This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3134302e302e302f31362d3136203d3e2036333036.roa
File:                     3136312e3134302e302e302f31362d3136203d3e2036333036.roa (raw, json)
Hash identifier:          ZcRQzrXkTSsyWrHO8xh8fKhtgg4ygZDi69rA0Rwbf+g=
Subject key identifier:   74:F5:5E:0B:10:3F:D0:D7:6C:A6:C3:82:72:27:AF:20:D8:40:BC:A6
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       7F12964A948992EF9DD3C1BE4A0634E473703781
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3134302e302e302f31362d3136203d3e2036333036.roa
Signing time:             Tue 06 Jan 2026 19:27:25 +0000
ROA not before:           Tue 06 Jan 2026 19:22:25 +0000
ROA not after:            Tue 05 Jan 2027 19:27:25 +0000
asID:                     6306
IP address blocks:        161.140.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:12:96:4a:94:89:92:ef:9d:d3:c1:be:4a:06:34:e4:73:70:37:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan  6 19:22:25 2026 GMT
            Not After : Jan  5 19:27:25 2027 GMT
        Subject: CN=74F55E0B103FD0D76CA6C3827227AF20D840BCA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:b8:f3:87:7f:f1:c8:b7:b9:61:fd:96:3f:
                    37:30:24:e1:bb:2a:33:51:8e:9f:27:7b:a2:1d:ca:
                    c7:c2:af:80:fc:69:3b:ec:34:b2:71:82:e9:9b:53:
                    10:8e:e9:fe:93:f4:f1:c8:06:21:3c:71:98:4f:16:
                    eb:4e:a7:4f:05:94:d2:99:5d:a3:de:9c:59:fe:5d:
                    04:bc:a9:30:cd:33:85:ca:43:5e:77:82:b0:f9:7a:
                    1c:7c:59:00:fd:7a:6e:d3:b4:c4:86:d4:fb:64:e8:
                    25:70:6d:a1:43:c2:89:53:bc:50:83:46:a1:33:d7:
                    6f:59:b7:95:2e:50:56:9e:d4:4f:c0:d2:ea:57:56:
                    3a:fd:d3:66:cb:4a:78:99:91:64:e1:f7:fb:f2:88:
                    e4:4a:60:39:33:3a:63:b5:47:90:1c:13:a6:d9:6e:
                    5f:83:95:eb:eb:07:9e:fe:b8:46:27:55:22:d1:a6:
                    96:4f:6f:c6:75:10:61:54:9e:40:fd:e6:b9:38:a2:
                    8c:a5:82:d9:fc:bc:cb:77:77:46:8d:87:0f:7b:16:
                    b9:e2:b8:ba:c4:07:52:0c:73:65:77:5c:69:4e:c9:
                    54:12:45:f2:85:25:51:04:34:e9:4a:fa:87:b3:c7:
                    e8:fb:da:fa:ca:bb:95:cb:10:18:08:cf:6e:6a:91:
                    f7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F5:5E:0B:10:3F:D0:D7:6C:A6:C3:82:72:27:AF:20:D8:40:BC:A6
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3134302e302e302f31362d3136203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.140.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         54:10:09:db:55:25:e3:f7:3b:52:d3:93:f8:3d:12:66:f2:2b:
         27:4c:71:66:12:a3:10:ea:46:50:92:5b:79:5e:2c:65:ed:92:
         49:7c:a1:28:89:11:bc:08:55:84:be:32:91:19:43:52:1c:40:
         36:d6:e5:26:52:59:5c:60:ea:0d:39:f7:64:37:2b:99:81:8c:
         4c:92:ff:b2:df:fe:6a:59:3c:c8:79:31:0d:fa:b1:db:30:0b:
         d1:05:45:c6:ed:60:9c:e2:a7:dc:6c:e6:b8:32:2d:d1:3e:57:
         f1:3d:c3:4e:9b:0a:d8:dd:e0:a0:a7:01:1f:2d:5c:fc:b4:6c:
         1e:e7:4a:72:58:df:37:27:25:ea:00:b5:5a:73:61:73:41:f2:
         12:d9:0b:9b:f9:75:9b:7a:42:53:7e:96:62:66:37:9f:e0:a8:
         94:c5:bb:9f:8c:e5:01:b5:67:76:0a:94:78:3f:dc:ba:9b:27:
         01:3a:ac:01:87:a9:c0:20:7a:df:a6:87:a3:af:4b:51:0a:d0:
         8b:2b:ad:d4:e9:b2:e9:4a:9f:4c:b4:81:bd:f9:cd:80:d3:bb:
         d0:82:3e:c8:7b:a8:01:e8:f2:8d:fd:fe:29:3e:25:f3:80:bc:
         25:10:8d:c2:da:82:b0:5e:94:bc:dc:52:05:6c:dd:4f:79:e0:
         d7:1e:1a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:03 2026 by rpki-client