This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/3134332e302e3130382e302f32322d3232203d3e203138373437.roa
File:                     3134332e302e3130382e302f32322d3232203d3e203138373437.roa (raw, json)
Hash identifier:          PzF2kz1UfacwhUZlYQEoyLWxs3KWNAARAy8qn9yEaQo=
Subject key identifier:   8C:CC:BB:70:16:0E:A5:8F:4B:06:53:E8:05:9A:DB:CA:73:F1:61:0A
Certificate issuer:       /CN=E5AE7BFB852947BC2524209953A000E85EF4362B
Certificate serial:       35AD7B1EA18D5A2A373C49CA1C2D30B257C7AA2E
Authority key identifier: E5:AE:7B:FB:85:29:47:BC:25:24:20:99:53:A0:00:E8:5E:F4:36:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/3134332e302e3130382e302f32322d3232203d3e203138373437.roa
Signing time:             Fri 16 Jan 2026 00:00:46 +0000
ROA not before:           Thu 15 Jan 2026 23:55:46 +0000
ROA not after:            Fri 15 Jan 2027 00:00:46 +0000
asID:                     18747
IP address blocks:        143.0.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/E5AE7BFB852947BC2524209953A000E85EF4362B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/E5AE7BFB852947BC2524209953A000E85EF4362B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Feb 2026 21:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ad:7b:1e:a1:8d:5a:2a:37:3c:49:ca:1c:2d:30:b2:57:c7:aa:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5AE7BFB852947BC2524209953A000E85EF4362B
        Validity
            Not Before: Jan 15 23:55:46 2026 GMT
            Not After : Jan 15 00:00:46 2027 GMT
        Subject: CN=8CCCBB70160EA58F4B0653E8059ADBCA73F1610A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:1b:cd:45:b6:94:93:8c:52:a7:3d:2e:2f:
                    6f:1e:a9:76:24:0e:08:e7:d0:6c:f7:61:a4:0d:b3:
                    fd:81:f2:d6:df:ba:1c:2c:89:92:3a:73:0e:00:f5:
                    49:f3:86:50:95:9f:cc:d6:cd:c7:a3:96:0f:21:6d:
                    f0:4d:20:90:67:ee:b9:57:d7:3d:fa:76:06:e3:0a:
                    d2:17:53:e0:f9:11:f8:a1:f8:88:54:ba:a9:ad:44:
                    65:79:0a:7c:16:31:e7:56:24:05:8f:a2:02:4e:c7:
                    85:a6:b7:7d:ca:36:83:63:7e:8c:a3:96:54:fb:e0:
                    c2:a6:9f:4a:72:e2:d4:5c:1d:72:46:b6:2a:30:12:
                    ef:f2:46:e0:ac:c5:65:38:d7:85:c8:7a:a0:82:81:
                    c7:7a:44:78:37:ae:2d:45:d6:7e:83:ea:09:bb:91:
                    07:42:d4:7b:18:3a:ef:98:0a:1a:cd:62:1b:3d:1b:
                    32:45:1d:41:c5:a5:5f:b8:44:c1:72:81:06:86:4e:
                    df:db:a3:5d:36:a1:6d:41:33:e9:85:27:4a:e7:93:
                    17:50:0c:1f:79:2f:9b:a0:fd:f2:d3:d6:17:90:d3:
                    58:dd:8f:ce:0f:c2:69:19:26:5c:ee:7f:2d:3d:a6:
                    47:16:3f:82:d0:66:ec:7c:b9:38:92:9d:61:32:d4:
                    f4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CC:BB:70:16:0E:A5:8F:4B:06:53:E8:05:9A:DB:CA:73:F1:61:0A
            X509v3 Authority Key Identifier:
                keyid:E5:AE:7B:FB:85:29:47:BC:25:24:20:99:53:A0:00:E8:5E:F4:36:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/E5AE7BFB852947BC2524209953A000E85EF4362B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/3134332e302e3130382e302f32322d3232203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:ea:de:01:a8:46:88:4a:d3:0f:de:24:ce:70:83:c8:6a:85:
         e1:3b:8c:31:e6:15:c1:ed:af:11:86:32:bd:d3:45:21:c4:1f:
         eb:8c:88:bd:91:7d:0e:4c:78:35:d6:f8:bf:75:42:c8:40:aa:
         9d:ef:5a:6c:af:7e:9f:97:be:d2:90:3e:6b:12:6a:0a:5f:9f:
         3f:9a:01:5c:12:ba:a0:b0:42:52:2d:a3:b6:ba:b5:5a:37:7b:
         42:5a:56:5d:32:61:af:e0:79:49:6a:df:e1:0f:0f:39:f3:cc:
         07:26:6a:b1:1e:db:1e:62:6d:67:2d:c9:8d:2a:6e:b3:30:4e:
         1f:59:d9:51:87:75:77:88:f9:1c:48:0b:7e:db:45:4a:21:5f:
         c0:8d:05:99:97:51:33:6d:ac:6b:db:22:d9:35:15:98:38:9f:
         9d:63:43:ee:d8:66:c8:57:e0:60:37:22:c5:75:2f:af:09:b5:
         58:8b:be:2d:c0:c1:7a:99:d6:1a:f3:3c:0e:cb:f7:d5:bd:b2:
         63:d2:18:9c:d7:f3:ec:d2:de:f9:ac:f8:20:90:88:ff:de:13:
         cc:fa:f4:9a:2f:b9:34:a1:7d:c4:18:22:41:3b:b8:f0:7f:4c:
         e7:c0:ec:6e:9c:eb:c8:a1:ab:51:af:d6:c0:a5:68:ee:d1:00:
         88:a1:e3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 00:17:09 2026 by rpki-client