This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37322e302f32312d3234203d3e203237393239.roa
File:                     3136382e3233342e37322e302f32312d3234203d3e203237393239.roa (raw, json)
Hash identifier:          pbGq9qmavIYypzsm710NaTUck+b0mqllL5LAA5qre3A=
Subject key identifier:   E4:3A:C4:5B:B0:75:96:AB:7B:2F:12:87:73:16:0B:EC:D5:D1:AA:3D
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       0B6F2362AB123E9E7AB2D83C7226EF176561F3C3
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37322e302f32312d3234203d3e203237393239.roa
Signing time:             Tue 06 Jan 2026 18:58:04 +0000
ROA not before:           Tue 06 Jan 2026 18:53:04 +0000
ROA not after:            Tue 05 Jan 2027 18:58:04 +0000
asID:                     27929
IP address blocks:        168.234.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6f:23:62:ab:12:3e:9e:7a:b2:d8:3c:72:26:ef:17:65:61:f3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Jan  6 18:53:04 2026 GMT
            Not After : Jan  5 18:58:04 2027 GMT
        Subject: CN=E43AC45BB07596AB7B2F128773160BECD5D1AA3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:09:9a:1a:8e:2e:5d:71:1e:bb:f2:50:3b:
                    66:48:7c:4c:b5:f3:ca:49:d6:0e:8f:de:c7:54:c8:
                    da:53:31:07:80:f1:df:d1:59:e7:ba:e4:2b:89:9c:
                    ea:28:a8:2e:ca:85:43:c9:a9:13:aa:3b:9c:ec:a8:
                    48:60:d5:ce:36:e1:f5:20:1e:c6:5d:f7:25:ff:f9:
                    18:d0:23:93:a5:86:37:6d:b7:ba:78:92:c7:01:5c:
                    ce:71:4f:d7:8e:76:b6:63:34:db:20:32:1c:64:6a:
                    29:ac:43:b2:09:df:38:d9:0b:b0:2e:a3:31:bc:08:
                    86:74:91:50:f9:bd:b7:bc:a8:35:c3:18:06:6d:7a:
                    38:d4:8a:07:e6:2f:a0:1d:50:4e:89:b3:76:6d:ac:
                    2c:ad:fc:ec:b6:dc:09:d7:e7:70:38:21:03:22:35:
                    04:fe:b6:f5:10:7a:c1:d2:9c:13:1b:19:ed:0a:17:
                    ed:82:7d:9d:11:13:c3:94:e7:81:8b:6a:d4:11:9e:
                    2c:e0:67:b8:ab:4d:8d:d0:74:64:fd:35:2e:ec:80:
                    13:7d:13:57:c7:54:48:fb:6d:9b:af:98:73:87:65:
                    e5:04:ab:ae:2d:89:47:22:42:55:2f:19:36:6a:9b:
                    5c:e7:aa:7d:41:aa:ad:07:c0:50:2e:28:79:ef:0b:
                    07:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3A:C4:5B:B0:75:96:AB:7B:2F:12:87:73:16:0B:EC:D5:D1:AA:3D
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37322e302f32312d3234203d3e203237393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:fd:09:db:9d:37:8a:b5:1b:14:9b:1d:17:b5:ba:1d:92:5b:
         f2:a6:57:c0:d1:da:fa:4f:41:60:23:64:b5:f0:c3:9d:e6:53:
         02:9d:68:3c:12:e7:35:78:a1:87:a9:8a:2a:c1:03:45:47:89:
         29:23:fd:aa:8c:59:b7:95:8e:ee:85:e8:97:6d:3f:28:c8:5c:
         d5:4d:bb:fa:51:26:c8:a1:69:36:9d:ca:9b:50:bc:84:b5:a7:
         e1:a8:a0:4a:1f:3a:5a:b6:f7:73:48:33:86:73:4a:79:5f:68:
         d6:aa:d3:f7:7f:a3:0d:af:ac:ad:2d:46:b8:ee:3a:40:e3:e1:
         8c:99:03:49:d3:b1:17:d1:c9:d2:8b:70:4f:79:a7:68:01:dd:
         c3:65:0a:b2:03:1c:52:cb:58:fb:3d:26:6f:9b:ec:f4:57:80:
         5c:dd:14:03:2f:54:76:a5:ea:7b:37:a9:c8:77:83:17:de:79:
         19:b4:5d:0b:44:f9:e8:21:0d:21:1d:82:fe:95:60:30:05:7e:
         97:40:0e:36:2c:bd:68:e5:c1:27:30:9d:8f:7b:2d:7b:d4:d3:
         10:91:a1:8d:71:cb:a3:48:17:f7:df:ac:c1:8c:7f:e1:fd:48:
         fa:23:52:c5:88:ca:48:16:a6:b7:83:9e:9e:0b:3d:8e:ea:61:
         70:4e:42:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:54:09 2026 by rpki-client