This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3133312e3130382e33362e302f32322d3234203d3e203230323939.roa
File:                     3133312e3130382e33362e302f32322d3234203d3e203230323939.roa (raw, json)
Hash identifier:          KXKNCRto6laGg6K00Fm2agLvxnQU/8oG3xOjQb4Rdh4=
Subject key identifier:   9E:64:E3:A3:5B:83:16:F5:27:9B:20:C8:80:1A:97:08:0E:41:CA:CA
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       04228B28EB376454158B68DA506008FB2A68B814
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3133312e3130382e33362e302f32322d3234203d3e203230323939.roa
Signing time:             Tue 06 Jan 2026 19:11:14 +0000
ROA not before:           Tue 06 Jan 2026 19:06:14 +0000
ROA not after:            Tue 05 Jan 2027 19:11:14 +0000
asID:                     20299
IP address blocks:        131.108.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:22:8b:28:eb:37:64:54:15:8b:68:da:50:60:08:fb:2a:68:b8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Jan  6 19:06:14 2026 GMT
            Not After : Jan  5 19:11:14 2027 GMT
        Subject: CN=9E64E3A35B8316F5279B20C8801A97080E41CACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d9:cb:cd:64:7e:3b:d7:bb:cc:83:39:05:cf:
                    bc:6d:c8:4b:d1:65:b0:3a:52:da:24:cb:7f:b7:05:
                    4c:26:24:d1:d7:5e:98:7f:7c:be:3b:aa:2b:74:c3:
                    33:75:7a:3e:d6:4a:d5:ad:c2:fc:7a:71:73:a5:08:
                    3f:50:fb:5b:ba:74:21:6f:43:c1:e7:db:c5:0e:1e:
                    f8:ca:25:f7:01:03:a8:2e:9d:02:39:23:59:47:0c:
                    0c:b3:2f:ed:44:ab:22:a6:85:8d:d3:8e:0d:7e:ee:
                    92:82:78:ef:02:37:87:15:02:d2:1b:b6:84:46:10:
                    67:27:93:fc:c4:4d:03:d6:ba:fb:38:c4:23:dc:c8:
                    e9:ed:16:14:03:9a:d4:4b:73:0c:08:be:4d:f5:29:
                    c0:e7:2b:f3:96:6a:74:f2:bc:65:fe:83:46:60:a2:
                    9b:90:74:d3:fb:65:ba:8e:7a:5f:a4:ff:98:d0:ef:
                    7d:37:72:06:19:fe:cd:85:86:a7:44:4a:67:0f:e9:
                    2c:a4:a9:d7:b8:0e:29:d7:f8:f5:0d:dc:8d:68:c2:
                    61:53:17:aa:8c:7a:77:5b:2f:a1:28:fa:a0:e8:81:
                    b7:b6:0f:ee:1c:37:99:d4:3d:8a:19:39:01:1f:e1:
                    ab:10:8a:45:f5:c4:ca:0d:cd:e3:2f:fc:fd:49:8c:
                    7f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:64:E3:A3:5B:83:16:F5:27:9B:20:C8:80:1A:97:08:0E:41:CA:CA
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3133312e3130382e33362e302f32322d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:db:3d:3e:95:64:9a:a7:76:72:70:97:ca:6a:ec:16:ba:67:
         53:3e:c8:e4:37:3d:64:f8:1f:d7:03:49:d4:03:af:59:08:f1:
