This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/3133312e302e3133322e302f32322d3234203d3e20323730303732.roa
File:                     3133312e302e3133322e302f32322d3234203d3e20323730303732.roa (raw, json)
Hash identifier:          /LcJiGJyhb5GjaWjG1MCItiSFP/AbTuyqKjEyUNF8jE=
Subject key identifier:   79:CF:F8:25:53:05:19:93:2E:2A:D4:DE:DC:42:19:48:4E:A2:33:6E
Certificate issuer:       /CN=A46634976135DC79BB9C36E294FEF50F4ED507BD
Certificate serial:       69460E03C8B69E754308E96ECCF7284E5FFFD06B
Authority key identifier: A4:66:34:97:61:35:DC:79:BB:9C:36:E2:94:FE:F5:0F:4E:D5:07:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/3133312e302e3133322e302f32322d3234203d3e20323730303732.roa
Signing time:             Tue 06 Jan 2026 19:17:44 +0000
ROA not before:           Tue 06 Jan 2026 19:12:44 +0000
ROA not after:            Tue 05 Jan 2027 19:17:44 +0000
asID:                     270072
IP address blocks:        131.0.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:46:0e:03:c8:b6:9e:75:43:08:e9:6e:cc:f7:28:4e:5f:ff:d0:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A46634976135DC79BB9C36E294FEF50F4ED507BD
        Validity
            Not Before: Jan  6 19:12:44 2026 GMT
            Not After : Jan  5 19:17:44 2027 GMT
        Subject: CN=79CFF825530519932E2AD4DEDC4219484EA2336E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4c:d2:5a:66:ec:12:60:7f:48:d5:4f:90:f5:
                    ac:4d:1c:a0:35:c3:6d:6b:fe:6e:ba:72:89:d8:04:
                    02:f1:45:a9:9a:16:31:ff:7a:b1:46:06:8f:56:e1:
                    80:dc:12:59:9c:74:31:19:34:4a:07:54:d7:56:50:
                    59:a8:5b:35:06:a7:b2:5b:62:4b:f1:06:7b:9e:67:
                    17:20:6d:82:e6:7c:70:81:9c:1c:bd:3f:2a:3b:53:
                    ac:6a:ff:19:2f:56:29:e0:f6:84:06:e4:f9:69:6a:
                    6f:37:ac:7b:5a:35:2f:e8:4a:d5:fc:0f:04:d0:94:
                    e0:6f:44:ba:b0:4f:cb:e3:09:47:36:f1:ac:be:af:
                    1e:3a:1b:0d:76:73:9e:52:a9:a5:b4:6e:4b:7a:21:
                    53:be:d5:9f:a6:f9:18:87:84:a8:e5:4e:cc:45:eb:
                    2f:bf:d1:9b:b9:ba:35:ce:00:e8:29:d2:c4:ec:78:
                    28:af:3b:85:00:5f:07:90:a0:ff:54:c1:6d:77:3f:
                    c2:f7:9b:3a:bd:73:c9:17:f2:c2:ce:97:7a:ec:76:
                    90:1a:7b:84:b8:9a:95:e5:08:81:7b:8d:ee:81:89:
                    c7:ba:1f:11:08:e2:24:63:5e:1c:16:5f:8c:d8:f6:
                    e3:70:42:ed:89:51:0e:17:a5:0d:e5:f2:59:23:37:
                    ed:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CF:F8:25:53:05:19:93:2E:2A:D4:DE:DC:42:19:48:4E:A2:33:6E
            X509v3 Authority Key Identifier:
                keyid:A4:66:34:97:61:35:DC:79:BB:9C:36:E2:94:FE:F5:0F:4E:D5:07:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/3133312e302e3133322e302f32322d3234203d3e20323730303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:ba:6f:fa:50:a3:30:ea:bb:fd:da:50:52:9a:e6:4b:c9:4d:
         80:b3:94:4a:2f:50:81:57:d4:da:94:d9:d8:f0:7d:8c:ab:0d:
         79:2d:4b:d9:37:a9:5e:21:35:07:4a:01:c9:c3:ec:61:93:f3:
         c1:57:d2:f6:8f:f2:f9:59:c9:ce:ab:18:97:00:88:9b:ec:19:
         0b:66:63:22:c4:a3:24:c0:74:a4:51:0d:b1:c0:3e:7d:bd:64:
         37:2e:8d:53:7e:5f:7a:30:be:13:71:01:71:19:92:71:ce:6b:
         b6:f7:a2:b8:bd:18:44:ec:2c:f5:c7:17:ce:d5:20:36:42:c5:
         43:d3:30:5a:9a:cb:d7:68:65:82:61:92:13:b1:e3:79:83:17:
         54:ef:f7:ec:2e:a1:0a:c4:45:94:1c:a5:48:e1:2d:0b:96:52:
         a6:c2:a0:2b:c6:c7:9c:30:96:ff:c0:0d:03:29:4e:46:11:ff:
         f6:26:e0:c0:60:03:27:b5:cc:32:48:e8:f3:1c:36:89:b9:e2:
         73:73:df:ce:21:f1:53:c4:5a:3d:87:db:87:d1:67:21:db:9c:
         df:d9:92:56:13:44:f7:cd:3e:06:50:83:26:61:9b:37:ec:8b:
         a4:81:94:d3:6b:19:11:fa:d2:d1:d5:21:7b:f8:88:41:5a:22:
         24:a5:3b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:58 2026 by rpki-client