This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3135372e302e302f31362d3234203d3e203139393035.roa
File:                     3133322e3135372e302e302f31362d3234203d3e203139393035.roa (raw, json)
Hash identifier:          l6bWsP+HOXnvIILwuF6H2GV1IdRRXNqxFLAe1G6Fdp0=
Subject key identifier:   FA:68:78:BB:D0:18:25:E8:19:99:71:0A:5E:C3:99:54:B3:D1:8C:73
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       092F227AC4D074213F692C51DD9E836D1B112754
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3135372e302e302f31362d3234203d3e203139393035.roa
Signing time:             Tue 06 Jan 2026 19:14:18 +0000
ROA not before:           Tue 06 Jan 2026 19:09:18 +0000
ROA not after:            Tue 05 Jan 2027 19:14:18 +0000
asID:                     19905
IP address blocks:        132.157.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Feb 2026 16:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2f:22:7a:c4:d0:74:21:3f:69:2c:51:dd:9e:83:6d:1b:11:27:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Jan  6 19:09:18 2026 GMT
            Not After : Jan  5 19:14:18 2027 GMT
        Subject: CN=FA6878BBD01825E81999710A5EC39954B3D18C73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a5:99:24:03:e0:8a:a0:c4:80:48:4c:54:d0:
                    54:d5:aa:69:21:11:29:88:38:11:74:f8:84:77:70:
                    80:a5:22:15:14:a1:35:f3:e6:bd:b5:cf:2a:92:06:
                    c8:12:2e:a6:ef:0b:d2:77:60:01:72:a9:9f:55:c0:
                    66:dd:00:12:b3:1c:35:bb:69:81:26:e3:97:2d:fa:
                    97:06:e8:05:0f:27:8d:26:62:4c:34:51:79:7e:c3:
                    56:a4:cf:06:72:7d:ea:13:3a:97:0e:3a:c9:3d:ba:
                    cb:ea:8b:6e:0f:ed:e3:b1:11:0b:f7:dc:68:11:5b:
                    ed:90:f5:84:f1:3c:d9:84:ce:23:74:9e:92:90:f8:
                    e9:b7:a1:7e:f8:6d:6c:03:77:28:28:0f:8d:69:fa:
                    36:4c:5a:41:c6:6f:21:06:35:c8:40:44:cd:0a:a6:
                    f8:ac:c3:b6:b9:53:ac:8a:e4:45:24:01:56:44:8d:
                    ee:e7:a1:dd:23:90:5b:b9:8c:5c:4e:b8:1f:d0:e6:
                    16:d2:ab:75:81:0f:1e:3a:4e:3c:ed:80:82:ae:88:
                    2a:69:92:d3:52:15:73:78:ed:d5:8b:a4:60:6f:56:
                    95:ca:8e:bd:42:08:8b:20:b9:f9:d3:30:7c:a5:78:
                    ee:7b:1e:a0:c9:ca:57:97:f9:f0:0e:66:58:b0:d9:
                    f3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:68:78:BB:D0:18:25:E8:19:99:71:0A:5E:C3:99:54:B3:D1:8C:73
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3135372e302e302f31362d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.157.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         72:c1:00:f0:41:0b:e4:b6:6f:fa:f6:75:2f:97:5a:38:4c:ca:
         18:7f:29:6a:fb:21:93:1b:fb:b5:aa:95:aa:68:21:c1:67:58:
         1b:8f:1d:70:21:a4:8d:34:04:e4:87:91:03:28:2d:bf:3d:c9:
         73:be:37:35:a0:db:1f:0b:fa:06:d3:28:83:ff:a3:96:35:71:
         4f:90:62:31:38:bb:c9:22:a3:a4:c0:0c:4c:0f:78:02:d4:55:
         20:f8:8a:46:c6:45:f3:35:d2:63:b6:4f:d2:7e:e4:8e:00:a7:
         6b:f1:19:ae:3d:73:3c:71:04:83:db:59:e7:3d:c2:eb:e0:2f:
         f8:70:f0:5f:8d:26:c2:69:97:9c:2d:62:21:9e:a9:b6:b1:b0:
         c5:0d:4c:f2:94:1e:be:4d:68:7e:76:3d:f0:11:a5:4c:7d:16:
         27:c6:f4:be:88:3c:68:db:40:a8:85:5e:a8:f0:33:90:a1:22:
         e0:8b:d5:1c:65:f7:6a:26:6e:a6:c5:92:dd:1b:30:bc:25:43:
         ce:17:7f:21:9c:5c:29:51:3c:cf:bb:93:1d:02:de:fe:26:d8:
         c3:c9:47:83:25:de:ba:01:84:01:d2:0c:f4:4b:d1:db:c5:87:
         00:72:ec:bb:c3:41:23:ec:30:80:20:26:92:9c:f4:0e:19:52:
         85:b5:a1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 11:52:39 2026 by rpki-client