         27:e3:0e:42:ea:d9:76:51:82:32:42:01:0a:52:0b:55:e0:f8:
         ea:cf:b3:81:fd:1d:ef:65:26:13:a0:28:a4:69:3e:77:fe:59:
         47:b2:8f:b7:af:13:64:02:ad:3d:7d:4e:c4:3d:e2:7d:bc:cd:
         6d:d0:46:8f:82:c1:e2:de:ed:46:fe:61:4f:e7:8f:02:32:4f:
         1e:87:33:02:ec:a0:99:85:5c:79:13:85:3d:0e:df:06:03:37:
         b0:86:95:3d:43:23:c7:2e:9f:68:08:27:c1:6d:66:ad:ab:ce:
         35:ae:23:e9:6f:d9:7d:77:cd:ef:e1:bd:00:b1:5d:3f:07:ad:
         1a:e6:e5:4a:f7:2c:57:0f:f6:43:6e:f1:f1:1b:ac:3f:6c:b6:
         d5:50:73:38:e8:24:c8:47:d2:d9:b9:88:40:b2:b0:bf:43:19:
         c5:46:ec:3f:cd:c2:10:24:db:61:22:1d:26:f0:e2:81:22:47:
         27:05:4a:1f:b4:12:ee:62:e0:dd:28:11:7a:0e:5f:55:b3:98:
         13:81:2c:86:f8:79:e9:5c:5f:4a:61:0c:1d:47:7d:1b:14:99:
         bd:4c:43:31
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBCKLKOs3ZFQVi2jaUGAI+ypouBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBNTUxMEM3RkNEOTY2RTAyNDg2RDMyNTcyQkY2QkNC
MUI4RkYyRTAeFw0yNjAxMDYxOTA2MTRaFw0yNzAxMDUxOTExMTRaMDMxMTAvBgNV
BAMTKDlFNjRFM0EzNUI4MzE2RjUyNzlCMjBDODgwMUE5NzA4MEU0MUNBQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg2cvNZH4717vMgzkFz7xtyEvR
ZbA6Utoky3+3BUwmJNHXXph/fL47qit0wzN1ej7WStWtwvx6cXOlCD9Q+1u6dCFv
Q8Hn28UOHvjKJfcBA6gunQI5I1lHDAyzL+1EqyKmhY3Tjg1+7pKCeO8CN4cVAtIb
toRGEGcnk/zETQPWuvs4xCPcyOntFhQDmtRLcwwIvk31KcDnK/OWanTyvGX+g0Zg
opuQdNP7ZbqOel+k/5jQ7303cgYZ/s2FhqdESmcP6Sykqde4DinX+PUN3I1owmFT
F6qMendbL6Eo+qDogbe2D+4cN5nUPYoZOQEf4asQikX1xMoNzeMv/P1JjH+jAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUnmTjo1uDFvUnmyDIgBqXCA5BysowHwYDVR0j
BBgwFoAU5aVRDH/Nlm4CSG0yVyv2vLG4/y4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MkU3MDg2ODkwNENFRTdCQUNDNDgzNzlBQTNGMkUyNjkz
QUUxMzI5MTQxMUM1OEYzMzlCNDI3RjMzMEE5OEJGLzAvRTVBNTUxMEM3RkNEOTY2
RTAyNDg2RDMyNTcyQkY2QkNCMUI4RkYyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUE1NTEwQzdGQ0Q5NjZFMDI0
ODZEMzI1NzJCRjZCQ0IxQjhGRjJFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTJFNzA4Njg5MDRDRUU3QkFDQzQ4Mzc5QUEzRjJFMjY5M0FFMTMyOTE0
MTFDNThGMzM5QjQyN0YzMzBBOThCRi8wLzMxMzMzMTJlMzEzMDM4MmUzMzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMDMyMzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoNsJDAN
BgkqhkiG9w0BAQsFAAOCAQEAINs9PpVkmqd2cnCXymrsFrpnUz7I5Dc9ZPgf1wNJ
1AOvWQjxJ+MOQurZdlGCMkIBClILVeD46s+zgf0d72UmE6AopGk+d/5ZR7KPt68T
ZAKtPX1OxD3ifbzNbdBGj4LB4t7tRv5hT+ePAjJPHoczAuygmYVceROFPQ7fBgM3
sIaVPUMjxy6faAgnwW1mravONa4j6W/ZfXfN7+G9ALFdPwetGublSvcsVw/2Q27x
8RusP2y21VBzOOgkyEfS2bmIQLKwv0MZxUbsP83CECTbYSIdJvDigSJHJwVKH7QS
7mLg3SgReg5fVbOYE4Eshvh56VxfSmEMHUd9GxSZvUxDMQ==
-----END CERTIFICATE-----
Generated at Fri Jan 23 16:45:28 2026 by rpki-client