This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3136382e302f32322d3234203d3e203532343339.roa
File:                     3136382e3139342e3136382e302f32322d3234203d3e203532343339.roa (raw, json)
Hash identifier:          kON+VJ2LqjiwXC/9KaZ0w82B0jum9ZWiQWjD9AH8A0o=
Subject key identifier:   D2:DE:0C:90:11:E8:1D:B5:E3:9A:46:FE:23:59:AD:F2:C2:1D:CB:AA
Certificate issuer:       /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial:       5350C40CFC05DABF82D288E6BD6D985C117FE6CB
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3136382e302f32322d3234203d3e203532343339.roa
Signing time:             Tue 06 Jan 2026 19:40:57 +0000
ROA not before:           Tue 06 Jan 2026 19:35:57 +0000
ROA not after:            Tue 05 Jan 2027 19:40:57 +0000
asID:                     52439
IP address blocks:        168.194.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:50:c4:0c:fc:05:da:bf:82:d2:88:e6:bd:6d:98:5c:11:7f:e6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
        Validity
            Not Before: Jan  6 19:35:57 2026 GMT
            Not After : Jan  5 19:40:57 2027 GMT
        Subject: CN=D2DE0C9011E81DB5E39A46FE2359ADF2C21DCBAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:55:79:52:30:f1:ef:e1:f7:a1:76:c9:9c:f0:
                    64:30:61:78:18:86:c5:70:76:45:4d:ff:f4:c7:ba:
                    08:ef:c3:fb:62:f2:c5:51:c2:d5:14:ad:29:a8:34:
                    7d:73:3a:09:4a:3d:91:ae:a0:cc:0b:2f:f0:b9:aa:
                    30:ae:89:6e:37:59:3c:5f:02:f3:30:3f:a8:48:61:
                    ab:50:ca:64:89:73:6b:5a:33:92:58:c0:b2:c3:c5:
                    9d:dd:e4:fa:58:da:a8:66:e1:e8:7b:b2:40:8c:84:
                    35:7f:21:01:94:2b:57:61:e3:e3:e4:2b:c2:fd:bf:
                    e6:9d:78:fb:d6:94:3b:82:8f:0e:87:0e:77:1d:74:
                    0f:4a:35:62:a7:91:b9:df:96:3f:b8:16:58:6e:bc:
                    6e:4a:fe:0a:6a:b0:00:69:92:e3:ad:fb:1d:0d:d5:
                    69:0e:82:e9:95:fa:96:ae:5d:a6:85:b6:b9:8e:91:
                    7d:8f:b3:e4:b1:92:e7:96:40:42:bd:17:e8:e6:74:
                    e1:68:30:20:aa:eb:da:c6:d8:25:31:33:48:75:53:
                    95:7a:7e:9a:48:2f:0f:89:08:c7:0f:04:61:f6:ec:
                    0c:1b:3c:50:a1:06:28:e9:94:10:b7:de:9c:88:20:
                    2c:0f:c1:e6:88:29:d5:5c:a0:b5:b6:88:5d:1f:b4:
                    46:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DE:0C:90:11:E8:1D:B5:E3:9A:46:FE:23:59:AD:F2:C2:1D:CB:AA
            X509v3 Authority Key Identifier:
                keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3136382e302f32322d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:7c:ff:8b:be:5e:b6:cc:12:10:13:b5:6e:26:12:98:28:dc:
         c2:3c:4f:9c:96:e5:65:d9:1e:bb:fd:10:89:33:0d:e1:44:1c:
         be:de:a1:78:c4:25:a5:db:cd:50:86:b1:4c:11:24:11:81:55:
         87:06:34:52:f7:b6:99:74:07:ca:3c:74:30:a3:12:3c:1f:e0:
         6b:a3:4b:90:af:36:23:49:22:51:9a:50:72:9c:10:c2:3b:ab:
         ce:4b:94:06:ee:5b:8e:94:fa:af:e2:36:04:1f:74:04:fe:2e:
         26:d0:9f:d0:22:e1:b5:01:da:9f:88:35:b5:20:35:98:fc:1c:
         bf:42:b1:47:05:54:af:ea:da:ae:60:0e:ec:07:4d:1f:67:c5:
         9a:d2:3d:37:b5:67:dc:58:a6:83:95:4d:07:19:99:55:1a:8d:
         b5:2e:ad:22:97:da:df:ed:6e:ac:1a:41:40:ae:85:9c:e5:05:
         7b:81:3c:af:42:b0:9d:6d:6c:20:3c:c9:fe:fd:16:14:d6:76:
         62:3e:d8:01:d3:9e:58:29:91:75:65:98:25:49:34:43:2f:4d:
         ba:0c:62:c9:54:23:3c:e0:62:eb:48:7b:1c:17:a1:60:ce:2f:
         95:33:b0:42:41:0c:fb:04:e3:7b:f9:f6:c9:23:59:cb:d3:eb:
         36:76:f1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 12:38:27 2026 by rpki-client