This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa
File:                     3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa (raw, json)
Hash identifier:          5PtwY/I4K1sqbgk4oepM0bf77G8DSkxSrrobd+DAweY=
Subject key identifier:   F0:F6:AC:5E:3F:71:FB:7C:9C:19:A2:F2:7D:8E:71:DB:41:0C:A7:71
Certificate issuer:       /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
Certificate serial:       24076DE444F907ADAE6E2B2F5BD0CBDE1ED37388
Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa
Signing time:             Tue 06 Jan 2026 19:07:46 +0000
ROA not before:           Tue 06 Jan 2026 19:02:46 +0000
ROA not after:            Tue 05 Jan 2027 19:07:46 +0000
asID:                     271970
IP address blocks:        131.196.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:07:6d:e4:44:f9:07:ad:ae:6e:2b:2f:5b:d0:cb:de:1e:d3:73:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
        Validity
            Not Before: Jan  6 19:02:46 2026 GMT
            Not After : Jan  5 19:07:46 2027 GMT
        Subject: CN=F0F6AC5E3F71FB7C9C19A2F27D8E71DB410CA771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:f5:ce:8f:07:75:ea:a4:4e:ca:91:94:20:
                    c1:3a:43:0a:a3:d5:97:80:2d:29:bd:01:72:b0:1d:
                    ee:00:52:fd:06:59:eb:f6:99:d6:69:66:ad:b0:cd:
                    f0:d4:35:0b:2a:34:69:1f:fd:c8:fd:33:66:85:67:
                    00:72:2c:a0:87:c9:14:dd:ff:69:02:65:19:58:eb:
                    94:2c:f6:56:f9:a9:5c:38:8a:2a:84:44:40:87:b9:
                    61:17:0f:74:ca:03:6b:1d:99:83:47:e1:7f:ec:c7:
                    f8:7c:81:b8:00:33:a6:d6:94:79:89:4e:e3:35:38:
                    6b:50:f1:95:92:9e:9a:cf:f3:a4:f2:ba:85:4e:bf:
                    b7:ec:5e:0c:dd:98:2d:b5:49:a0:bd:35:6c:f2:be:
                    c5:a2:0b:12:d6:19:1a:34:c5:fc:aa:01:05:54:1d:
                    50:9d:6a:e9:2d:ad:0d:2b:87:76:cf:01:cb:cd:92:
                    fc:54:e8:ec:a4:d9:3f:93:41:20:45:46:4e:4f:de:
                    06:24:dc:a9:b6:30:ba:1e:95:1c:9d:59:01:81:85:
                    b6:f6:3e:4f:8e:36:92:e3:fe:fc:80:12:c0:8a:15:
                    36:6f:3e:f2:31:c7:e8:a4:5d:10:db:5f:d9:d8:55:
                    00:eb:7c:0a:a4:1f:5d:b3:85:22:4e:f1:21:b6:27:
                    e3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F6:AC:5E:3F:71:FB:7C:9C:19:A2:F2:7D:8E:71:DB:41:0C:A7:71
            X509v3 Authority Key Identifier:
                keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:3b:34:d4:1c:be:9a:b5:b5:77:e8:81:f7:00:78:a4:3f:7e:
         e6:a0:aa:3b:ac:e2:07:49:5c:2d:33:c5:bd:44:2f:ca:f8:8a:
         13:8c:f6:e3:ca:f1:70:7d:ce:a4:45:06:b7:28:eb:16:1f:69:
         cd:df:e2:5b:75:a1:97:f4:0a:55:b1:19:c8:99:65:97:96:ea:
         dd:58:15:dd:83:ac:87:6d:5d:33:76:08:5c:9f:68:f7:dd:37:
         e3:6f:79:01:08:4e:dd:78:ad:ae:04:3c:48:fd:1f:1a:4f:fe:
         8a:a8:62:85:0f:35:c2:a9:07:b2:0d:37:5d:6e:72:41:e8:88:
         ba:83:aa:99:38:94:3b:d0:3b:b2:d7:7d:85:38:3b:53:9d:21:
         17:c2:79:d4:ca:bf:34:f0:5a:9c:cf:7a:25:36:9c:25:85:fe:
         a9:fe:91:83:92:5d:d7:54:e1:ef:1f:bc:20:e9:8f:ec:81:86:
         df:d1:31:0d:64:2a:9d:90:2b:7b:16:d6:92:82:ff:94:48:f2:
         50:a9:0b:72:e3:87:84:88:79:c1:d8:da:1a:9c:e3:49:40:73:
         05:e4:c2:ac:af:d6:5b:8e:88:f1:df:3f:dd:8c:d7:41:6e:93:
         8a:c8:f8:74:16:65:8b:80:ff:ef:67:f9:6c:79:3c:c8:b9:1c:
         0a:31:1b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:31 2026 by rpki-client