This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3230352e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e3230352e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          rAcvP4YAsj+40Y3NDbsOxZzKB+JsogYUHpBG3TBpBs0=
Subject key identifier:   DA:0F:65:B4:4A:DF:24:3E:EF:A2:99:E7:8D:4E:C8:F9:29:43:FF:57
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       569E23913F1DA155AAE9DD53112A003225FD6981
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3230352e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 06 Jan 2026 18:58:06 +0000
ROA not before:           Tue 06 Jan 2026 18:53:06 +0000
ROA not after:            Tue 05 Jan 2027 18:58:06 +0000
asID:                     262166
IP address blocks:        168.234.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9e:23:91:3f:1d:a1:55:aa:e9:dd:53:11:2a:00:32:25:fd:69:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Jan  6 18:53:06 2026 GMT
            Not After : Jan  5 18:58:06 2027 GMT
        Subject: CN=DA0F65B44ADF243EEFA299E78D4EC8F92943FF57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:8e:a3:37:a9:9b:b7:35:c4:eb:7f:5d:cb:
                    5a:1f:2d:c2:c9:c7:ec:48:c8:9d:eb:c8:d5:9f:4a:
                    5c:9f:a2:3b:b5:e4:1f:36:83:e3:eb:17:3b:b1:d0:
                    3a:9e:90:6d:84:35:43:af:c7:60:3b:db:80:0d:24:
                    e8:18:54:b4:08:bb:ff:b8:44:74:c6:8d:bd:b4:16:
                    53:30:87:59:a2:00:6f:03:8d:95:f8:f8:d4:88:03:
                    f7:af:41:49:43:91:a2:c9:db:8e:22:ea:f2:c0:65:
                    cb:ee:99:1d:f3:3c:af:e2:c4:dd:30:49:3f:71:bf:
                    fd:cf:df:80:ad:cf:cd:c7:16:8e:de:da:aa:45:33:
                    5d:a9:62:51:24:6a:c8:3b:38:63:7a:87:bb:8f:da:
                    f8:ca:2e:ca:b3:ac:0a:f1:35:2e:57:11:d2:0f:3b:
                    bf:d0:3b:b2:29:8b:c2:45:20:b8:b4:d8:b7:5f:56:
                    24:f6:03:20:c7:c5:2d:b2:fa:fc:2b:12:be:36:a4:
                    a6:fc:c2:ed:38:a2:4f:cb:24:06:d2:e6:13:cc:3d:
                    cd:df:54:2a:80:1d:a4:36:79:49:bd:fa:76:82:dd:
                    83:bb:1d:0f:b9:c2:14:62:d3:4a:10:40:b2:85:0b:
                    0b:97:8a:3d:7f:8c:3a:7e:93:fc:c7:b4:d0:14:c9:
                    e3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0F:65:B4:4A:DF:24:3E:EF:A2:99:E7:8D:4E:C8:F9:29:43:FF:57
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3230352e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:23:47:db:71:2a:43:91:47:49:c9:de:b3:79:75:aa:e2:3c:
         fb:27:5f:c2:59:35:d4:5c:15:2b:f4:00:b6:3f:20:d5:be:3d:
         63:d4:1b:b8:2b:b6:b0:fb:09:c2:06:6a:cf:a8:0b:45:d1:8a:
         de:76:fc:80:14:6f:a8:6b:2a:55:4b:b5:74:be:d8:b4:74:cd:
         59:15:ea:e4:e5:7c:df:bd:51:25:d9:06:c5:05:9c:64:b1:6f:
         52:c5:1c:36:18:ac:77:af:f3:07:2e:e9:dc:c7:92:11:ad:d9:
         3d:9b:a1:c0:cd:c9:7a:da:dd:f5:01:80:eb:b1:39:16:2a:ff:
         35:a4:d4:a3:a8:c8:c1:90:b9:a4:ff:dd:5e:20:bf:eb:1d:5f:
         2e:87:dc:5f:13:fe:12:9c:cf:b6:3d:1a:97:c7:53:88:0d:aa:
         8f:b4:11:83:3e:5f:81:c4:a6:25:52:6e:f8:33:a1:0c:8e:04:
         e7:e5:2f:12:48:db:da:33:4e:8c:86:69:0f:76:1a:88:06:9c:
         32:d7:b8:a7:a2:f9:7f:09:83:ed:fe:96:ad:7e:0d:3b:5c:bc:
         54:db:ab:8f:4e:9d:98:66:f5:71:fd:30:2f:46:19:93:43:2b:
         07:59:77:c9:dd:62:8b:10:4e:36:7c:f4:8c:a2:2c:ae:45:40:
         c7:5e:ea:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:02:44 2026 by rpki-client