This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/3133312e3232312e34332e302f32342d3234203d3e20323632313836.roa
File:                     3133312e3232312e34332e302f32342d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          qWlLIYcxdRM2RkjEi8ul0wgJvQbgOLC3bAZZ7IPXSQ8=
Subject key identifier:   76:35:14:FA:D2:F9:7E:CE:97:8C:5D:05:D7:D1:13:71:6B:1F:68:78
Certificate issuer:       /CN=8995F63E387603C84272761C6F4D5C08A0EC0161
Certificate serial:       3F258FB2EDD911483D009380AB938C450D27AC5D
Authority key identifier: 89:95:F6:3E:38:76:03:C8:42:72:76:1C:6F:4D:5C:08:A0:EC:01:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/3133312e3232312e34332e302f32342d3234203d3e20323632313836.roa
Signing time:             Tue 06 Jan 2026 19:42:37 +0000
ROA not before:           Tue 06 Jan 2026 19:37:37 +0000
ROA not after:            Tue 05 Jan 2027 19:42:37 +0000
asID:                     262186
IP address blocks:        131.221.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/8995F63E387603C84272761C6F4D5C08A0EC0161.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/8995F63E387603C84272761C6F4D5C08A0EC0161.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:25:8f:b2:ed:d9:11:48:3d:00:93:80:ab:93:8c:45:0d:27:ac:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8995F63E387603C84272761C6F4D5C08A0EC0161
        Validity
            Not Before: Jan  6 19:37:37 2026 GMT
            Not After : Jan  5 19:42:37 2027 GMT
        Subject: CN=763514FAD2F97ECE978C5D05D7D113716B1F6878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:ea:ce:4c:25:87:0c:14:8f:c9:2c:c5:88:
                    a2:a0:07:61:ed:a4:c9:5c:97:00:a6:e9:a7:4f:7a:
                    ec:92:8d:1e:df:56:e5:c0:3a:e7:27:55:a3:d7:6a:
                    68:35:93:ee:a0:86:c4:a1:49:e8:21:4e:fd:8a:db:
                    5e:db:25:78:db:ba:f0:91:ff:9b:aa:82:06:b8:11:
                    f6:24:17:aa:8d:e5:d5:ef:03:0d:3e:e7:22:3e:26:
                    4e:2f:1f:91:ee:e4:b1:67:1b:5e:76:cf:fb:9e:56:
                    07:8e:4a:af:d8:1c:7c:28:d5:94:6c:ec:1e:73:cf:
                    ef:a9:ea:7f:66:d6:52:01:dd:0e:bf:46:f1:ec:47:
                    c5:dc:c1:af:60:1d:b3:07:61:90:e6:6c:3b:2a:a6:
                    69:c1:6c:cc:81:ed:3c:2a:4a:f5:54:e7:48:68:7e:
                    40:ef:c6:65:70:55:46:e5:2f:b4:a3:07:65:b6:e6:
                    05:fe:14:0e:5f:33:f7:8c:fc:7c:38:4a:fe:07:b8:
                    41:1a:37:a4:b3:03:4f:15:51:8e:0f:35:80:9b:16:
                    95:88:31:2e:db:30:8a:fc:c9:59:7f:34:ef:af:a7:
                    a4:ee:b0:38:78:ab:1a:68:55:ae:a0:39:f7:34:a1:
                    5d:8f:3b:d9:e9:7c:e8:dd:3a:e2:38:0d:ca:7c:e2:
                    4f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:35:14:FA:D2:F9:7E:CE:97:8C:5D:05:D7:D1:13:71:6B:1F:68:78
            X509v3 Authority Key Identifier:
                keyid:89:95:F6:3E:38:76:03:C8:42:72:76:1C:6F:4D:5C:08:A0:EC:01:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/8995F63E387603C84272761C6F4D5C08A0EC0161.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8995F63E387603C84272761C6F4D5C08A0EC0161.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED7CFDCBF0ECDE1A949034BFC02F817A7B6316CCD969D2465B5ADD5EEC836D29/0/3133312e3232312e34332e302f32342d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:46:fa:96:b9:19:c6:2b:35:7d:b0:f8:89:66:dd:52:13:a8:
         6c:97:1b:c4:b1:88:8d:cd:d6:9d:ad:66:3c:43:85:b2:4c:b9:
         8d:cb:0d:2f:ec:fe:0f:63:2e:1f:da:fb:32:5c:e7:12:84:c0:
         48:e1:0f:37:d7:a2:a1:1e:58:3c:66:71:11:50:79:f6:23:62:
         e5:61:4d:16:f9:ad:31:45:95:67:8a:9b:57:b8:6e:ee:e5:63:
         40:92:fa:b6:07:f9:37:dc:fc:9a:83:6c:93:da:9f:db:ff:ca:
         a4:38:46:4c:e8:39:bb:f1:8b:99:f4:5a:fe:30:be:2b:b2:a1:
         12:dc:70:b0:57:20:52:df:4d:b2:0c:53:b0:d1:a4:de:d2:08:
         bd:5a:e7:7b:6e:d5:80:38:fa:02:1e:4b:88:2c:87:08:c6:76:
         ca:87:5f:a5:d1:23:e5:a7:38:8f:00:59:c9:d7:43:93:e7:2f:
         23:4e:41:f9:9a:c7:9c:09:49:4e:ea:70:58:16:f7:aa:7a:af:
         c8:d8:9e:90:23:ec:1f:1c:c2:7f:da:08:5c:e6:5a:07:77:c1:
         02:e4:32:e5:74:0c:e3:de:08:f1:c3:95:18:79:9d:6f:c9:d8:
         d9:a4:c4:e4:00:73:2a:23:01:9b:3c:4f:d6:4a:2d:e8:2e:7f:
         0f:1c:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:51 2026 by rpki-client