This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/3133312e302e3136382e302f32322d3234203d3e20323632313931.roa
File:                     3133312e302e3136382e302f32322d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          cn9+MqrDVMAofDt0v/0hve+BBNSMabIZ49617Zlr284=
Subject key identifier:   40:81:0D:C3:76:40:15:05:93:42:14:C2:57:60:63:21:B2:E9:5E:8A
Certificate issuer:       /CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
Certificate serial:       3B5FDDA7442E263B11F59F021AB7C2C1341B8719
Authority key identifier: E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/3133312e302e3136382e302f32322d3234203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 19:22:42 +0000
ROA not before:           Tue 06 Jan 2026 19:17:42 +0000
ROA not after:            Tue 05 Jan 2027 19:22:42 +0000
asID:                     262191
IP address blocks:        131.0.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Feb 2026 17:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5f:dd:a7:44:2e:26:3b:11:f5:9f:02:1a:b7:c2:c1:34:1b:87:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
        Validity
            Not Before: Jan  6 19:17:42 2026 GMT
            Not After : Jan  5 19:22:42 2027 GMT
        Subject: CN=40810DC376401505934214C257606321B2E95E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:13:cb:b4:57:7b:de:b2:a7:6b:f2:be:2a:
                    58:94:f1:41:60:c7:78:11:56:87:52:5d:ed:27:4a:
                    e0:f2:20:de:ed:d6:d6:71:91:1e:7f:74:c9:30:5b:
                    b5:e7:d9:65:8e:15:87:39:9c:45:55:2b:64:e6:a3:
                    6f:38:9a:1d:29:72:d7:84:e7:7f:fb:d1:67:60:44:
                    0b:ba:23:54:c5:d9:10:3e:89:69:e1:ed:93:b2:68:
                    55:a5:63:a0:de:49:6b:5e:63:93:14:f8:88:43:90:
                    f1:e2:9a:fe:a4:19:3b:1d:d4:15:98:ae:1b:f4:24:
                    82:23:46:8e:99:82:18:b9:e9:14:8d:b3:31:98:da:
                    ea:e6:d7:8d:b9:76:4a:13:0a:8f:f3:de:13:38:d7:
                    07:d7:3a:08:2f:46:4b:11:c3:dc:d1:08:15:95:a9:
                    dc:ac:25:85:6f:0d:c3:6e:53:de:7f:6f:38:f0:96:
                    af:ef:23:58:55:39:bc:2d:ba:59:06:27:d3:41:9a:
                    3e:5d:6b:11:7e:03:8b:15:89:17:50:3c:8b:5f:fc:
                    18:fe:90:41:03:20:6e:8c:0a:26:9c:98:de:2b:86:
                    c1:97:89:11:02:62:88:ed:3f:4a:ad:87:be:27:2a:
                    c4:1a:7b:38:fe:d2:f2:ab:52:8b:49:e5:cb:38:73:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:81:0D:C3:76:40:15:05:93:42:14:C2:57:60:63:21:B2:E9:5E:8A
            X509v3 Authority Key Identifier:
                keyid:E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/3133312e302e3136382e302f32322d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:d0:2f:ed:69:35:f3:6b:f1:d2:4c:43:23:06:ec:03:06:5d:
