This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/3136382e3139362e312e302f32342d3234203d3e20323634373537.roa
File:                     3136382e3139362e312e302f32342d3234203d3e20323634373537.roa (raw, json)
Hash identifier:          LAspQwZeLd/Wm8qx7TrgcpajGIk1Lw7rABVhy+uBuj4=
Subject key identifier:   A1:AA:61:F1:79:54:49:CA:3B:92:B1:70:AF:3C:AE:56:BC:3D:A3:2C
Certificate issuer:       /CN=F046ED03680781D6F15121AA89FAA7447A3DAFC2
Certificate serial:       717D827A90AA159121F19AA9B9425B1908B7D9CA
Authority key identifier: F0:46:ED:03:68:07:81:D6:F1:51:21:AA:89:FA:A7:44:7A:3D:AF:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/3136382e3139362e312e302f32342d3234203d3e20323634373537.roa
Signing time:             Tue 06 Jan 2026 19:01:20 +0000
ROA not before:           Tue 06 Jan 2026 18:56:20 +0000
ROA not after:            Tue 05 Jan 2027 19:01:20 +0000
asID:                     264757
IP address blocks:        168.196.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 21:46:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7d:82:7a:90:aa:15:91:21:f1:9a:a9:b9:42:5b:19:08:b7:d9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F046ED03680781D6F15121AA89FAA7447A3DAFC2
        Validity
            Not Before: Jan  6 18:56:20 2026 GMT
            Not After : Jan  5 19:01:20 2027 GMT
        Subject: CN=A1AA61F1795449CA3B92B170AF3CAE56BC3DA32C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:e2:f7:2e:2e:a8:a0:7a:ae:2a:ab:9e:79:
                    fc:3a:08:60:81:26:7a:48:87:0d:5f:a1:24:d1:23:
                    07:5d:8a:a3:bd:ba:1e:84:c6:fc:c4:ea:29:2d:d0:
                    81:43:87:7c:29:b0:bb:02:18:91:b3:96:d5:01:b7:
                    b3:95:83:d5:f6:bc:25:9d:22:2b:90:ae:1a:29:ee:
                    07:96:0f:7f:31:9c:46:11:8f:a9:e1:c2:9f:d7:61:
                    2d:6b:5d:a5:0d:98:43:df:d6:af:ce:1f:9c:64:e5:
                    59:49:62:de:df:67:11:4b:34:7a:ea:b7:93:52:7b:
                    82:22:df:30:ff:8c:90:3e:24:ff:62:a4:bb:07:15:
                    52:b8:4e:7b:2c:b3:e2:68:85:1c:9f:5e:05:a5:7a:
                    98:4b:2a:08:51:40:9d:55:2c:55:50:6c:23:fe:94:
                    27:45:65:4c:1b:52:2b:4b:fd:77:6e:d9:23:4d:c5:
                    21:c8:b4:e3:4f:a6:85:de:ad:73:60:0b:04:a8:8d:
                    b7:80:d5:c8:06:53:03:aa:bf:df:55:76:97:dc:11:
                    53:1a:5c:6f:ca:9a:cc:9b:28:d4:f2:c7:12:e8:28:
                    f3:dc:11:62:ec:d4:e2:28:3c:5c:a8:ff:da:c8:9d:
                    15:6d:87:f5:c2:1c:a1:5f:50:45:dd:97:81:f2:62:
                    97:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AA:61:F1:79:54:49:CA:3B:92:B1:70:AF:3C:AE:56:BC:3D:A3:2C
            X509v3 Authority Key Identifier:
                keyid:F0:46:ED:03:68:07:81:D6:F1:51:21:AA:89:FA:A7:44:7A:3D:AF:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/3136382e3139362e312e302f32342d3234203d3e20323634373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:43:23:d6:fe:9c:85:81:d7:f8:ec:1b:96:90:10:c5:07:81:
         3d:b1:d1:ad:cf:c5:6a:6d:77:c8:fe:d7:a5:c8:74:57:83:27:
         1c:ee:46:71:8e:37:6c:25:9a:f8:2d:1e:1b:60:e2:49:ae:11:
         03:77:02:70:60:cc:08:26:20:78:f9:83:33:61:2b:79:34:c6:
         64:cb:6e:06:53:5f:be:2e:e3:b1:61:55:fe:83:35:52:05:ce:
         24:04:b3:16:93:e2:41:01:37:c1:7d:fb:f1:01:88:25:0c:93:
         f0:3c:88:da:da:36:36:d9:05:a2:1b:06:d4:9e:f1:af:a9:69:
         5e:37:32:de:40:e3:f7:93:31:c4:ec:65:0c:24:df:d3:0f:77:
         1d:1d:00:df:f3:50:7a:fd:f2:4d:ac:3e:47:47:85:6f:1f:cd:
         c3:a1:4c:12:2a:52:42:e8:9d:a1:04:6c:87:f9:90:06:7b:4e:
         dc:57:8e:38:11:f0:56:35:54:80:d6:af:c9:6a:b9:85:db:af:
         c0:a4:29:27:41:df:8b:9e:cf:36:02:76:4c:af:fd:d9:29:a5:
         ba:7f:55:0c:72:e7:9b:5e:99:9f:11:d7:31:7c:4a:c7:ec:53:
         a1:35:69:84:e8:51:a8:3c:2c:78:9a:27:00:32:e5:b8:fd:9a:
         c2:d3:19:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:03:27 2026 by rpki-client