This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/3136382e3230352e3132302e302f32322d3234203d3e20323634363739.roa
File:                     3136382e3230352e3132302e302f32322d3234203d3e20323634363739.roa (raw, json)
Hash identifier:          U+TnT/xJGJ25M7XG0v0FLNdv8eTtTqwAK0cJzLb7rUk=
Subject key identifier:   87:52:FC:03:C1:09:67:3F:0A:8F:7E:13:FF:D0:5F:4E:34:8E:F0:1F
Certificate issuer:       /CN=5506AF01F36FB1CE1124E8FE845AB28B7A0834AE
Certificate serial:       63FEAE5476153F69663BBFCDBD54215A0B427E05
Authority key identifier: 55:06:AF:01:F3:6F:B1:CE:11:24:E8:FE:84:5A:B2:8B:7A:08:34:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/3136382e3230352e3132302e302f32322d3234203d3e20323634363739.roa
Signing time:             Tue 06 Jan 2026 20:48:23 +0000
ROA not before:           Tue 06 Jan 2026 20:43:23 +0000
ROA not after:            Tue 05 Jan 2027 20:48:23 +0000
asID:                     264679
IP address blocks:        168.205.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Jan 2026 20:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fe:ae:54:76:15:3f:69:66:3b:bf:cd:bd:54:21:5a:0b:42:7e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5506AF01F36FB1CE1124E8FE845AB28B7A0834AE
        Validity
            Not Before: Jan  6 20:43:23 2026 GMT
            Not After : Jan  5 20:48:23 2027 GMT
        Subject: CN=8752FC03C109673F0A8F7E13FFD05F4E348EF01F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:7b:da:2b:2f:31:a4:79:49:0b:72:c0:ab:
                    ee:fe:f8:26:d1:a1:1e:45:6b:a9:0e:f0:ba:ce:ab:
                    bd:ac:60:d0:e8:ad:62:5e:4c:4d:25:10:16:71:03:
                    56:5d:a4:65:e2:69:fc:21:2c:15:3b:50:fd:8e:5d:
                    30:c6:74:36:15:fb:88:a6:51:e9:0a:a9:9c:2d:2b:
                    4f:4c:23:ad:cd:86:63:ed:98:9b:97:0e:7a:f6:ef:
                    47:ab:b9:b9:f1:31:74:97:c7:39:bc:94:2f:ab:3a:
                    f3:ba:4e:c5:7c:04:a9:ed:6b:7a:5b:4b:a2:62:a0:
                    89:ce:d0:a2:bd:93:37:8f:42:ba:fa:6e:bd:15:46:
                    b9:71:49:d8:58:10:8d:2d:31:f6:41:75:15:67:f1:
                    c5:23:10:84:20:97:b1:04:01:a1:eb:b6:10:6e:f8:
                    09:7d:ed:79:c9:2e:15:4d:4e:e1:7e:1a:e4:ad:81:
                    20:ec:9c:d9:6f:e5:d4:3f:c1:ef:55:e0:4d:60:03:
                    6d:c5:94:9d:f4:db:4a:36:f1:2c:d2:8a:48:09:00:
                    a5:76:0a:dc:cc:07:1c:70:23:68:11:ab:4b:76:9a:
                    a2:19:3d:8e:ed:bd:91:6d:52:59:d4:d9:50:f4:5e:
                    a8:cc:5a:b4:d7:7f:11:ca:ad:58:47:3f:23:c9:09:
                    e9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:52:FC:03:C1:09:67:3F:0A:8F:7E:13:FF:D0:5F:4E:34:8E:F0:1F
            X509v3 Authority Key Identifier:
