This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/3136312e32322e302e302f31392d3234203d3e203139383839.roa
File:                     3136312e32322e302e302f31392d3234203d3e203139383839.roa (raw, json)
Hash identifier:          d0jEF87ybdeSmWuAR1NUEjg5p7XGBRp/sbXvP/kRzK8=
Subject key identifier:   F8:8F:B4:11:AA:ED:B8:DF:E3:8D:A9:29:1B:40:FA:48:58:53:E7:2C
Certificate issuer:       /CN=AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB
Certificate serial:       7AEF3F76CDA998F87AF6976E49293CBBBB6A71FF
Authority key identifier: AB:6F:C2:B3:BE:D1:DA:F0:5E:7F:5D:F4:45:D0:88:BB:39:64:58:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/3136312e32322e302e302f31392d3234203d3e203139383839.roa
Signing time:             Tue 06 Jan 2026 20:57:03 +0000
ROA not before:           Tue 06 Jan 2026 20:52:03 +0000
ROA not after:            Tue 05 Jan 2027 20:57:03 +0000
asID:                     19889
IP address blocks:        161.22.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ef:3f:76:cd:a9:98:f8:7a:f6:97:6e:49:29:3c:bb:bb:6a:71:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB
        Validity
            Not Before: Jan  6 20:52:03 2026 GMT
            Not After : Jan  5 20:57:03 2027 GMT
        Subject: CN=F88FB411AAEDB8DFE38DA9291B40FA485853E72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:61:3f:68:c7:5b:92:35:16:15:e9:54:70:
                    06:ea:5a:0c:00:23:c2:48:84:99:0c:8a:89:f3:1a:
                    45:70:51:ff:cd:40:48:48:ed:7d:31:05:55:33:37:
                    92:41:37:38:b9:a9:ed:bf:64:92:26:94:ca:7b:d9:
                    a1:f0:bb:77:5a:5e:fd:40:20:f0:ac:d2:4c:3e:4c:
                    48:88:91:5a:59:08:23:c7:00:03:0d:3c:70:2c:81:
                    64:50:1b:12:64:6a:b8:c3:01:0a:7c:ca:5d:c6:32:
                    a8:37:07:5c:95:63:bc:92:4f:2c:3c:07:58:b0:21:
                    68:0d:d3:ab:cb:fa:33:2c:11:d9:7c:40:54:8f:13:
                    5f:b3:a3:97:c4:2b:ca:1a:b7:69:9d:64:8b:c2:ce:
                    59:0c:10:e5:1e:38:1a:94:aa:7c:19:98:c5:fb:ac:
                    9a:1d:a0:e7:90:ff:36:2c:a3:c5:93:a0:ab:5b:97:
                    62:4b:ea:45:ed:e2:cb:c7:90:fc:99:f2:5b:c5:1f:
                    1c:42:13:ee:19:84:33:80:07:bb:22:7f:1b:57:a6:
                    60:68:16:c0:83:3e:93:0e:9f:71:99:76:e7:10:3a:
                    18:4f:cd:ae:11:87:b3:6d:76:98:00:f1:6e:b7:7c:
                    a7:93:8b:81:a2:56:e9:9d:eb:5a:34:6a:65:e5:6f:
                    0b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8F:B4:11:AA:ED:B8:DF:E3:8D:A9:29:1B:40:FA:48:58:53:E7:2C
            X509v3 Authority Key Identifier:
                keyid:AB:6F:C2:B3:BE:D1:DA:F0:5E:7F:5D:F4:45:D0:88:BB:39:64:58:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/3136312e32322e302e302f31392d3234203d3e203139383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:1c:f6:3c:63:6c:46:68:6e:8a:31:4f:f6:c7:1f:f0:cc:d8:
         3a:82:ea:0d:7d:45:e0:bb:bc:92:ed:60:56:d7:66:78:ba:16:
         7a:e9:24:b5:8b:01:c5:dd:c6:d7:a5:7b:9c:36:d1:98:ea:ad:
         87:01:c4:ee:88:de:87:08:39:31:06:a1:65:75:09:ad:55:64:
         71:b9:fd:27:a0:20:18:d5:54:77:08:2e:99:c6:07:52:6e:34:
         e7:25:22:4a:6a:71:a8:73:4b:29:f7:c4:f5:71:78:18:66:4a:
         fe:b2:5d:56:d6:f7:72:22:9e:d4:96:4b:93:ff:a2:62:fd:44:
         14:41:66:d7:69:81:2f:06:2f:46:8d:66:e7:3d:50:10:81:7d:
         1c:cd:a9:8a:9b:14:eb:12:21:46:e2:a0:5b:46:e5:27:0c:0a:
         37:69:44:ee:4c:d6:32:22:db:d6:6a:11:74:e6:f6:6e:44:9a:
         e4:b6:1e:10:dd:0a:88:a4:8d:ac:80:87:c6:cb:d1:ab:8c:48:
         7f:61:e7:8b:f1:4b:c6:b6:ee:b8:43:72:a9:22:5a:1e:a5:08:
         6a:73:20:22:2b:7d:7f:4e:cf:87:55:50:b0:75:43:1c:1b:06:
         07:2b:1f:a9:02:32:bb:0b:7b:11:a9:9c:fd:08:e2:8b:a2:6b:
         94:44:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:00:53 2026 by rpki-client