This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/3133322e3234382e302e302f31362d3234203d3e20323738.roa
File:                     3133322e3234382e302e302f31362d3234203d3e20323738.roa (raw, json)
Hash identifier:          z7n0RqQSTqq5e244Hh+nnJap+I+3U8m0RXVSerDDrO8=
Subject key identifier:   86:6A:10:8D:BB:17:23:FF:35:86:92:ED:4C:79:9B:73:89:3D:96:B5
Certificate issuer:       /CN=7F34532F322CC805D15BBA71423D1C8F04148FC7
Certificate serial:       27E15A1A2F3CCD9098BE07F22875AB1F400A4183
Authority key identifier: 7F:34:53:2F:32:2C:C8:05:D1:5B:BA:71:42:3D:1C:8F:04:14:8F:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/3133322e3234382e302e302f31362d3234203d3e20323738.roa
Signing time:             Tue 06 Jan 2026 19:45:57 +0000
ROA not before:           Tue 06 Jan 2026 19:40:57 +0000
ROA not after:            Tue 05 Jan 2027 19:45:57 +0000
asID:                     278
IP address blocks:        132.248.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e1:5a:1a:2f:3c:cd:90:98:be:07:f2:28:75:ab:1f:40:0a:41:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F34532F322CC805D15BBA71423D1C8F04148FC7
        Validity
            Not Before: Jan  6 19:40:57 2026 GMT
            Not After : Jan  5 19:45:57 2027 GMT
        Subject: CN=866A108DBB1723FF358692ED4C799B73893D96B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:cd:f8:72:a4:38:55:12:17:02:57:57:8c:
                    74:7a:0e:89:86:63:a3:8a:02:82:80:5b:99:d9:58:
                    89:83:3b:a4:d0:61:f1:b4:6f:24:a6:4f:f6:1c:fc:
                    79:91:e2:4e:43:5b:70:d2:aa:76:be:56:c7:e9:3a:
                    ed:4d:4b:3d:19:ab:89:68:53:f6:02:36:20:36:6f:
                    3f:a8:4e:6c:d4:04:12:19:9f:46:c5:af:33:47:ac:
                    52:88:4a:19:dc:94:96:32:c7:31:33:64:52:52:37:
                    ad:73:15:0f:85:e5:fa:4b:aa:7b:d7:61:f4:e5:75:
                    67:85:6c:3a:5c:6a:6e:1b:c7:36:f5:a6:2e:74:45:
                    0e:4d:27:6c:82:8c:c7:ce:2b:c7:77:8c:46:bc:c6:
                    99:74:08:45:09:18:4b:a9:fc:1a:7d:00:eb:43:99:
                    6d:39:c6:74:7f:39:3d:12:39:ca:6f:d7:b9:16:6e:
                    4c:09:7d:f0:15:79:4f:a8:cb:08:ab:fe:db:d1:ca:
                    42:f8:bd:3a:06:d6:bb:01:36:35:3a:d9:b1:d1:85:
                    fc:41:2c:a9:8b:1b:06:67:43:9d:7d:5e:55:7f:94:
                    75:46:1f:58:64:14:3f:fa:cd:06:53:94:64:71:ee:
                    1f:37:57:e6:a2:45:65:32:ec:c7:0c:9f:a6:66:1c:
                    8d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6A:10:8D:BB:17:23:FF:35:86:92:ED:4C:79:9B:73:89:3D:96:B5
            X509v3 Authority Key Identifier:
                keyid:7F:34:53:2F:32:2C:C8:05:D1:5B:BA:71:42:3D:1C:8F:04:14:8F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F34532F322CC805D15BBA71423D1C8F04148FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B96A789D1B364CE481B2D3AD9E6ACAA9879070E28BEE221CF5562FE161E185AC/0/3133322e3234382e302e302f31362d3234203d3e20323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         50:71:b6:04:02:96:20:5e:ac:3d:53:2c:fa:b7:d9:28:33:e4:
         aa:25:5a:85:5b:76:41:2b:16:69:fa:78:48:1c:8d:fc:ca:d4:
         a8:33:af:61:d6:9f:ea:a4:01:1f:49:38:c3:6a:2a:dc:1b:16:
         56:90:5d:12:2f:7b:2f:e9:c9:bf:e1:74:92:84:27:a4:f0:53:
         67:ad:09:16:4d:05:06:53:e3:6f:6e:d6:bd:34:8b:c9:13:fa:
         57:5a:87:60:55:f6:7f:86:a2:bf:58:17:ca:12:aa:f2:a2:9d:
         f8:e8:4d:8f:c5:bc:66:81:ce:e4:40:ef:46:cc:27:25:eb:14:
         0c:a7:0b:b8:cb:6c:99:0a:c0:e2:fb:a6:81:7d:65:a2:79:db:
         84:fd:0f:08:72:16:d7:c7:25:96:e7:a7:15:41:b0:9c:2a:59:
         89:e7:28:e0:5b:d4:ce:8b:c0:3c:e5:68:d4:6a:06:4e:ed:52:
         b1:4a:d9:5a:77:32:a5:71:99:06:42:3a:3f:a3:c3:c3:c4:62:
         30:58:89:c4:ae:a9:ee:ca:5b:09:2d:e4:cc:c1:95:08:b1:d9:
         6d:c8:d9:cc:a2:61:dc:20:f9:60:28:e8:ad:8c:d9:24:4c:8b:
         b9:6e:db:5e:0f:01:ab:95:a2:d1:d1:59:aa:7b:53:5e:5b:dc:
         37:d7:34:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:56 2026 by rpki-client