf:
                    58:5f:b8:02:4a:f3:bd:09:e6:ad:53:c3:72:6a:c7:
                    eb:ec:87:bb:d2:41:40:61:f4:c4:2e:6e:bc:16:bb:
                    75:67:98:dd:22:e2:b1:ff:15:ed:1f:41:43:ac:10:
                    07:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:60:05:C9:C6:C0:8F:38:FA:94:BB:D2:C8:7C:8A:86:B7:E0:C8:4E
            X509v3 Authority Key Identifier:
                keyid:16:B8:B4:85:2A:1C:88:45:AD:B2:F8:E8:F7:CD:40:D7:AD:13:A5:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3134332e3133372e32342e302f32322d3232203d3e203532323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:c4:6e:9c:4a:47:58:9e:a7:5e:20:69:b6:36:54:00:3a:cb:
         28:81:ac:b3:86:6e:16:b7:98:c3:3e:2e:74:fe:62:43:bb:9a:
         f3:bf:ae:1f:86:e8:1b:2b:b8:ad:6f:76:ff:39:4f:46:1f:05:
         c8:67:c4:17:ea:7d:41:b9:00:c3:de:3f:a7:82:a1:97:fc:4e:
         f3:d1:48:37:0b:a1:a0:fc:ae:32:d0:8e:9f:39:34:98:1c:e2:
         ad:90:19:7c:9d:29:74:94:c2:b2:ce:77:7a:21:0f:02:a0:0b:
         8a:41:50:47:cb:a8:d8:d2:0b:1f:57:3c:62:9a:c3:60:35:ca:
         92:ae:09:8d:5f:12:cc:61:ae:17:5a:db:9a:12:c8:70:ee:08:
         e8:0b:49:fc:cf:7d:8a:2a:0f:bb:1f:a5:62:b1:2c:06:d3:2d:
         da:13:2b:75:bc:b1:24:ac:1a:43:d3:e7:95:4a:87:3c:f4:fc:
         b3:6a:ef:ec:af:57:68:bb:06:8c:6b:70:f9:4d:a1:9c:99:92:
         3b:a6:a2:43:7c:6f:de:d8:1c:e4:88:e4:25:74:f1:e3:18:10:
         37:a3:78:cf:49:e4:58:35:aa:cc:02:da:c9:5c:99:a2:b4:16:
         cd:0f:ac:ce:7a:01:31:af:65:28:c5:6d:8c:a3:2e:49:b5:9e:
         cb:1f:4b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:31 2026 by rpki-client