This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/3133322e3235352e3232342e302f32322d3233203d3e20323633373136.roa
File:                     3133322e3235352e3232342e302f32322d3233203d3e20323633373136.roa (raw, json)
Hash identifier:          +Md2XsPx4/V5TihKBe5CE+ISIz29rfXN/ugqBTW8ZyE=
Subject key identifier:   F0:A7:52:B6:DB:21:29:04:4E:6E:7D:2A:5B:D2:A7:91:39:2B:32:FA
Certificate issuer:       /CN=48A2AE510C2812263732FA2A9F0AF189D1B73B04
Certificate serial:       45F854CDD92A4EE20B2588C15CF20A06D6E49344
Authority key identifier: 48:A2:AE:51:0C:28:12:26:37:32:FA:2A:9F:0A:F1:89:D1:B7:3B:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/3133322e3235352e3232342e302f32322d3233203d3e20323633373136.roa
Signing time:             Tue 06 Jan 2026 19:07:03 +0000
ROA not before:           Tue 06 Jan 2026 19:02:03 +0000
ROA not after:            Tue 05 Jan 2027 19:07:03 +0000
asID:                     263716
IP address blocks:        132.255.224.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f8:54:cd:d9:2a:4e:e2:0b:25:88:c1:5c:f2:0a:06:d6:e4:93:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48A2AE510C2812263732FA2A9F0AF189D1B73B04
        Validity
            Not Before: Jan  6 19:02:03 2026 GMT
            Not After : Jan  5 19:07:03 2027 GMT
        Subject: CN=F0A752B6DB2129044E6E7D2A5BD2A791392B32FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:d4:31:ee:fb:d4:c1:61:c7:b2:96:d4:e9:
                    1d:86:64:92:8a:58:2e:56:07:0c:a5:3b:2f:37:d8:
                    c3:1a:f4:18:9c:a0:67:f3:db:52:73:a1:c0:8b:ba:
                    e5:42:18:cf:b9:c0:a9:fb:96:dc:0a:a6:b9:c3:22:
                    57:e6:c7:8b:11:99:d4:a6:e1:0d:24:2b:de:d0:44:
                    0c:a4:bf:87:e4:e2:75:f9:68:dd:71:9e:f4:fd:55:
                    00:a6:83:fb:d0:d1:f9:cd:0c:ae:14:2f:f1:41:53:
                    ec:00:e8:5c:d6:e2:ea:d2:f8:5f:d6:6a:f0:ed:46:
                    4e:f1:8d:af:13:99:91:c8:e2:8c:80:d4:a0:a1:23:
                    16:69:c5:68:18:12:11:0b:42:db:75:5b:a2:05:d2:
                    ca:a0:07:06:73:9b:e1:d1:3d:84:21:1e:93:25:dc:
                    f3:83:f9:93:a6:4a:f8:ef:24:75:8e:7b:fa:cf:4c:
                    61:ce:3a:4f:2f:9d:45:d1:38:df:e1:34:cb:75:65:
                    55:9a:fc:65:53:a9:56:8b:62:a2:e1:bc:95:43:e0:
                    28:48:dc:35:20:e5:3b:5f:68:d5:63:87:8c:69:bb:
                    3d:ee:e4:b0:07:f4:bc:5a:68:9d:1b:df:75:d6:de:
                    94:3d:61:84:ec:e7:1f:4a:34:a7:0f:a1:f2:45:2d:
                    01:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A7:52:B6:DB:21:29:04:4E:6E:7D:2A:5B:D2:A7:91:39:2B:32:FA
            X509v3 Authority Key Identifier:
                keyid:48:A2:AE:51:0C:28:12:26:37:32:FA:2A:9F:0A:F1:89:D1:B7:3B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/3133322e3235352e3232342e302f32322d3233203d3e20323633373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:f9:1e:c5:b2:ad:89:98:da:8b:14:15:f6:fa:5f:14:e2:31:
         72:03:78:06:80:bd:08:a5:85:ce:a3:7e:81:1a:6b:28:aa:56:
         17:b4:4e:97:5e:b5:0d:03:d1:5d:b6:f7:8b:8a:6e:3d:dc:06:
         96:ff:61:aa:32:23:80:30:6a:14:cb:af:4d:74:a3:8e:3a:5c:
         fe:96:0d:53:21:47:20:74:38:cf:8a:22:1f:9c:89:fe:3a:69:
         72:2d:7d:af:aa:83:94:3d:9e:ad:a9:d3:16:e8:2c:b8:c0:fd:
         08:fa:0b:85:60:c0:bf:89:32:66:e2:7e:b4:63:b0:de:7a:ea:
         ce:df:68:c9:96:92:c1:2e:a1:17:44:b7:34:d1:c7:ba:7a:8c:
         08:16:8f:f9:53:5e:c0:02:77:93:6c:e0:e4:36:30:e5:c7:98:
         85:d5:05:34:1a:c0:ae:e1:6c:5f:ee:a2:10:e8:ba:c6:8f:6d:
         44:d9:62:1c:84:fd:e0:42:fb:eb:71:ee:8d:2c:b8:71:ff:72:
         0c:7c:66:35:f4:ee:8c:0f:f2:fe:f5:b6:63:cb:5e:f4:c7:44:
         2b:04:cd:15:08:d5:d7:c3:d3:9d:36:06:6c:ab:a2:6f:fb:32:
         62:90:7e:ab:3e:d0:a7:63:e4:e9:9b:e4:70:dd:c1:85:60:aa:
         c8:da:97:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:06:17 2026 by rpki-client