                keyid:55:06:AF:01:F3:6F:B1:CE:11:24:E8:FE:84:5A:B2:8B:7A:08:34:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/3136382e3230352e3132302e302f32322d3234203d3e20323634363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:8b:a6:88:f0:d7:e7:f3:94:dd:46:86:a9:93:47:97:55:54:
         6f:85:61:23:dc:bd:dd:8f:91:9e:7a:0d:7a:1f:c2:d6:03:7c:
         ea:67:97:8f:b0:2b:f0:84:50:da:80:7f:2f:18:50:de:11:14:
         9f:9f:68:9e:16:08:f3:c2:52:0a:db:5d:72:33:1c:e0:1c:95:
         7c:70:ed:91:fb:9c:42:29:41:4f:1d:3a:99:d9:d6:ad:36:6d:
         57:22:ad:13:4f:f6:c4:65:b3:0a:eb:a4:e0:a0:69:05:25:0e:
         24:ce:cc:7d:09:39:e0:29:2f:01:25:cc:61:c1:da:a5:4d:9e:
         63:e4:7a:f2:85:56:90:a4:c5:d8:3e:e1:1e:59:16:6d:05:3d:
         1a:97:5b:b5:f9:5f:c4:d6:55:88:f9:61:ae:8d:b2:60:24:ed:
         4f:67:bd:ba:00:1d:63:68:d5:18:a5:cc:e8:5d:c0:1a:1e:c4:
         46:e8:10:d5:52:fb:14:b9:53:3e:f3:63:70:bc:be:3f:97:bc:
         da:2c:72:a0:ac:9b:2b:4d:19:08:a8:7c:b9:4c:eb:59:da:c3:
         2b:a2:1b:43:d4:a8:22:8a:ee:54:e9:8e:1a:38:e6:24:22:6a:
         a8:aa:04:01:3a:52:e0:1d:17:14:e6:0a:9e:57:c5:e2:c2:32:
         3f:5e:a6:a8
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUY/6uVHYVP2lmO7/NvVQhWgtCfgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUwNkFGMDFGMzZGQjFDRTExMjRFOEZFODQ1QUIyOEI3
QTA4MzRBRTAeFw0yNjAxMDYyMDQzMjNaFw0yNzAxMDUyMDQ4MjNaMDMxMTAvBgNV
BAMTKDg3NTJGQzAzQzEwOTY3M0YwQThGN0UxM0ZGRDA1RjRFMzQ4RUYwMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFXvaKy8xpHlJC3LAq+7++CbR
oR5Fa6kO8LrOq72sYNDorWJeTE0lEBZxA1ZdpGXiafwhLBU7UP2OXTDGdDYV+4im
UekKqZwtK09MI63NhmPtmJuXDnr270erubnxMXSXxzm8lC+rOvO6TsV8BKnta3pb
S6JioInO0KK9kzePQrr6br0VRrlxSdhYEI0tMfZBdRVn8cUjEIQgl7EEAaHrthBu
+Al97XnJLhVNTuF+GuStgSDsnNlv5dQ/we9V4E1gA23FlJ3020o28SzSikgJAKV2
CtzMBxxwI2gRq0t2mqIZPY7tvZFtUlnU2VD0XqjMWrTXfxHKrVhHPyPJCekRAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUh1L8A8EJZz8Kj34T/9BfTjSO8B8wHwYDVR0j
BBgwFoAUVQavAfNvsc4RJOj+hFqyi3oINK4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOEEyNEM0MzRBRUY5RUVEQURGQzgwMjczMkRGMEYyRUU5
QjMyQzgwNzhBN0ZEMjMzRDMwRTJGRUZCNURDMEUyLzAvNTUwNkFGMDFGMzZGQjFD
RTExMjRFOEZFODQ1QUIyOEI3QTA4MzRBRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NTA2QUYwMUYzNkZCMUNFMTEy
NEU4RkU4NDVBQjI4QjdBMDgzNEFFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMThBMjRDNDM0QUVGOUVFREFERkM4MDI3MzJERjBGMkVFOUIzMkM4MDc4
QTdGRDIzM0QzMEUyRkVGQjVEQzBFMi8wLzMxMzYzODJlMzIzMDM1MmUzMTMyMzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNjM3Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKo
zXgwDQYJKoZIhvcNAQELBQADggEBAKCLpojw1+fzlN1GhqmTR5dVVG+FYSPcvd2P
kZ56DXofwtYDfOpnl4+wK/CEUNqAfy8YUN4RFJ+faJ4WCPPCUgrbXXIzHOAclXxw
7ZH7nEIpQU8dOpnZ1q02bVcirRNP9sRlswrrpOCgaQUlDiTOzH0JOeApLwElzGHB
2qVNnmPkevKFVpCkxdg+4R5ZFm0FPRqXW7X5X8TWVYj5Ya6NsmAk7U9nvboAHWNo
1RilzOhdwBoexEboENVS+xS5Uz7zY3C8vj+XvNoscqCsmytNGQiofLlM61nawyui
G0PUqCKK7lTpjho45iQiaqiqBAE6UuAdFxTmCp5XxeLCMj9epqg=
-----END CERTIFICATE-----
Generated at Wed Jan 7 04:18:59 2026 by rpki-client