This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233362e302f32322d3232203d3e20323633373533.roa
File:                     3133312e37322e3233362e302f32322d3232203d3e20323633373533.roa (raw, json)
Hash identifier:          uf0QS2eO4TODv6LsFYYMqz547pi11FF1QBLd6124T90=
Subject key identifier:   BB:29:1C:9E:8D:A5:35:6C:3B:86:60:F7:47:C5:82:98:4C:D5:11:20
Certificate issuer:       /CN=E629C4E7637A20BC21967E803440E0984DB741BE
Certificate serial:       4D8C0C981410EE1F934EE14988E5B2DFD0C64208
Authority key identifier: E6:29:C4:E7:63:7A:20:BC:21:96:7E:80:34:40:E0:98:4D:B7:41:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233362e302f32322d3232203d3e20323633373533.roa
Signing time:             Tue 06 Jan 2026 19:10:09 +0000
ROA not before:           Tue 06 Jan 2026 19:05:09 +0000
ROA not after:            Tue 05 Jan 2027 19:10:09 +0000
asID:                     263753
IP address blocks:        131.72.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/E629C4E7637A20BC21967E803440E0984DB741BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/E629C4E7637A20BC21967E803440E0984DB741BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8c:0c:98:14:10:ee:1f:93:4e:e1:49:88:e5:b2:df:d0:c6:42:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E629C4E7637A20BC21967E803440E0984DB741BE
        Validity
            Not Before: Jan  6 19:05:09 2026 GMT
            Not After : Jan  5 19:10:09 2027 GMT
        Subject: CN=BB291C9E8DA5356C3B8660F747C582984CD51120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:eb:d5:dd:c3:95:a6:22:8a:33:e1:d8:bb:22:
                    5d:19:75:99:ee:2e:65:e0:88:a6:af:68:d6:78:fd:
                    ad:8c:ee:e2:6a:f5:2e:8a:31:31:d0:52:f8:8d:05:
                    26:37:d7:14:0a:76:57:60:f5:8f:30:aa:ac:c3:a6:
                    33:cb:0a:c9:42:ea:c1:d4:36:73:34:6d:e1:50:d3:
                    b3:9f:03:bb:54:d5:88:09:ca:b5:32:2e:4a:24:07:
                    cb:b1:04:03:25:eb:ca:f7:cf:cd:30:92:eb:15:db:
                    83:9b:b9:0d:c7:1a:15:70:27:35:73:4f:10:7a:df:
                    35:a3:f7:fb:be:ad:4b:88:2a:b0:60:fc:bc:45:2e:
                    f6:71:14:3c:38:15:73:ac:f7:67:0f:20:3b:46:ac:
                    a8:a2:f5:a5:30:16:91:d6:3c:0c:1f:85:99:0e:dc:
                    9a:5e:0f:c8:d5:01:d2:f5:65:55:4f:4b:0a:8b:d2:
                    c7:a7:c2:2f:a3:b7:1f:64:9b:77:70:09:07:6a:80:
                    e4:78:61:b5:2e:ba:d9:6d:38:0b:2c:14:54:69:87:
                    41:3f:62:82:64:45:bd:0b:89:6c:59:7f:03:60:ec:
                    67:0a:de:5c:48:dd:f2:72:c9:0b:f2:9b:47:c0:91:
                    69:91:a2:71:35:6e:7f:ea:52:bc:13:e5:33:90:3c:
                    91:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:29:1C:9E:8D:A5:35:6C:3B:86:60:F7:47:C5:82:98:4C:D5:11:20
            X509v3 Authority Key Identifier:
                keyid:E6:29:C4:E7:63:7A:20:BC:21:96:7E:80:34:40:E0:98:4D:B7:41:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/E629C4E7637A20BC21967E803440E0984DB741BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233362e302f32322d3232203d3e20323633373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:1d:49:55:11:20:d6:af:12:47:db:f1:03:21:af:98:08:97:
         6c:68:a2:db:61:39:13:bc:cc:b7:c9:49:57:2c:a6:d1:36:4c:
         6c:d1:70:ab:a0:6b:60:00:21:46:22:57:18:b8:b6:64:76:19:
         95:0d:4d:58:e0:26:41:df:91:46:89:8e:d9:41:89:96:c0:7f:
         84:5a:eb:d9:9d:b9:1d:73:d9:3c:9f:47:40:71:fa:49:35:f2:
         dc:a5:b4:aa:e6:0d:ec:82:80:8d:fe:cf:72:60:04:4a:a3:10:
         40:95:a8:b2:13:97:49:86:cf:91:53:32:44:00:81:76:2d:fa:
         d2:f8:a3:dd:68:f3:b1:36:2a:f5:7c:cb:6a:ac:31:99:8e:a2:
         fc:a6:ff:8a:a5:89:9b:68:d6:61:f3:53:19:9b:2d:ef:a4:84:
         b7:e8:1b:7f:f1:88:07:16:06:88:24:45:86:6a:81:d8:1d:7e:
         0c:2b:80:dd:3d:8d:e9:b7:82:b8:d1:a8:cd:3f:8c:a7:b1:e3:
         31:20:88:61:1c:41:11:07:a4:b7:7a:5e:1b:62:fe:71:1e:83:
         54:8d:67:ea:f7:65:3e:2d:cd:1d:e2:92:ea:ec:64:ee:1b:67:
         29:84:ab:e9:9b:54:33:14:c7:46:a0:9d:c8:85:4a:90:3c:51:
         4b:60:34:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:26:35 2026 by rpki-client