This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136312e302e302e302f32302d3230203d3e20323633373430.roa
File:                     3136312e302e302e302f32302d3230203d3e20323633373430.roa (raw, json)
Hash identifier:          x6NfrogHHkVYWiQaDFoXf0WyNxe0rfxgR+SLDxZ6m0w=
Subject key identifier:   D1:90:49:5A:05:90:98:3A:39:23:08:19:15:C9:AD:6C:61:98:D3:69
Certificate issuer:       /CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
Certificate serial:       0E5D98311D8505CAB1AB91E33DCB087885CD33A2
Authority key identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136312e302e302e302f32302d3230203d3e20323633373430.roa
Signing time:             Tue 06 Jan 2026 19:42:01 +0000
ROA not before:           Tue 06 Jan 2026 19:37:01 +0000
ROA not after:            Tue 05 Jan 2027 19:42:01 +0000
asID:                     263740
IP address blocks:        161.0.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5d:98:31:1d:85:05:ca:b1:ab:91:e3:3d:cb:08:78:85:cd:33:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
        Validity
            Not Before: Jan  6 19:37:01 2026 GMT
            Not After : Jan  5 19:42:01 2027 GMT
        Subject: CN=D190495A0590983A3923081915C9AD6C6198D369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:89:de:7b:72:34:aa:a2:71:c6:91:14:86:
                    5c:b6:75:89:26:3e:0b:66:21:46:4e:46:ed:ba:d3:
                    cd:41:88:65:56:cf:5d:c4:f5:f6:a6:9c:8a:8a:70:
                    d6:0b:fb:4f:a2:a1:1a:86:1b:79:2a:bf:f4:31:69:
                    ac:46:e6:19:d8:8c:27:30:fe:29:87:0e:88:62:34:
                    44:a4:3b:b7:5c:9f:69:8a:5d:d9:be:b0:7e:2a:02:
                    a3:d1:15:5f:2c:4b:14:13:f8:09:e9:3c:da:ec:68:
                    ed:9c:98:70:fa:a1:b7:b8:5f:5e:46:7f:35:16:4b:
                    66:5b:ce:d7:0d:05:ec:f3:1a:a6:92:46:bb:1c:6c:
                    f5:6a:fa:9e:50:49:1b:f0:40:df:6f:2c:ba:4c:00:
                    a6:eb:04:7a:85:d6:0e:6f:88:81:3c:52:a0:8c:db:
                    bc:8f:e9:d9:61:09:73:cd:a7:e5:0e:e0:ff:f3:dc:
                    24:75:fd:35:ab:49:e1:df:3c:20:f5:1f:54:5f:b1:
                    bf:c5:87:c0:27:ca:71:fe:7c:8a:06:39:d9:b7:84:
                    41:15:b1:e2:4d:2d:47:2a:b1:3c:ed:c9:ea:d5:b0:
                    46:ad:9a:41:c7:4c:dc:5d:32:4c:0f:df:4e:7c:58:
                    17:07:c1:41:51:fc:f2:dc:a4:b0:ec:06:bd:db:60:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:90:49:5A:05:90:98:3A:39:23:08:19:15:C9:AD:6C:61:98:D3:69
            X509v3 Authority Key Identifier:
                keyid:30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136312e302e302e302f32302d3230203d3e20323633373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:b8:e6:39:0f:9b:c6:4d:d3:7e:0c:aa:07:0e:d5:e1:ec:
         37:fb:b0:ea:c6:53:13:48:a7:a0:50:31:6c:fc:0d:22:28:d4:
         03:ab:fd:d3:c3:8f:62:b7:dc:44:d9:df:8e:30:0d:0a:87:5a:
         09:6c:8d:4e:43:4a:94:d6:76:5b:c8:a0:ea:17:ce:f6:fb:d3:
         3b:c3:16:37:e2:f0:e9:25:ef:0b:23:72:d8:0c:2c:23:db:7a:
         ea:ec:de:97:8a:6c:ae:49:9b:6a:8a:87:69:66:9c:48:0c:ca:
         19:c7:d5:00:3f:4e:fb:a7:20:08:3f:d5:a9:3d:18:9c:f2:f7:
         82:5b:b4:32:ce:3c:2c:1f:eb:da:bc:cd:f4:e3:77:e7:87:6d:
         b9:6a:bf:46:62:53:0d:56:72:4f:37:ea:87:3f:7b:18:5c:8a:
         8f:90:60:e3:88:81:01:0e:24:05:ed:21:ef:ee:a6:23:4b:e7:
         b7:d9:13:bf:4c:0f:6c:8b:48:25:6b:e8:9b:d9:11:55:fe:86:
         b3:47:ec:bd:1e:dc:70:06:57:10:c7:aa:7d:8a:2f:3a:f9:c1:
         b5:ce:a6:25:e2:dd:ea:96:80:ea:fc:92:c2:22:75:ae:76:0a:
         17:5d:9c:be:54:58:ba:50:aa:cd:ee:86:7f:c7:88:62:80:98:
         0d:f7:45:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:08 2026 by rpki-client