This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/3133312e3136312e3233392e302f32342d3234203d3e20323633363837.roa
File:                     3133312e3136312e3233392e302f32342d3234203d3e20323633363837.roa (raw, json)
Hash identifier:          T1FoCxRea0kT/W4vJ530mRvRap1Rr7JmCbtByaIvANg=
Subject key identifier:   30:F1:7E:A4:35:71:60:82:93:C3:8B:BB:1B:07:22:18:EE:52:31:34
Certificate issuer:       /CN=2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343
Certificate serial:       337363D2B36D4777FF33FA69165E224FAF9D58B8
Authority key identifier: 2A:CB:03:DB:51:DD:B7:21:3E:9A:E4:4C:07:C6:BB:7B:82:8B:13:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/3133312e3136312e3233392e302f32342d3234203d3e20323633363837.roa
Signing time:             Tue 06 Jan 2026 18:59:00 +0000
ROA not before:           Tue 06 Jan 2026 18:54:00 +0000
ROA not after:            Tue 05 Jan 2027 18:59:00 +0000
asID:                     263687
IP address blocks:        131.161.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:73:63:d2:b3:6d:47:77:ff:33:fa:69:16:5e:22:4f:af:9d:58:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343
        Validity
            Not Before: Jan  6 18:54:00 2026 GMT
            Not After : Jan  5 18:59:00 2027 GMT
        Subject: CN=30F17EA43571608293C38BBB1B072218EE523134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:12:1f:ab:43:d6:c1:54:f8:00:2d:05:02:85:
                    a2:c0:79:9d:f7:14:e1:d3:62:cf:cc:31:0e:5b:24:
                    40:7e:91:08:aa:28:0f:39:a8:5e:04:51:5a:9a:2f:
                    c8:10:f3:61:f8:bb:aa:4f:36:ff:6d:63:4f:d8:f6:
                    73:89:94:a3:6d:98:3d:38:c8:2b:4e:0e:f3:fe:57:
                    91:50:87:4d:3e:2d:0d:bf:55:1a:5c:16:70:da:71:
                    a8:a2:42:a9:3b:c6:f0:4c:46:47:ca:ea:3e:80:f1:
                    11:06:77:d8:1a:9a:d7:d4:32:62:88:de:f0:57:c5:
                    a7:ba:b5:c0:33:f1:1c:ae:96:2e:50:34:60:2d:2a:
                    8b:d2:c3:bd:e3:ff:b5:3b:b9:c0:40:df:20:af:fa:
                    7a:05:4a:63:06:84:83:89:03:87:15:ee:b5:9c:c5:
                    4b:73:b1:d4:dd:d9:1e:e1:cf:da:0f:4c:da:db:f8:
                    73:33:07:ce:f3:cc:cf:8d:29:94:f0:dd:45:52:19:
                    c1:5c:53:d1:c9:79:bb:ce:a4:d0:19:1c:46:8c:bc:
                    99:84:e7:8a:42:bd:55:4b:78:c0:7c:52:26:72:fa:
                    d2:85:94:b7:09:44:43:fb:4c:62:48:ac:4e:7e:e2:
                    ab:f4:6e:2d:25:e2:f1:64:9e:fa:d8:91:c2:b7:54:
                    0d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F1:7E:A4:35:71:60:82:93:C3:8B:BB:1B:07:22:18:EE:52:31:34
            X509v3 Authority Key Identifier:
                keyid:2A:CB:03:DB:51:DD:B7:21:3E:9A:E4:4C:07:C6:BB:7B:82:8B:13:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/3133312e3136312e3233392e302f32342d3234203d3e20323633363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:0e:fd:d1:42:ca:00:6d:52:cb:9c:41:ca:8a:f0:0e:0f:2e:
         3e:01:1b:fe:11:79:e1:6f:59:e7:f9:9a:63:1d:63:e8:4e:7f:
         b9:ba:f1:72:52:f6:3c:7c:44:7c:32:b0:3b:e5:82:f3:23:9d:
         45:88:12:b9:47:65:c6:06:03:2d:df:46:1c:b5:e7:2d:5a:9c:
         a7:c1:2f:b1:65:e1:b5:c2:8b:e9:4f:aa:d0:55:6e:c4:44:53:
         0b:b9:55:ad:6a:45:02:37:d1:b0:bf:e4:55:24:61:93:63:30:
         b1:e7:bc:fc:f4:7a:28:ed:5f:ae:ad:54:7d:f7:c7:0f:0e:6f:
         2b:d7:92:64:b5:1f:1c:b7:44:e9:3e:31:02:fe:60:79:b7:b8:
         1d:b5:32:03:50:ed:53:fe:c8:c7:8b:51:89:40:91:db:e9:9c:
         7f:8c:f1:4f:ff:95:1f:cb:fc:98:dd:42:12:bc:a8:da:cb:42:
         90:e8:d5:f9:c6:37:50:fb:39:94:80:b5:bb:c9:b6:c6:f5:54:
         35:d9:14:b5:1b:51:26:65:83:96:44:47:d3:5d:d3:2e:c2:0c:
         0c:0d:f4:45:0d:04:d6:dc:eb:5c:f4:e5:e2:74:c6:16:1b:f6:
         d8:31:bb:ec:de:44:3c:c8:64:ae:90:68:da:66:c7:20:df:52:
         f2:94:db:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:41 2026 by rpki-client