This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D877E30D1FFF1010EC4A40BD1DD396C70B74BF32FB2C9D30397652606FB699F7/0/3133312e3136312e3232302e302f32322d3234203d3e20323730303439.roa
File:                     3133312e3136312e3232302e302f32322d3234203d3e20323730303439.roa (raw, json)
Hash identifier:          B0SLhZ2iU5No8RnMJwFjcs75c/gJ3L4WhWEL8lULdL0=
Subject key identifier:   C6:D3:CB:FB:6A:AB:2F:39:9C:64:E4:C3:99:F7:B1:9C:8C:4F:42:B7
Certificate issuer:       /CN=FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15
Certificate serial:       6C17AA9440FA54911C75DD4EC5F3D4FBE4CBDC18
Authority key identifier: FF:96:63:FE:43:D3:3F:28:F6:E1:EF:71:7F:EA:AD:D2:1E:1D:5E:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D877E30D1FFF1010EC4A40BD1DD396C70B74BF32FB2C9D30397652606FB699F7/0/3133312e3136312e3232302e302f32322d3234203d3e20323730303439.roa
Signing time:             Tue 06 Jan 2026 19:17:16 +0000
ROA not before:           Tue 06 Jan 2026 19:12:16 +0000
ROA not after:            Tue 05 Jan 2027 19:17:16 +0000
asID:                     270049
IP address blocks:        131.161.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D877E30D1FFF1010EC4A40BD1DD396C70B74BF32FB2C9D30397652606FB699F7/0/FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D877E30D1FFF1010EC4A40BD1DD396C70B74BF32FB2C9D30397652606FB699F7/0/FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:17:aa:94:40:fa:54:91:1c:75:dd:4e:c5:f3:d4:fb:e4:cb:dc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15
        Validity
            Not Before: Jan  6 19:12:16 2026 GMT
            Not After : Jan  5 19:17:16 2027 GMT
        Subject: CN=C6D3CBFB6AAB2F399C64E4C399F7B19C8C4F42B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:27:50:64:a5:e6:5b:67:35:03:5c:ba:0c:19:
                    01:bd:fc:43:c8:e0:35:de:b7:34:f6:e3:61:3e:2a:
                    0c:7c:70:50:0c:25:f2:87:5d:92:ae:0a:38:c8:41:
                    d4:b5:85:00:06:56:ec:23:d0:b3:85:8f:d3:b5:d9:
                    a1:ec:36:11:df:de:fa:0a:e5:47:e6:98:bb:de:7c:
                    22:c5:0d:5e:90:ae:7a:cb:f3:1b:62:58:13:4d:89:
                    32:70:92:0f:fe:29:2d:4a:e3:78:cd:a9:a8:8b:d5:
                    16:e8:17:ef:78:22:1d:a6:2b:13:3e:4a:5e:d8:e2:
                    4f:f8:81:23:2e:b0:44:66:50:90:1b:62:40:60:fb:
                    c0:0d:d5:49:87:88:57:c4:af:01:16:88:49:a7:4e:
                    0a:a8:7e:05:5c:f0:07:66:0b:cf:93:01:80:d6:23:
                    d3:6b:3a:4f:d0:b7:f7:42:8f:a6:b6:a1:71:01:33:
                    99:c7:32:f6:2b:96:31:d1:ed:2e:1c:eb:cf:01:f7:
                    14:3e:60:d1:67:db:d9:96:94:b0:db:4a:14:04:2b:
                    b1:8e:f0:04:56:d8:12:fe:80:34:bb:ef:cc:b5:09:
                    25:02:2a:1b:40:d9:f5:22:3e:c4:fa:46:ae:2b:a7:
                    c0:ee:f6:75:01:0d:4f:d1:7e:9d:88:d8:2c:14:07:
                    e6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D3:CB:FB:6A:AB:2F:39:9C:64:E4:C3:99:F7:B1:9C:8C:4F:42:B7
            X509v3 Authority Key Identifier:
                keyid:FF:96:63:FE:43:D3:3F:28:F6:E1:EF:71:7F:EA:AD:D2:1E:1D:5E:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D877E30D1FFF1010EC4A40BD1DD396C70B74BF32FB2C9D30397652606FB699F7/0/FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF9663FE43D33F28F6E1EF717FEAADD21E1D5E15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D877E30D1FFF1010EC4A40BD1DD396C70B74BF32FB2C9D30397652606FB699F7/0/3133312e3136312e3232302e302f32322d3234203d3e20323730303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:18:c3:e9:8c:e6:37:6d:d6:7f:27:70:d6:31:37:df:56:9f:
         b7:62:35:d8:ad:b5:96:35:15:e5:63:3d:d1:91:a7:ff:81:11:
         e9:99:52:ec:50:2d:11:e7:39:e7:a5:b5:3f:43:ac:3c:79:aa:
         f5:56:f0:78:84:2d:05:19:a0:bd:de:1f:7e:1d:28:8e:f1:35:
         d9:c8:d1:89:ff:bb:02:67:40:47:83:ea:bc:b8:c7:a8:3d:ec:
         ab:4b:46:01:4f:c5:15:09:66:bc:56:03:e9:a7:f3:92:ed:3f:
         4d:99:88:3d:ee:11:5c:95:f5:cd:db:0c:31:32:38:8a:bb:a1:
         75:9a:1e:5f:8a:3a:e4:4a:1d:49:ac:02:c2:38:c9:3e:67:a0:
         92:d9:9e:9a:33:86:35:3b:b0:d2:1b:21:62:b1:ed:89:4a:f9:
         45:5d:af:74:6d:f1:f4:8d:97:21:09:48:7f:64:47:18:33:fd:
         ba:1c:1f:a0:aa:35:b3:e9:eb:8c:ef:22:40:33:4d:bc:21:09:
         a4:17:72:f8:7e:d4:8b:c8:a1:c0:fc:a9:4f:c0:cf:49:3d:21:
         15:c2:87:73:97:83:d9:bb:54:34:d5:27:bf:19:5b:fb:cf:2b:
         eb:6f:86:30:28:f8:78:8b:dc:44:61:b2:ac:66:d8:75:c3:9c:
         be:1f:e1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 24 13:11:27 2026 by rpki-client