This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3136382e3230352e3230342e302f32322d3234203d3e203631343636.roa
File:                     3136382e3230352e3230342e302f32322d3234203d3e203631343636.roa (raw, json)
Hash identifier:          tjVzeqUwhp6O/Nq91ngwJBDCQ5e9hcAy2FlJGppgFu8=
Subject key identifier:   78:C2:25:2B:E6:24:60:26:C5:2B:20:D7:DA:C2:5D:07:9C:02:35:CB
Certificate issuer:       /CN=B3AC8703592539ADD492A1BDC08E997B67459567
Certificate serial:       51ECBA799B9FAEDEE1E91F24B0B5CA19DAB93FA6
Authority key identifier: B3:AC:87:03:59:25:39:AD:D4:92:A1:BD:C0:8E:99:7B:67:45:95:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3136382e3230352e3230342e302f32322d3234203d3e203631343636.roa
Signing time:             Tue 06 Jan 2026 19:20:30 +0000
ROA not before:           Tue 06 Jan 2026 19:15:30 +0000
ROA not after:            Tue 05 Jan 2027 19:20:30 +0000
asID:                     61466
IP address blocks:        168.205.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ec:ba:79:9b:9f:ae:de:e1:e9:1f:24:b0:b5:ca:19:da:b9:3f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3AC8703592539ADD492A1BDC08E997B67459567
        Validity
            Not Before: Jan  6 19:15:30 2026 GMT
            Not After : Jan  5 19:20:30 2027 GMT
        Subject: CN=78C2252BE6246026C52B20D7DAC25D079C0235CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bd:ba:23:c0:f0:1f:67:d5:9c:2c:76:de:56:
                    08:0a:1b:d5:df:94:9f:0a:ea:52:b8:8d:e0:e5:43:
                    07:88:c9:58:7c:85:f0:2a:e6:9a:b9:fc:52:29:f0:
                    31:79:0f:b4:18:8a:30:d1:92:f0:23:eb:12:ac:8b:
                    d4:0a:8f:4f:cf:1e:39:54:00:64:02:f5:f5:d0:79:
                    9f:42:c9:7c:a6:67:e6:d1:64:ba:c7:0e:ff:c4:32:
                    42:43:16:b0:94:71:51:56:1c:f8:70:5e:54:5d:59:
                    b1:60:5f:a0:0f:d2:66:f1:95:0e:60:a1:5f:d6:d3:
                    12:be:93:f5:99:05:e0:43:1a:14:ee:d9:47:47:22:
                    12:81:91:01:1a:49:36:71:84:0d:66:94:71:38:39:
                    7b:19:3b:e4:30:c6:21:c3:ad:97:2a:2c:77:e4:89:
                    bb:a7:0e:a4:e2:03:1a:cd:13:20:3e:c2:3d:09:c6:
                    8f:f9:61:21:cb:ef:ef:df:ac:0f:0d:d9:a3:e1:48:
                    c8:51:3a:59:81:31:e1:1f:fc:8d:4a:62:fa:13:67:
                    df:7c:d5:73:ac:10:62:55:0c:54:79:e4:16:45:a9:
                    c4:38:95:89:f0:4b:08:f8:4a:3d:ab:6b:e6:45:9b:
                    5f:a4:83:16:5b:2d:3b:0b:22:22:01:5b:8f:40:94:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C2:25:2B:E6:24:60:26:C5:2B:20:D7:DA:C2:5D:07:9C:02:35:CB
            X509v3 Authority Key Identifier:
                keyid:B3:AC:87:03:59:25:39:AD:D4:92:A1:BD:C0:8E:99:7B:67:45:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3136382e3230352e3230342e302f32322d3234203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:25:a7:6e:03:d5:1a:50:5f:45:ef:0c:45:e8:92:e4:7a:0a:
         ad:13:88:bc:95:a4:3c:2a:f3:27:7b:95:28:39:13:2f:62:d1:
         de:89:34:72:27:65:c3:86:36:87:01:c2:ca:e4:ea:03:b6:c2:
         2e:df:3d:18:53:fb:74:f0:9b:73:44:fd:4a:86:9e:a1:fc:6d:
         bc:02:78:96:7c:9c:8a:f0:ae:26:9f:3b:1d:e4:c4:82:02:08:
         a8:4f:ff:1d:54:5c:96:1b:ca:3b:dc:d1:a1:70:0a:f6:ca:26:
         45:e8:66:ba:25:9f:7c:ae:c2:07:36:97:50:73:cb:43:36:28:
         f8:c6:00:cb:af:aa:80:7e:e5:2c:4b:80:6a:21:f4:80:06:0b:
         63:c8:a1:ba:a8:9c:93:6f:08:b0:a7:6e:82:d2:db:3b:d6:e7:
         e0:f9:de:33:71:be:9b:85:83:aa:05:ea:d3:b9:e5:dd:36:20:
         37:8b:12:99:32:1d:fb:8c:49:d8:d6:96:a6:38:3e:ac:1b:28:
         51:cf:71:f6:f3:9b:99:2a:0f:02:cc:f1:a2:01:15:7a:c8:8c:
         a8:ac:c5:06:dd:08:28:b8:c6:57:f7:ef:e6:ac:94:d1:30:bb:
         ef:9f:ae:20:8a:96:d9:e8:31:52:4a:a1:ca:9f:c9:ca:c1:b0:
         33:af:51:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:31:54 2026 by rpki-client