This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3134302e34382e302f32302d3230203d3e2036333036.roa
File:                     3136312e3134302e34382e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          fdBXoaQcLDivLToJUqjETS4TDCEGGcZ/HyZRl3CADvU=
Subject key identifier:   10:E5:37:08:CE:10:A1:A0:02:EB:AA:61:64:1D:94:7D:3D:71:EA:A8
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       1635E8E5CE8EB465819D865EC1EED5E7E376245F
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3134302e34382e302f32302d3230203d3e2036333036.roa
Signing time:             Wed 28 Jan 2026 15:05:02 +0000
ROA not before:           Wed 28 Jan 2026 15:00:02 +0000
ROA not after:            Wed 27 Jan 2027 15:05:02 +0000
asID:                     6306
IP address blocks:        161.140.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:35:e8:e5:ce:8e:b4:65:81:9d:86:5e:c1:ee:d5:e7:e3:76:24:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan 28 15:00:02 2026 GMT
            Not After : Jan 27 15:05:02 2027 GMT
        Subject: CN=10E53708CE10A1A002EBAA61641D947D3D71EAA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0a:41:f0:25:11:08:c2:31:23:5b:c8:6c:17:
                    27:29:da:f7:d5:62:9c:66:ec:7f:f8:4c:54:9c:64:
                    9d:fe:8e:1f:c4:ef:61:c9:a6:26:92:e5:24:d3:c5:
                    c7:00:57:13:90:a5:f2:34:ad:e1:ad:50:73:30:84:
                    81:63:46:19:99:e6:30:87:4b:03:a6:a8:6e:61:2d:
                    ba:fa:ce:df:ac:25:00:e6:04:3b:6c:07:9f:0f:a6:
                    ea:81:8b:71:10:ad:b3:ad:e4:2f:2b:32:b6:69:83:
                    67:03:61:0f:cd:45:b2:a6:2e:5b:f6:5e:b1:35:cc:
                    8a:7f:ae:61:3e:b0:91:bd:9d:67:0d:2d:34:9b:32:
                    c1:66:d4:c8:c2:8e:c5:c4:03:e6:c1:a4:f9:26:a6:
                    66:38:b0:64:3a:bd:7f:23:16:56:53:27:7f:c1:0b:
                    72:d8:87:1f:60:39:6c:50:3c:a4:b3:4e:86:c1:16:
                    39:bd:9a:a0:80:f7:78:bb:49:e2:e7:4e:3c:93:29:
                    17:b6:98:4c:9b:a3:f2:68:26:29:0e:46:66:bf:6a:
                    41:27:60:11:2f:33:61:ab:b5:96:58:c5:a2:df:72:
                    78:08:bf:61:2e:29:21:c1:c1:bb:cc:61:fb:83:d2:
                    5b:7c:3d:d7:e8:e6:26:bf:c2:54:7d:45:9b:09:c7:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E5:37:08:CE:10:A1:A0:02:EB:AA:61:64:1D:94:7D:3D:71:EA:A8
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3136312e3134302e34382e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.140.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:4e:2a:8d:07:4f:a2:8e:c2:98:70:b7:a9:31:9e:e8:fc:7c:
         6d:85:9a:7a:9a:6f:ed:ce:80:86:99:f9:62:37:14:92:b4:c5:
         08:04:f3:f7:5a:3f:8e:88:14:7f:4c:e0:c7:24:2f:04:47:0e:
         98:83:b8:47:eb:38:74:1d:54:fe:ea:c2:2f:c4:ab:69:2d:8a:
         04:20:2f:ea:e8:43:b1:ae:10:cc:5f:0d:73:b9:86:51:69:90:
         6d:5a:9f:6a:85:73:4c:cd:72:47:28:aa:3c:01:aa:1e:39:38:
         dd:73:e8:a9:4f:73:5b:c0:82:64:a6:3b:70:72:7e:2e:70:91:
         58:96:4f:27:bb:12:c4:bd:d6:9f:1f:23:94:2a:64:76:dd:7f:
         03:75:2b:6d:5c:da:82:e5:fd:aa:9c:66:bf:4c:a5:61:3c:d4:
         4a:2f:e6:ab:7a:55:24:83:3a:52:e2:6f:d5:8f:49:d5:be:83:
         72:ef:47:cc:f5:76:c7:7b:d4:c5:fd:6d:b1:e2:b0:7b:8a:ae:
         3a:bf:30:32:83:50:d3:1c:f4:3e:aa:af:e8:ec:c4:47:9c:e3:
         42:2b:20:95:af:2f:8b:48:17:08:8e:4c:ec:7f:86:11:87:a5:
         33:66:08:e9:16:68:1a:89:67:b3:9e:2e:cc:06:b9:0d:a2:5b:
         ca:e0:40:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:18:12 2026 by rpki-client