This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3136382e3139342e3138302e302f32322d3234203d3e203237373437.roa
File:                     3136382e3139342e3138302e302f32322d3234203d3e203237373437.roa (raw, json)
Hash identifier:          GXjj+XaaJK4CMNicU+NhCjFzQ17YRriLaTB/46iDxrU=
Subject key identifier:   3C:74:61:70:3D:7A:4E:3E:FF:8C:5C:E2:92:6C:F4:53:7B:E4:1A:D2
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       6D75516C63EE33213171844C6717A9197F9D0E61
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3136382e3139342e3138302e302f32322d3234203d3e203237373437.roa
Signing time:             Tue 06 Jan 2026 19:29:00 +0000
ROA not before:           Tue 06 Jan 2026 19:24:00 +0000
ROA not after:            Tue 05 Jan 2027 19:29:00 +0000
asID:                     27747
IP address blocks:        168.194.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:75:51:6c:63:ee:33:21:31:71:84:4c:67:17:a9:19:7f:9d:0e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Jan  6 19:24:00 2026 GMT
            Not After : Jan  5 19:29:00 2027 GMT
        Subject: CN=3C7461703D7A4E3EFF8C5CE2926CF4537BE41AD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:d6:b0:b1:48:c9:c1:0c:4a:96:03:29:65:
                    50:91:3d:21:9f:0d:0a:73:c5:aa:26:b9:1d:fc:ea:
                    d1:98:23:20:f9:f9:03:b8:52:b7:b6:83:16:a1:8d:
                    d9:a1:67:28:d3:07:f4:f5:90:b1:35:b4:58:16:12:
                    3d:e0:07:76:9b:21:f8:7d:4c:ba:6e:49:59:1e:e9:
                    57:91:ae:94:68:7d:b3:89:4a:df:a1:0b:9f:76:e0:
                    c4:08:8e:c9:1a:2c:7f:1b:bb:64:99:a5:83:d3:d3:
                    42:10:29:48:e7:4a:5a:1e:e7:1c:69:7a:36:06:e8:
                    fd:a8:a8:e6:a4:53:5c:7f:f0:74:cb:c8:44:14:d2:
                    b0:75:0e:db:2d:db:12:dc:79:b2:ea:03:59:96:f5:
                    97:b6:86:6c:e9:e0:80:27:3d:7f:77:25:99:f2:16:
                    06:86:82:70:4b:20:98:11:b4:97:7e:01:89:de:dc:
                    71:93:e2:cf:2e:45:80:76:2b:5f:28:f1:3b:fa:37:
                    b9:b5:84:bb:1b:6e:92:58:ae:7a:3a:a8:a6:48:ac:
                    06:5e:48:d1:e8:34:e6:4a:50:ff:7d:90:48:43:17:
                    b5:ee:d4:5b:31:fb:6a:7f:d4:31:aa:75:9b:93:5d:
                    ca:3d:4e:a5:7f:d8:be:2f:95:d1:f0:7d:24:5a:18:
                    82:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:74:61:70:3D:7A:4E:3E:FF:8C:5C:E2:92:6C:F4:53:7B:E4:1A:D2
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3136382e3139342e3138302e302f32322d3234203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:37:7b:b3:a1:65:31:8e:a8:83:25:0a:dd:d2:76:d1:25:4b:
         09:b4:c6:cb:08:a2:5a:fe:6a:10:6e:20:01:40:c1:26:f8:dd:
         f6:c3:4d:a2:00:7c:d8:54:a6:4f:61:9b:cd:48:9f:e3:ab:e5:
         29:39:99:77:ae:1e:27:19:ea:9d:2f:f4:06:ff:d0:a0:4f:32:
         27:df:ec:53:6c:83:92:d6:dc:38:3e:b3:04:06:88:23:a1:0a:
         41:fe:03:7e:ea:a9:66:13:a8:6a:8e:dc:f9:4f:ef:d7:c0:9c:
         49:c8:53:ca:ef:13:22:d2:1e:2c:db:f5:74:63:38:ed:6b:c9:
         3d:8a:82:4a:e4:c2:aa:56:d2:a7:a4:88:dd:7c:2c:19:b6:b6:
         4c:be:94:3b:7c:05:dd:2a:0b:9e:55:57:4f:9e:b5:61:de:51:
         97:06:6c:85:f5:a7:6c:da:78:3e:28:ca:ab:f2:b1:4c:62:66:
         d8:8c:fe:42:57:42:e1:e3:7a:18:d8:10:0f:8b:31:6e:14:44:
         45:20:b8:7a:08:90:de:55:1d:b5:fc:ac:48:b9:2e:a5:d1:f1:
         a0:61:85:79:7c:6a:18:30:c7:85:66:ad:0d:71:04:63:88:c0:
         67:78:08:8d:30:30:de:92:a4:92:96:ee:36:f0:67:a1:63:31:
         a9:77:ef:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:29:48 2026 by rpki-client