This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137302e302f32342d3234203d3e20323639393138.roa
File:                     3133312e37322e3137302e302f32342d3234203d3e20323639393138.roa (raw, json)
Hash identifier:          arjwRRA46H7wi4IbjmbnsvuzeZMemIsYGIfv9Je0ewU=
Subject key identifier:   9B:93:55:CD:21:36:2E:23:F8:A8:87:0E:D3:18:8B:0C:57:C1:D9:D4
Certificate issuer:       /CN=94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395
Certificate serial:       06A4EA773A9C21E14A6CB1F6020C6143AE0F0E62
Authority key identifier: 94:D9:2E:DB:BD:4E:B9:AC:D1:A6:7B:58:FD:CB:19:00:48:B1:D3:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137302e302f32342d3234203d3e20323639393138.roa
Signing time:             Sat 13 Dec 2025 14:15:00 +0000
ROA not before:           Sat 13 Dec 2025 14:10:00 +0000
ROA not after:            Sat 12 Dec 2026 14:15:00 +0000
asID:                     269918
IP address blocks:        131.72.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 12:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a4:ea:77:3a:9c:21:e1:4a:6c:b1:f6:02:0c:61:43:ae:0f:0e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395
        Validity
            Not Before: Dec 13 14:10:00 2025 GMT
            Not After : Dec 12 14:15:00 2026 GMT
        Subject: CN=9B9355CD21362E23F8A8870ED3188B0C57C1D9D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:8f:8d:26:c4:7c:d1:e9:3e:06:19:32:ab:
                    d5:96:35:d6:46:5a:d7:20:f6:bb:31:12:d3:ff:61:
                    14:4d:c5:9a:33:30:c1:fd:55:30:01:dc:b0:bb:69:
                    32:f9:f5:82:b5:38:91:78:57:61:7c:af:1f:50:01:
                    51:e7:ab:2b:c4:ac:9b:7c:cc:d7:a7:5b:96:a3:d2:
                    25:4e:26:6e:33:29:6e:c2:72:dd:d0:03:58:93:7b:
                    cb:6e:a5:fd:15:b3:e8:aa:87:ab:47:d3:f0:4a:7e:
                    27:95:04:30:b0:92:da:ed:8d:73:bc:66:75:4e:7e:
                    0b:3b:df:c3:e5:dc:04:5d:49:5d:00:d0:d3:f2:82:
                    28:f0:b9:e0:ba:28:36:c2:0a:cb:70:f1:b8:7e:8e:
                    3e:b2:ad:b9:ec:0d:63:9d:02:d2:12:5e:46:08:eb:
                    0f:f5:ef:93:5a:16:ee:75:48:cb:40:09:04:89:b9:
                    eb:30:da:94:9e:21:3c:ad:48:2f:72:21:b2:0f:e1:
                    30:df:74:99:25:3e:cb:10:49:99:73:31:7d:88:cf:
                    d4:74:29:da:06:7f:a8:15:a2:13:52:99:4b:4e:82:
                    65:e8:54:e7:56:db:db:9d:c0:95:21:85:3f:d0:3c:
                    04:c7:7c:5e:c6:1d:6f:2b:ba:7f:91:a0:da:fc:a9:
                    25:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:93:55:CD:21:36:2E:23:F8:A8:87:0E:D3:18:8B:0C:57:C1:D9:D4
            X509v3 Authority Key Identifier:
                keyid:94:D9:2E:DB:BD:4E:B9:AC:D1:A6:7B:58:FD:CB:19:00:48:B1:D3:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137302e302f32342d3234203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:f0:ef:40:8e:53:9d:c9:77:67:9b:23:1d:04:c2:e6:b8:e7:
         1b:4d:37:a6:4e:e1:65:5c:a3:94:75:10:9d:02:be:d5:82:e0:
         34:70:e5:1c:b1:62:6b:b4:a4:cb:5e:9d:5d:19:f5:d8:b3:5c:
         ee:98:a0:34:b2:95:5b:68:5c:79:80:c8:75:60:7c:67:2a:1b:
         21:9f:b2:6a:20:d3:c8:c2:74:8a:42:cf:2c:de:84:8d:16:6d:
         45:85:b6:61:49:03:a0:df:f7:cc:a7:fa:a5:98:1b:7b:82:d5:
         de:54:dd:be:4d:a4:bd:16:64:3b:c7:16:ac:cd:32:b2:3d:97:
         9f:2d:89:87:69:e4:22:82:27:c1:5e:37:6f:28:ff:fa:99:e7:
         dc:9b:05:f1:da:cc:cd:64:99:70:c9:fc:7b:a4:6f:3e:04:a1:
         97:35:76:09:3c:75:02:27:b3:6e:f4:ab:88:ce:d3:42:bd:b7:
         38:59:33:88:42:73:d9:46:cf:92:93:cb:61:cf:cf:45:dc:ba:
         34:10:0d:e7:7f:b3:1f:6a:aa:45:d9:e1:41:49:59:6b:c6:c3:
         db:ae:b4:85:d9:bd:a3:e0:eb:63:7c:e6:b6:4d:1c:4a:cb:ae:
         6b:ac:5b:15:78:2d:81:72:b7:6b:49:1e:d2:60:6d:37:6e:05:
         08:0e:5b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 06:23:57 2025 by rpki-client