         6a:44:17:61:20:8c:be:52:fc:5c:58:01:4c:da:10:77:2e:cc:
         a3:89:79:b0:f7:a1:a0:ad:7c:1c:92:49:c0:ce:39:68:14:6c:
         9b:d9:a5:54:73:38:f9:97:2c:79:87:d9:10:38:d3:02:4a:81:
         9b:a1:7d:fc:9d:7f:37:28:58:0f:78:d4:70:c0:52:d4:3b:2b:
         ff:8b:6b:09:26:93:ab:6e:43:f1:e6:07:ab:4a:57:88:80:43:
         da:2e:83:0e:42:3a:0c:5d:f2:f2:8b:d8:86:48:fa:51:6e:e5:
         64:dc:ec:ca:29:44:b9:14:df:0c:fb:39:58:b4:af:0a:a2:da:
         bf:fe:ae:17:30:fd:0b:f1:2e:6b:ad:fc:cd:c4:4b:cf:b2:7f:
         fe:9c:0a:0b:9c:4f:81:41:4b:96:b4:05:7b:76:aa:82:e8:e9:
         d4:f7:33:6b:61:3f:95:b6:5d:24:1f:41:05:c5:18:ce:15:5b:
         4e:3d:a8:3e:03:f1:aa:f2:d2:0e:2c:57:7d:78:86:6e:24:26:
         c1:09:2c:18:48:4d:27:00:32:32:93:7e:32:07:c8:ea:fc:14:
         05:b2:c0:76:db:6e:7e:0e:43:dc:09:60:42:1b:9f:a7:71:ab:
         44:a2:82:8c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUO1/dp0QuJjsR9Z8CGrfCwTQbhxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTIyOTg5OEI2RTdGQjdGMzA0OEVCRDRGOENEQjlGODg5
NEQyNTJBODAeFw0yNjAxMDYxOTE3NDJaFw0yNzAxMDUxOTIyNDJaMDMxMTAvBgNV
BAMTKDQwODEwREMzNzY0MDE1MDU5MzQyMTRDMjU3NjA2MzIxQjJFOTVFOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyEBPLtFd73rKna/K+KliU8UFg
x3gRVodSXe0nSuDyIN7t1tZxkR5/dMkwW7Xn2WWOFYc5nEVVK2Tmo284mh0pcteE
53/70WdgRAu6I1TF2RA+iWnh7ZOyaFWlY6DeSWteY5MU+IhDkPHimv6kGTsd1BWY
rhv0JIIjRo6Zghi56RSNszGY2urm1425dkoTCo/z3hM41wfXOggvRksRw9zRCBWV
qdysJYVvDcNuU95/bzjwlq/vI1hVObwtulkGJ9NBmj5daxF+A4sViRdQPItf/Bj+
kEEDIG6MCiacmN4rhsGXiRECYojtP0qth74nKsQaezj+0vKrUotJ5cs4c9upAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQIENw3ZAFQWTQhTCV2BjIbLpXoowHwYDVR0j
BBgwFoAU4imJi25/t/MEjr1PjNufiJTSUqgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MkJCQzQ4QzJBMEM1NTk3QzM0NTlFODZEQ0U4QzYyREM2
RkUxNzYwRTBDOTRFNDlDREEwMzFBODE3RjYyQjhCLzAvRTIyOTg5OEI2RTdGQjdG
MzA0OEVCRDRGOENEQjlGODg5NEQyNTJBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMjI5ODk4QjZFN0ZCN0YzMDQ4
RUJENEY4Q0RCOUY4ODk0RDI1MkE4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTJCQkM0OEMyQTBDNTU5N0MzNDU5RTg2RENFOEM2MkRDNkZFMTc2MEUw
Qzk0RTQ5Q0RBMDMxQTgxN0Y2MkI4Qi8wLzMxMzMzMTJlMzAyZTMxMzYzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMjMxMzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoMAqDAN
BgkqhkiG9w0BAQsFAAOCAQEAV9Av7Wk182vx0kxDIwbsAwZdakQXYSCMvlL8XFgB
TNoQdy7Mo4l5sPehoK18HJJJwM45aBRsm9mlVHM4+ZcseYfZEDjTAkqBm6F9/J1/
NyhYD3jUcMBS1Dsr/4trCSaTq25D8eYHq0pXiIBD2i6DDkI6DF3y8ovYhkj6UW7l
ZNzsyilEuRTfDPs5WLSvCqLav/6uFzD9C/Eua638zcRLz7J//pwKC5xPgUFLlrQF
e3aqgujp1Pcza2E/lbZdJB9BBcUYzhVbTj2oPgPxqvLSDixXfXiGbiQmwQksGEhN
JwAyMpN+MgfI6vwUBbLAdttufg5D3AlgQhufp3GrRKKCjA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 07:35:51 2026 by rpki-client