This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3134302e3131322e302f32302d3230203d3e2036333036.roa
File:                     3136312e3134302e3131322e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          AukKq34IVVY4NXAfWQYysSO4B402a14BVGgiRChwGHo=
Subject key identifier:   8E:F6:3C:27:4C:02:2C:F8:15:D0:72:AD:4A:D2:3A:94:1E:E2:CF:2C
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       51774C22F9D1A04349947099C9D46A545C9AC30A
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3134302e3131322e302f32302d3230203d3e2036333036.roa
Signing time:             Wed 28 Jan 2026 15:05:01 +0000
ROA not before:           Wed 28 Jan 2026 15:00:01 +0000
ROA not after:            Wed 27 Jan 2027 15:05:01 +0000
asID:                     6306
IP address blocks:        161.140.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:77:4c:22:f9:d1:a0:43:49:94:70:99:c9:d4:6a:54:5c:9a:c3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan 28 15:00:01 2026 GMT
            Not After : Jan 27 15:05:01 2027 GMT
        Subject: CN=8EF63C274C022CF815D072AD4AD23A941EE2CF2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:74:a8:5c:b7:7d:5f:9e:6a:2d:c0:d8:55:7f:
                    57:b3:34:31:22:fc:27:fc:52:0b:69:3d:31:59:14:
                    67:04:c6:fe:59:35:b4:a4:9f:5d:ba:28:79:1c:12:
                    94:14:df:f9:1b:df:02:43:f7:ce:2c:45:78:63:05:
                    85:c5:1d:f9:5f:b3:81:4c:08:45:c6:c8:8e:c5:fa:
                    ce:37:1f:d3:bc:9b:cc:9e:d9:02:a2:49:9e:74:54:
                    97:fd:a6:46:db:96:d2:13:9d:03:a6:8c:ef:4a:4e:
                    63:40:35:31:e8:dc:24:c9:be:dd:f4:2b:bb:ab:66:
                    a7:78:b9:83:eb:9a:c8:ea:39:dd:61:0e:4a:c3:bb:
                    74:22:0b:b1:bf:28:64:1a:29:c0:5f:1c:e6:41:bf:
                    60:6d:40:3e:06:b9:56:cd:1d:4d:05:16:91:b4:a8:
                    e2:f4:9a:8a:aa:9c:e5:7f:50:ee:ca:45:e6:95:64:
                    07:08:70:5a:c6:27:79:1a:7c:8a:df:13:9c:2f:5c:
                    58:8d:55:ea:9c:02:3a:8d:89:9c:4a:19:1d:d4:d0:
                    52:28:e6:79:be:2d:4f:71:18:10:83:e9:a7:76:0b:
                    0e:e3:4d:0d:17:be:aa:0c:8c:a7:f5:e0:1a:2b:fc:
                    4c:f0:5b:c8:62:f8:85:fb:62:49:41:be:85:11:85:
                    1f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F6:3C:27:4C:02:2C:F8:15:D0:72:AD:4A:D2:3A:94:1E:E2:CF:2C
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3134302e3131322e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.140.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b5:53:60:9a:74:34:0d:70:0f:87:e0:30:c7:f7:37:ab:5b:e7:
         d3:16:82:51:5c:90:88:22:eb:55:e5:c6:7e:ef:a7:67:a3:1c:
         b0:b4:62:b7:4e:77:84:2c:72:44:ca:08:08:3d:fd:49:3b:76:
         a7:fe:97:95:dc:92:82:82:88:c2:dc:7e:9f:1e:9b:5e:0d:b2:
         0a:d9:d4:6e:29:46:83:a6:c7:80:c0:ee:d6:19:10:ff:f4:55:
         fb:dc:aa:88:27:c8:6d:13:fb:4c:15:c3:8e:e8:9b:72:70:48:
         35:61:67:3a:c9:42:41:8a:a6:77:84:23:c3:ba:17:ad:94:0b:
         cc:ba:5e:cf:16:8a:e0:a9:d6:13:5e:94:63:8a:5e:2d:78:9a:
         3a:3e:d5:ca:ef:eb:5d:d4:8a:1d:bd:c4:18:7a:e2:a4:c5:41:
         a8:37:ca:7d:a1:8b:1c:30:7a:2e:20:e3:df:9c:e9:77:7e:f9:
         f2:bb:f6:5b:42:f3:4d:e7:17:ae:67:76:5f:09:ec:7c:eb:1e:
         c7:cc:a0:4d:f3:c8:20:29:5b:8d:c2:ed:aa:0e:49:c3:0a:be:
         bc:7f:15:5d:6a:a6:ed:0b:11:60:e8:7a:05:15:94:90:0d:c3:
         3a:f3:00:f3:58:47:fe:7a:8f:8c:03:ec:9f:12:55:50:55:54:
         2d:b9:6a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:18:12 2026 by rpki-client