This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33332e302f32342d3234203d3e20323732383039.roa
File:                     3136312e32322e33332e302f32342d3234203d3e20323732383039.roa (raw, json)
Hash identifier:          ECd4iKbrDR2x0sBgUatrt2C25RMkDCMjnUUY5uY/ZCI=
Subject key identifier:   DA:73:D9:C1:E5:7D:D9:19:3D:39:4A:E4:AD:AD:E8:CD:15:7A:0F:C3
Certificate issuer:       /CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
Certificate serial:       6F64FBA781FD91B5B65A6A66EEC2AA5C6477F682
Authority key identifier: DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33332e302f32342d3234203d3e20323732383039.roa
Signing time:             Tue 06 Jan 2026 19:36:15 +0000
ROA not before:           Tue 06 Jan 2026 19:31:15 +0000
ROA not after:            Tue 05 Jan 2027 19:36:15 +0000
asID:                     272809
IP address blocks:        161.22.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:64:fb:a7:81:fd:91:b5:b6:5a:6a:66:ee:c2:aa:5c:64:77:f6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351
        Validity
            Not Before: Jan  6 19:31:15 2026 GMT
            Not After : Jan  5 19:36:15 2027 GMT
        Subject: CN=DA73D9C1E57DD9193D394AE4ADADE8CD157A0FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8b:f2:a6:da:52:d2:96:42:94:96:f9:0b:ee:
                    bc:00:62:ff:2b:8f:ad:ce:2b:fd:b5:19:40:74:ef:
                    b0:3f:5f:71:2b:0e:d9:64:fe:30:18:78:54:a7:38:
                    81:5f:94:58:a8:cd:99:d6:eb:e5:f9:37:2c:2c:a8:
                    26:47:59:64:29:6c:f8:71:ab:8f:99:c2:b2:c1:40:
                    02:38:71:6e:f2:62:78:24:1a:7a:99:24:24:4e:33:
                    86:6a:b2:3b:8c:41:fd:1d:78:36:97:21:c9:86:1e:
                    86:f6:b3:67:f7:0a:74:be:12:2b:e7:1d:54:50:07:
                    a0:88:84:52:fb:ce:2d:dc:8a:4f:41:e8:70:2c:1e:
                    bf:07:95:17:b8:80:9e:e0:1f:2b:ff:37:d2:2d:e2:
                    bb:23:e2:79:61:bc:33:c4:ec:93:63:37:d0:ee:fb:
                    0f:28:58:1b:03:bf:d3:17:68:c3:b2:3f:83:da:40:
                    39:33:cb:31:4b:de:db:58:08:76:a3:e8:de:c6:3a:
                    c8:45:8a:e4:a1:be:db:4a:89:18:2a:c4:20:75:fe:
                    e8:da:60:af:aa:f6:3e:a1:d6:1a:60:07:b1:88:3e:
                    51:32:d0:ee:d0:21:98:1c:23:b6:13:50:a3:5c:7b:
                    31:05:88:ba:f4:c8:de:5d:2f:ea:e1:9e:b2:66:20:
                    bd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:73:D9:C1:E5:7D:D9:19:3D:39:4A:E4:AD:AD:E8:CD:15:7A:0F:C3
            X509v3 Authority Key Identifier:
                keyid:DA:10:57:BC:F6:7E:7B:D9:8D:A8:AF:10:B7:1F:56:CC:CD:2D:43:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA1057BCF67E7BD98DA8AF10B71F56CCCD2D4351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFD39521CB70D37D1DC6CF48E552E2E079697CA08DC58A14FB418BF63263D4B8/0/3136312e32322e33332e302f32342d3234203d3e20323732383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:98:f7:73:9b:da:fa:ad:43:ba:f6:42:e2:1c:0d:9f:9c:de:
         d9:64:73:51:f1:f0:5f:e5:65:1b:20:76:90:2e:7e:72:45:ae:
         08:e1:13:fe:42:f5:be:04:2b:0d:76:fc:c1:c2:80:c5:46:7c:
         53:9b:1a:71:fa:56:de:11:a8:11:74:c0:ef:01:b7:48:33:bb:
         f8:ab:c3:25:9d:e2:e1:1f:6f:86:3e:18:74:b2:27:3f:91:1c:
         63:37:3b:3a:ec:6e:01:89:e9:63:0f:e0:6d:11:6e:9f:42:aa:
         7e:f5:d2:e9:a4:9f:11:6a:01:10:c1:b8:be:7b:e9:16:3a:e4:
         60:8b:88:43:ca:f9:46:d7:55:25:83:b9:c4:13:3f:35:67:4c:
         5b:a7:dc:cf:bd:aa:a2:bc:8b:54:ae:8a:7e:b6:30:cd:48:d0:
         2b:de:5a:41:b4:d1:ee:07:b1:2c:04:a8:0f:fc:c3:8d:dc:1c:
         1f:f7:e2:11:31:ac:ec:63:c3:7b:af:9e:36:04:3e:24:73:e7:
         dd:41:b6:6a:7e:44:9b:b1:ae:63:c8:42:c7:79:38:cd:c9:25:
         0b:fb:45:83:18:8e:91:d4:0e:98:b6:6d:b6:ed:e3:5b:f0:9c:
         c8:14:49:a9:04:db:8e:21:b8:1e:7b:95:2b:3c:d9:33:fe:15:
         dd:3f:fe:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:22 2026 by rpki-client