This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131392e302f32342d3234203d3e203237373733.roa
File:                     3136382e3234332e3131392e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          TclS/gEHoGGPMJcQ/qAE5Amm/4fvUoQhdvgUm+v3Ihc=
Subject key identifier:   54:7F:19:D6:17:EF:42:DD:7C:05:8F:9C:75:2E:CF:5A:63:0A:74:22
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       5FADE6C148DCFBD951B53A1A7A48A6AD91F41415
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131392e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 19:16:28 +0000
ROA not before:           Tue 06 Jan 2026 19:11:28 +0000
ROA not after:            Tue 05 Jan 2027 19:16:28 +0000
asID:                     27773
IP address blocks:        168.243.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 03:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ad:e6:c1:48:dc:fb:d9:51:b5:3a:1a:7a:48:a6:ad:91:f4:14:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Jan  6 19:11:28 2026 GMT
            Not After : Jan  5 19:16:28 2027 GMT
        Subject: CN=547F19D617EF42DD7C058F9C752ECF5A630A7422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:6c:8e:d0:56:23:b6:a1:de:e7:5c:9a:f8:
                    0a:43:fc:92:46:0a:0a:8d:ef:24:32:7e:e4:6e:df:
                    c8:48:f6:55:c1:55:68:31:47:c8:9d:dd:19:16:5a:
                    c9:a7:54:43:eb:65:83:f0:73:5c:26:b7:e6:40:e3:
                    2b:85:33:c6:45:c0:2d:b6:91:82:aa:24:48:3b:74:
                    cd:bf:7d:ec:91:12:74:b6:80:1c:44:d5:53:55:45:
                    58:36:1d:8a:6f:24:d4:af:1d:90:2e:fd:64:0b:ad:
                    ec:e7:44:de:b3:cb:99:fb:b5:aa:ec:e3:0a:88:77:
                    52:82:60:eb:f2:5b:7b:28:6d:f0:e7:64:e7:4f:95:
                    46:b4:3f:1f:c7:a0:b7:83:43:42:46:d9:75:e6:c6:
                    54:3a:a6:a7:bb:b3:c9:2d:21:c2:d7:03:f1:b9:53:
                    88:0c:36:16:e7:66:a1:1e:59:39:d1:0a:c4:e5:bc:
                    4b:a9:6b:86:7b:eb:cd:66:f2:82:24:3c:a8:0a:3d:
                    09:50:17:b9:85:b9:16:7f:3a:1c:df:c7:4f:33:13:
                    78:1c:b8:f1:5e:17:e0:7f:d6:43:0b:bb:2f:05:c8:
                    cb:85:78:5d:46:2a:4b:92:65:fd:8b:b5:00:2c:10:
                    33:83:cd:17:b6:2f:23:4e:6b:89:81:5a:42:01:6d:
                    98:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7F:19:D6:17:EF:42:DD:7C:05:8F:9C:75:2E:CF:5A:63:0A:74:22
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131392e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:66:96:da:43:2f:21:0f:e9:e1:0d:dd:00:81:19:1b:f5:86:
         10:25:46:ec:fe:ba:eb:c5:49:ca:a8:c9:35:f3:15:bc:d9:7c:
         5e:d4:9b:0d:0d:79:26:f6:13:dc:3c:96:91:b2:cb:28:7e:a1:
         9a:f4:b5:b4:ef:f5:37:f0:3d:96:76:fc:1f:f5:42:bb:41:6e:
         d4:82:71:76:48:43:32:84:6e:1c:2c:80:b6:25:ea:b0:59:df:
         dd:5a:f4:c8:0c:dd:47:6e:01:f1:e5:89:37:32:aa:7c:58:d7:
         42:ea:2a:bf:cd:d2:5c:15:d0:ac:82:43:79:44:b1:f6:eb:bf:
         08:b2:c5:54:b9:61:b9:57:2a:0e:94:95:65:95:c9:d9:a5:12:
         64:12:04:b3:98:d2:e1:3e:4b:9e:61:27:a8:76:bd:e1:da:5c:
         03:d6:46:9c:cf:65:5e:b8:42:a2:dd:0e:92:fc:df:53:bc:db:
         e9:29:0e:d4:58:41:84:bd:06:0d:22:99:e5:66:dd:ef:f6:35:
         37:a4:a1:43:8f:fe:1e:da:aa:10:d0:99:60:9d:28:97:b0:29:
         7c:06:0e:06:ff:f5:7d:94:95:17:41:ec:84:6d:b3:77:bb:ae:
         fc:6b:c1:30:0a:de:54:c6:89:2d:bc:38:ed:9d:4e:54:b4:01:
         15:d0:56:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:08:41 2026 by rpki-client