This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B7F1D8F001197E124B9323A3182A9BFA43557616A2BC6D28F053268CAF0EA26/0/3133312e3235352e3138302e302f32322d3234203d3e20323633373135.roa
File:                     3133312e3235352e3138302e302f32322d3234203d3e20323633373135.roa (raw, json)
Hash identifier:          JhvU4outnq3DUn4Xb5swKUK58Hbt8fq2fCK7Yxq7VOU=
Subject key identifier:   76:93:E6:5D:03:DF:A0:EA:55:5A:DC:1F:45:41:F6:36:F7:B1:9C:D5
Certificate issuer:       /CN=1EBD8A589075FC05F94517534250344AA37719DE
Certificate serial:       0467D34AC64716C75CF1FC3BEDBD7D7C260ACD5F
Authority key identifier: 1E:BD:8A:58:90:75:FC:05:F9:45:17:53:42:50:34:4A:A3:77:19:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EBD8A589075FC05F94517534250344AA37719DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B7F1D8F001197E124B9323A3182A9BFA43557616A2BC6D28F053268CAF0EA26/0/3133312e3235352e3138302e302f32322d3234203d3e20323633373135.roa
Signing time:             Tue 06 Jan 2026 19:13:03 +0000
ROA not before:           Tue 06 Jan 2026 19:08:03 +0000
ROA not after:            Tue 05 Jan 2027 19:13:03 +0000
asID:                     263715
IP address blocks:        131.255.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B7F1D8F001197E124B9323A3182A9BFA43557616A2BC6D28F053268CAF0EA26/0/1EBD8A589075FC05F94517534250344AA37719DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B7F1D8F001197E124B9323A3182A9BFA43557616A2BC6D28F053268CAF0EA26/0/1EBD8A589075FC05F94517534250344AA37719DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EBD8A589075FC05F94517534250344AA37719DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 14:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:67:d3:4a:c6:47:16:c7:5c:f1:fc:3b:ed:bd:7d:7c:26:0a:cd:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EBD8A589075FC05F94517534250344AA37719DE
        Validity
            Not Before: Jan  6 19:08:03 2026 GMT
            Not After : Jan  5 19:13:03 2027 GMT
        Subject: CN=7693E65D03DFA0EA555ADC1F4541F636F7B19CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:59:17:8b:e4:91:9d:ee:d3:38:c3:11:a6:
                    f6:59:79:fb:fd:7b:bf:6a:3c:60:2f:2c:38:4f:29:
                    18:5e:89:49:f9:ba:3d:4b:b9:7a:28:36:f2:31:34:
                    b9:46:d1:3b:79:20:50:79:17:56:f4:aa:cd:43:e1:
                    e0:72:ef:a1:61:4a:9f:17:ea:ba:8c:55:43:4b:f9:
                    96:00:00:11:73:2b:fc:12:05:9b:46:9f:1d:8b:33:
                    bb:2d:35:c3:35:af:07:87:b0:6f:81:39:1b:35:59:
                    da:1b:3a:16:5c:00:83:af:ac:85:96:08:bc:19:51:
                    5f:1a:b5:e0:21:c9:31:98:71:05:e7:ba:56:f5:79:
                    7b:2e:09:76:5c:e4:bd:ce:ee:f1:cf:61:13:38:72:
                    37:79:a3:40:c8:be:8b:c7:4f:f8:eb:a3:1f:c4:4d:
                    dc:28:fb:95:07:ce:9d:f3:81:1e:07:f6:2f:9e:ac:
                    82:f9:ec:e9:47:d7:8c:bd:9f:50:c2:71:e0:b4:a4:
                    5f:96:20:67:7b:d9:7e:94:ef:fa:4a:34:79:30:84:
                    3b:37:7e:84:88:40:c4:ef:e8:4a:e9:c5:ee:56:84:
                    61:16:fb:ce:14:24:f0:9d:d9:46:58:02:c3:5e:6c:
                    f0:bf:c6:a0:1b:72:a2:c7:8c:fa:4a:08:0d:17:86:
                    c8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:93:E6:5D:03:DF:A0:EA:55:5A:DC:1F:45:41:F6:36:F7:B1:9C:D5
            X509v3 Authority Key Identifier:
                keyid:1E:BD:8A:58:90:75:FC:05:F9:45:17:53:42:50:34:4A:A3:77:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B7F1D8F001197E124B9323A3182A9BFA43557616A2BC6D28F053268CAF0EA26/0/1EBD8A589075FC05F94517534250344AA37719DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EBD8A589075FC05F94517534250344AA37719DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B7F1D8F001197E124B9323A3182A9BFA43557616A2BC6D28F053268CAF0EA26/0/3133312e3235352e3138302e302f32322d3234203d3e20323633373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:8a:75:c6:e7:75:75:bd:f7:52:b3:bd:2e:c6:de:f0:56:82:
         40:ee:d2:13:de:f3:64:a6:cd:fb:52:0e:f1:7b:36:97:e2:e9:
         32:63:08:74:ca:d0:2e:46:a1:bc:9f:1b:07:75:98:42:c8:33:
         9c:71:3a:90:44:0d:ad:12:4b:e0:65:66:03:0d:49:86:46:7d:
         7b:f3:1c:89:99:8f:8d:51:94:f7:b6:91:40:9f:8b:fd:b0:05:
         20:af:66:b3:37:dd:cb:24:fb:93:9d:56:47:34:4b:2c:39:67:
         68:17:97:30:b8:7b:49:d0:1f:ff:91:a3:78:08:83:3f:c8:10:
         5e:8a:bd:cd:18:18:8a:b4:c6:48:3f:12:26:72:6a:2e:83:00:
         56:e7:c9:c5:a6:56:30:a9:02:73:ce:38:54:d7:49:26:a7:41:
         22:83:c0:c3:a3:bb:37:05:fe:37:6a:ed:e1:41:49:01:bc:51:
         f3:99:15:33:8f:86:8b:9c:7d:e9:bf:4f:a2:1e:fd:d4:9c:ac:
         31:9a:be:62:4f:24:0c:06:65:3f:7c:a9:71:61:bc:df:d1:da:
         23:98:df:a1:ab:f9:bb:aa:cd:df:01:b1:b4:b6:cb:3e:fc:53:
         11:41:9f:46:0f:ad:bd:61:2b:a8:e2:6f:7f:a6:17:5f:cd:55:
         ce:d1:6d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:23 2026 by rpki-client