This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32332d3234203d3e20323730303537.roa
File:                     3136382e3139352e3130382e302f32332d3234203d3e20323730303537.roa (raw, json)
Hash identifier:          Wal77UPIOmSt7Wd3kHsUMbi6rqjdggy2cY3b+hGUcJA=
Subject key identifier:   66:AF:99:24:32:D3:C5:BF:DA:77:60:93:C7:7E:AC:29:93:E9:C0:4C
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       2A46171125812FD8C0D39445C936D9C2D57F6B7B
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32332d3234203d3e20323730303537.roa
Signing time:             Tue 06 Jan 2026 19:05:17 +0000
ROA not before:           Tue 06 Jan 2026 19:00:17 +0000
ROA not after:            Tue 05 Jan 2027 19:05:17 +0000
asID:                     270057
IP address blocks:        168.195.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 16:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:46:17:11:25:81:2f:d8:c0:d3:94:45:c9:36:d9:c2:d5:7f:6b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Jan  6 19:00:17 2026 GMT
            Not After : Jan  5 19:05:17 2027 GMT
        Subject: CN=66AF992432D3C5BFDA776093C77EAC2993E9C04C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:81:49:40:83:b8:d4:13:96:a5:41:f6:5b:
                    a6:2c:46:6e:96:ea:8a:12:6e:43:91:7b:b1:dc:63:
                    fb:23:bb:28:62:f8:9c:b1:2b:4f:14:5f:44:83:b8:
                    f6:c6:d5:02:b5:5d:5c:88:a2:4c:91:0a:ff:55:11:
                    6e:91:96:5d:dd:99:ba:24:15:3c:2d:06:0e:4a:e6:
                    1c:49:7c:98:7e:dd:65:88:52:7b:de:2f:1a:8f:3a:
                    a5:37:f0:b6:9e:f7:de:32:00:73:a1:af:10:65:3b:
                    22:1e:a6:92:9d:18:bd:c2:2f:45:57:0b:35:e5:25:
                    ed:31:4a:f4:a4:b9:67:53:28:9d:3f:6d:e5:56:82:
                    05:d2:6e:15:69:c1:ae:e8:8b:ab:7d:05:9c:2c:1d:
                    43:fe:4c:f1:71:71:e7:2d:ae:b4:ac:18:a0:01:4e:
                    e6:f7:83:cb:d0:da:ec:9d:84:d9:56:52:ef:54:99:
                    5f:10:79:c6:9b:59:e1:6d:d7:d8:02:9e:9b:93:04:
                    03:12:44:30:84:5a:a6:a3:fe:10:9f:eb:48:a7:2f:
                    d2:b8:78:e6:cb:ef:6e:d8:51:62:0f:34:76:05:3b:
                    25:3e:23:25:ea:0e:7c:de:60:8d:d0:d9:39:d9:84:
                    32:b5:69:60:65:ac:9e:f4:5d:97:8d:50:9c:66:e6:
                    f6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AF:99:24:32:D3:C5:BF:DA:77:60:93:C7:7E:AC:29:93:E9:C0:4C
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32332d3234203d3e20323730303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:21:3c:83:1d:51:b9:1d:08:bb:1a:65:43:cd:8a:9f:f1:03:
         d5:e4:20:f6:f3:0c:fa:b7:6b:df:77:93:50:34:b0:b9:5c:e1:
         37:3a:dc:91:4d:35:48:25:75:29:98:64:44:11:fc:c6:6e:03:
         22:4f:bf:a8:3f:c1:14:3d:fd:b7:29:fe:e2:71:fc:22:2c:4e:
         5e:cf:47:79:6a:69:17:08:fb:23:10:41:da:a8:60:eb:33:5e:
         81:ff:4b:31:2c:12:5b:85:4c:33:2a:86:99:dd:2f:cb:15:cd:
         17:58:db:77:b8:0e:81:7a:71:ed:32:93:75:39:54:7f:b0:30:
         6d:da:de:46:f0:51:94:3a:5a:97:19:a7:f0:1d:ce:67:20:a8:
         62:14:ec:e6:94:b1:51:48:73:7a:6e:9b:67:52:f2:de:14:e4:
         87:c4:32:36:f2:9d:91:a2:cc:57:e6:47:a4:12:5c:f0:6a:97:
         da:6f:2f:c6:be:70:71:6e:1b:6b:d6:d9:2e:35:31:00:cc:37:
         44:c8:83:0a:10:78:79:6c:7a:a8:4d:99:eb:42:2f:3d:ca:09:
         89:51:6d:8b:79:f3:b6:fc:b9:0d:fe:84:6b:66:c5:a5:a7:3e:
         a0:d8:49:71:55:26:66:f7:b4:ef:d8:d7:67:4f:3b:ff:e7:35:
         44:37:99:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 16:05:04 2026 by rpki-client