This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36302e302f32342d3234203d3e203238343039.roa
File:                     3136382e3132312e36302e302f32342d3234203d3e203238343039.roa (raw, json)
Hash identifier:          Kg0nYE8KecDxrmXH+/hPxYKezeHiVYa74InnCSiaQLo=
Subject key identifier:   F4:AB:B4:F3:67:44:E5:7A:97:07:15:46:66:78:6A:E8:4A:9B:E4:FE
Certificate issuer:       /CN=913C600205F778BCEADE53F31FD3D65A46D53467
Certificate serial:       5BC298B1394FFE1CAA16CE31C15A900F1C1065E5
Authority key identifier: 91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36302e302f32342d3234203d3e203238343039.roa
Signing time:             Tue 06 Jan 2026 19:26:11 +0000
ROA not before:           Tue 06 Jan 2026 19:21:11 +0000
ROA not after:            Tue 05 Jan 2027 19:26:11 +0000
asID:                     28409
IP address blocks:        168.121.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 07:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c2:98:b1:39:4f:fe:1c:aa:16:ce:31:c1:5a:90:0f:1c:10:65:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913C600205F778BCEADE53F31FD3D65A46D53467
        Validity
            Not Before: Jan  6 19:21:11 2026 GMT
            Not After : Jan  5 19:26:11 2027 GMT
        Subject: CN=F4ABB4F36744E57A9707154666786AE84A9BE4FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:59:b5:9d:5f:a7:87:5f:f6:f4:8a:d8:06:f2:
                    ac:49:0b:36:83:72:4e:97:d3:0d:d8:a2:7f:9b:ec:
                    06:99:4b:6c:47:b9:ec:f1:8b:20:2b:58:e4:1f:06:
                    e9:07:f8:84:b6:2c:70:68:79:15:94:b7:c0:d4:eb:
                    34:7e:dd:67:60:1e:bb:d0:e8:23:9b:13:f7:22:56:
                    1b:55:35:c8:dc:76:85:c2:b7:b4:d3:68:3b:ae:bc:
                    5d:55:ba:a5:dc:95:a7:7d:05:29:54:80:be:cf:6c:
                    73:9c:b2:03:be:ee:89:16:4d:2e:b3:ab:48:a0:df:
                    ca:eb:94:0d:01:4d:c6:eb:69:df:e8:2d:e8:7c:35:
                    70:eb:5b:65:7a:35:e6:29:ed:6f:00:83:a1:f8:24:
                    4f:b9:be:1f:8d:ea:2d:16:0a:69:6f:6c:80:3b:5b:
                    90:8d:42:8a:76:3e:04:f3:59:3d:47:33:ea:53:a7:
                    a8:b4:54:b9:83:d9:98:50:d8:52:17:71:91:a3:99:
                    33:07:af:50:d0:82:55:23:c4:26:57:7e:9a:72:85:
                    40:e6:1d:a3:bd:2a:e1:fb:ed:1f:13:cc:38:b3:f5:
                    64:f6:fe:80:a6:17:fc:f2:9e:80:53:62:e5:20:62:
                    fb:b0:18:ce:90:16:2c:ed:83:cd:79:7a:8e:3d:72:
                    56:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AB:B4:F3:67:44:E5:7A:97:07:15:46:66:78:6A:E8:4A:9B:E4:FE
            X509v3 Authority Key Identifier:
                keyid:91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36302e302f32342d3234203d3e203238343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:ae:b8:95:d6:e6:74:05:b0:25:39:a8:2c:c3:c5:b3:2d:ad:
         c2:b6:38:43:9c:90:de:9d:e0:78:e1:5c:34:24:99:83:63:3f:
         f6:52:68:f2:39:cc:dd:4d:c8:39:fa:9e:88:de:7d:4c:21:a8:
         e1:5c:de:92:bb:74:c5:d3:89:8b:c4:5c:46:69:b7:79:59:2d:
         e7:a5:4c:55:9c:9c:70:70:33:a2:91:60:5d:9c:0c:9d:46:2f:
         c1:a0:91:9e:e3:63:c9:6e:2b:32:41:3e:c3:f9:bc:ae:60:5d:
         a5:81:4f:a1:06:1b:d3:f8:a5:41:00:14:f2:17:e3:be:1f:81:
         db:ff:80:c1:37:f0:ad:b7:ac:51:20:7d:90:7e:87:82:24:fe:
         03:e8:75:c6:64:76:22:f8:64:2f:16:23:69:60:6e:ff:f4:ee:
         e5:c3:43:5e:cc:03:00:bf:4c:e2:64:cc:d7:52:40:0d:42:ab:
         b2:b4:32:2e:c3:c0:dc:64:a8:93:a4:6a:3a:9d:9e:41:45:f3:
         2d:97:5c:ab:0d:3f:98:43:aa:ac:2d:d7:7f:47:85:28:71:57:
         da:ad:1d:50:58:02:6e:6a:1d:54:cb:af:32:d5:a9:f2:77:72:
         91:8e:85:b8:88:b7:6c:b5:1c:f9:8b:04:86:98:5e:93:68:dd:
         13:6a:42:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:16:21 2026 by rpki-client