This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/3133312e3232312e31362e302f32322d3234203d3e203238303933.roa
File:                     3133312e3232312e31362e302f32322d3234203d3e203238303933.roa (raw, json)
Hash identifier:          YqxtTVnUh05egD7vcwQuWijU5/hwE0h6xjCNR6jZjws=
Subject key identifier:   F2:B4:C0:A0:B3:CE:73:78:49:62:27:81:00:E9:29:45:EA:1E:EE:00
Certificate issuer:       /CN=BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F
Certificate serial:       51490BF4CEC93BF22224F20D21D3BFEBCE9CA05C
Authority key identifier: BC:89:FE:48:C5:23:3A:2B:0F:2B:8D:47:6C:CF:52:FA:53:F5:B3:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/3133312e3232312e31362e302f32322d3234203d3e203238303933.roa
Signing time:             Tue 06 Jan 2026 19:42:22 +0000
ROA not before:           Tue 06 Jan 2026 19:37:22 +0000
ROA not after:            Tue 05 Jan 2027 19:42:22 +0000
asID:                     28093
IP address blocks:        131.221.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:49:0b:f4:ce:c9:3b:f2:22:24:f2:0d:21:d3:bf:eb:ce:9c:a0:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F
        Validity
            Not Before: Jan  6 19:37:22 2026 GMT
            Not After : Jan  5 19:42:22 2027 GMT
        Subject: CN=F2B4C0A0B3CE73784962278100E92945EA1EEE00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ac:8c:93:cc:5b:00:e5:39:af:bf:7f:bc:1d:
                    19:4f:b5:48:e7:63:4b:d3:1b:9b:ac:bc:87:ac:ae:
                    33:3f:82:c3:fe:d9:16:10:33:ba:7a:f1:60:15:a7:
                    58:4b:c1:82:e5:6f:26:dc:60:69:b3:78:5d:ba:5d:
                    37:66:b0:d0:9e:86:43:25:b2:0a:f4:36:33:55:0e:
                    6b:cd:42:3f:cc:88:b6:7c:55:5b:54:53:93:f7:5d:
                    77:61:b5:34:5b:34:b2:0e:22:d1:db:ba:b8:44:73:
                    88:c2:a6:b9:c5:9a:9a:95:3f:c6:06:55:65:b2:7b:
                    18:11:06:25:23:1f:3b:17:c3:44:d5:52:31:c4:f2:
                    d7:ab:e5:4a:c4:e0:18:27:8a:db:b8:e6:de:52:0b:
                    15:a3:a7:a1:de:26:fa:42:73:c1:b4:65:3a:38:4f:
                    6c:b7:1e:7f:bd:06:93:42:3b:94:89:96:c8:22:69:
                    b4:d6:3c:60:3f:fa:2a:b1:50:8e:87:1d:eb:94:be:
                    a7:09:b6:69:16:e5:ac:c8:2d:8b:5f:a3:86:48:cc:
                    bc:ae:24:f8:b1:f2:f1:28:d8:b5:bc:4f:7b:20:bd:
                    ca:a0:79:bb:46:c0:ff:ca:37:12:13:6d:43:94:f6:
                    8e:31:54:fc:8c:4a:73:3f:f1:78:e0:5b:6f:b2:fa:
                    80:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B4:C0:A0:B3:CE:73:78:49:62:27:81:00:E9:29:45:EA:1E:EE:00
            X509v3 Authority Key Identifier:
                keyid:BC:89:FE:48:C5:23:3A:2B:0F:2B:8D:47:6C:CF:52:FA:53:F5:B3:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/3133312e3232312e31362e302f32322d3234203d3e203238303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:25:f1:ae:bf:ef:69:40:be:bd:28:ec:94:22:69:f0:2e:88:
         55:49:c2:7b:8d:75:6e:0a:b9:b4:d6:a0:c8:1b:78:a4:a6:85:
         ce:3d:30:3e:95:af:e6:35:9b:a1:39:17:1a:4e:87:73:f5:4e:
         6e:48:3d:5a:9a:85:b5:5a:24:36:0d:e5:9b:a0:a7:a2:26:34:
         d9:29:a2:e6:f9:c7:0d:d7:7a:5f:42:6e:46:6d:68:e5:7b:09:
         00:b1:04:c3:81:61:1a:db:48:30:2f:1a:86:0b:4f:20:0d:5d:
         fc:82:ab:f8:4a:81:f1:8b:0f:4b:75:42:c4:f0:60:28:a2:ef:
         ed:6c:5c:02:6a:8e:8b:cc:87:dc:7e:ff:0a:f2:b6:cb:52:18:
         2a:21:b1:f8:04:f9:3f:71:87:17:a9:fd:bc:36:5c:d7:5c:b3:
         a2:78:8d:0d:d4:1d:d6:2e:51:62:1a:97:a6:5a:a7:ac:0c:90:
         83:c5:37:31:18:12:18:c8:85:b0:72:4e:96:32:2e:72:3b:4e:
         af:45:0c:c6:3d:08:b5:fa:e1:d3:21:09:3e:13:31:59:fe:dd:
         b9:8e:75:7b:e6:be:fd:e8:be:f4:07:db:e1:a6:f9:ea:07:07:
         7a:fe:b3:cc:01:a3:3f:60:b8:d1:ce:73:a5:1a:50:d5:be:52:
         1b:c6:70:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:55:28 2026 by rpki-client