This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3130372e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e3130372e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          i5kHjdoIWQfaZzD65tc5wYMpJzCJb9rMrWuHWg8Ihq4=
Subject key identifier:   B6:28:6B:71:AB:98:E2:2D:83:85:33:C6:9E:4A:B1:6A:5E:3B:28:54
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       18209AF0518C784D9A886B6E84F429ECE2FEA119
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3130372e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 06 Jan 2026 18:58:10 +0000
ROA not before:           Tue 06 Jan 2026 18:53:10 +0000
ROA not after:            Tue 05 Jan 2027 18:58:10 +0000
asID:                     262166
IP address blocks:        168.234.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:20:9a:f0:51:8c:78:4d:9a:88:6b:6e:84:f4:29:ec:e2:fe:a1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Jan  6 18:53:10 2026 GMT
            Not After : Jan  5 18:58:10 2027 GMT
        Subject: CN=B6286B71AB98E22D838533C69E4AB16A5E3B2854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b0:36:1c:9b:d0:f5:1d:be:db:05:bb:a2:bf:
                    ae:c5:a3:ab:6b:81:f6:71:3a:76:ff:ca:62:0f:9d:
                    e7:ef:e8:47:0d:33:8d:22:57:8e:9c:08:1d:35:61:
                    d5:79:fc:81:4f:d1:20:de:a0:d9:01:cd:49:d6:dd:
                    d6:8a:35:cb:8b:fb:10:76:c0:45:17:3c:f9:2d:d1:
                    2f:05:0f:15:8d:e8:6f:88:30:c0:30:c1:e2:d0:4d:
                    72:be:08:42:9c:d2:aa:6e:02:ae:78:65:e3:9c:fd:
                    50:09:9c:4d:fe:48:49:e7:e5:b6:09:36:c5:11:42:
                    f2:d4:ef:1b:cf:de:4b:4d:12:b4:91:30:83:28:ef:
                    3a:3b:4e:df:3f:90:76:02:64:82:0b:d1:95:da:ce:
                    5b:d7:81:3a:f1:2b:5b:ab:5e:45:88:9d:cc:6d:75:
                    33:c6:c2:99:4c:19:61:52:76:c1:8b:dd:ce:b6:da:
                    d4:6a:1f:73:2b:24:7d:36:d9:c0:97:e1:c3:67:88:
                    c7:99:1d:dd:ea:93:b5:d2:75:78:f5:1f:6c:84:60:
                    e1:19:c8:9d:42:81:5b:4c:22:a3:e1:0b:02:af:14:
                    61:24:8a:ed:57:52:49:e5:5a:f9:af:a9:3e:00:1d:
                    63:16:5d:9b:3a:46:83:c4:d9:8a:f1:6d:ba:64:53:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:28:6B:71:AB:98:E2:2D:83:85:33:C6:9E:4A:B1:6A:5E:3B:28:54
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3130372e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:6a:e4:0a:9e:f0:3d:c2:f7:bb:01:22:29:3d:6d:82:e3:a7:
         37:cc:54:ad:67:d0:ba:2b:7b:43:39:3a:42:1a:6e:8f:24:33:
         56:ac:15:65:e4:c3:5f:52:3c:58:72:57:80:5e:d6:af:aa:7c:
         65:3a:8e:9d:79:b5:ea:d3:80:84:65:e4:cb:2b:7d:20:28:a7:
         76:31:3b:38:8c:26:e7:83:6b:46:7a:b0:25:0d:1b:52:8b:2e:
         2d:8b:3e:6c:3b:b1:61:2b:30:28:59:da:02:e8:77:47:97:25:
         0a:da:f0:70:5a:ce:d1:06:c5:1f:b0:e0:ec:d1:e2:85:52:3a:
         07:eb:dc:d2:76:e2:6b:ed:49:96:f1:14:7e:7c:fd:38:4d:96:
         b9:8a:8d:2e:6e:e5:2e:2d:d3:26:aa:67:f9:60:8b:27:0e:3c:
         a4:d8:01:39:18:38:e7:4d:a7:41:10:45:0d:7d:5c:ff:eb:25:
         64:ae:e9:6e:73:d1:de:de:a5:2c:c3:23:90:a9:dc:39:71:69:
         ca:86:52:2c:73:22:15:25:15:62:aa:47:8c:4b:69:14:2b:44:
         84:de:3d:ba:f6:be:11:1a:ad:d2:59:9e:39:fa:cf:b2:df:4c:
         38:b7:b6:f0:c3:2e:b3:a6:28:71:0d:a1:ea:fd:b5:d0:ac:c7:
         79:7d:48:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:50:56 2026 by rpki-client