This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3232203d3e20323633373939.roa
File:                     3136382e3139352e3231362e302f32322d3232203d3e20323633373939.roa (raw, json)
Hash identifier:          Mo4q0EOLg7g3k9dgRtDZKmQLX2BWovRYC/gwuBKuzTs=
Subject key identifier:   3E:38:44:4A:C9:78:A9:D9:F1:40:5D:4D:53:2A:AD:53:67:14:96:4E
Certificate issuer:       /CN=3424CAC085E77B82A8878925FC49A646944DB380
Certificate serial:       7E0B918DDCA5EE20DC91009417E0A37B6415402B
Authority key identifier: 34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3232203d3e20323633373939.roa
Signing time:             Tue 06 Jan 2026 19:31:32 +0000
ROA not before:           Tue 06 Jan 2026 19:26:32 +0000
ROA not after:            Tue 05 Jan 2027 19:31:32 +0000
asID:                     263799
IP address blocks:        168.195.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0b:91:8d:dc:a5:ee:20:dc:91:00:94:17:e0:a3:7b:64:15:40:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3424CAC085E77B82A8878925FC49A646944DB380
        Validity
            Not Before: Jan  6 19:26:32 2026 GMT
            Not After : Jan  5 19:31:32 2027 GMT
        Subject: CN=3E38444AC978A9D9F1405D4D532AAD536714964E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:6d:4d:21:d6:2c:e6:4a:68:b8:1e:f8:e3:b1:
                    53:d2:2f:e7:6c:13:8f:6c:7e:2f:39:9e:14:09:56:
                    0e:30:60:e3:42:9a:a1:b4:e4:a7:c4:50:16:95:6b:
                    29:b7:38:f4:fb:5e:c3:63:77:74:99:d5:26:08:1a:
                    9a:05:32:7d:79:5e:87:aa:87:87:37:aa:73:63:f8:
                    72:e4:31:b1:c0:72:df:60:6d:27:a0:58:e1:3d:29:
                    0a:ca:f0:78:2c:06:d1:ab:55:b6:88:62:5a:41:44:
                    2f:9b:ec:06:0e:0a:d3:7f:3d:d1:a5:f2:a0:d7:6e:
                    aa:11:e4:72:19:f2:27:f0:9a:14:c6:45:31:03:cb:
                    e0:ab:39:36:20:69:50:60:9a:d5:26:c8:b9:e0:57:
                    67:6b:f1:2b:6e:ad:f9:66:00:69:11:ca:52:6c:a4:
                    a5:66:9f:fd:ea:db:09:14:74:e2:17:32:20:9c:6a:
                    c9:2b:a6:72:1e:38:37:d3:f2:32:e9:00:55:01:9a:
                    ab:fc:e6:ee:45:f2:1e:c1:1e:42:79:0f:11:d3:a2:
                    71:9e:f7:e3:96:88:74:8f:69:4e:04:5b:0f:ee:fc:
                    66:73:9e:61:c8:5b:23:fe:80:cc:dc:a7:7b:9d:48:
                    4f:a8:d7:6b:8c:06:7b:42:63:35:16:ef:55:27:df:
                    46:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:38:44:4A:C9:78:A9:D9:F1:40:5D:4D:53:2A:AD:53:67:14:96:4E
            X509v3 Authority Key Identifier:
                keyid:34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3136382e3139352e3231362e302f32322d3232203d3e20323633373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:f0:93:ac:2c:5f:bb:2e:32:0a:6d:2d:ac:3b:bf:ce:2e:c9:
         6c:41:6d:ae:d8:c0:e2:36:ac:ea:32:0f:e9:a3:ba:dd:65:38:
         d1:03:c2:a0:2e:ab:4b:0b:91:12:e8:e3:6b:c0:e1:22:2e:18:
         cc:63:cf:77:46:6a:e6:74:7d:19:93:48:c1:2a:50:e7:53:77:
         1f:09:28:fd:93:66:5a:55:84:83:45:8a:da:5b:44:32:9a:2f:
         11:86:23:52:8e:50:93:b6:4f:1d:8c:23:b6:a2:ce:26:d0:ac:
         20:dc:c3:20:f0:e8:bc:ee:8a:36:c9:d5:10:dd:f4:9f:08:4a:
         43:0f:0a:97:95:73:a2:6e:f6:80:7b:a2:da:06:f1:94:dc:d3:
         36:f4:33:e4:e5:2c:7f:bc:c0:4e:be:3e:c6:aa:78:2b:7b:39:
         30:8d:1c:3a:30:29:b2:4a:b4:5b:d8:7e:e2:92:0b:60:d9:c7:
         b3:0b:48:cf:ca:b8:46:a4:69:49:50:f4:2e:91:dc:7c:0a:46:
         b7:0f:68:73:c0:3c:fa:f1:e0:04:01:47:d1:5a:d9:b2:50:ed:
         07:f1:aa:93:90:cc:f7:52:12:3f:ec:01:25:2a:d6:68:71:c1:
         b1:0d:2f:16:e0:40:95:8e:1e:47:1b:1c:23:97:df:00:b8:f4:
         6b:fa:55:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:25:10 2026 by rpki-client