This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3136382e3232382e3133322e302f32322d3234203d3e20323632313539.roa
File:                     3136382e3232382e3133322e302f32322d3234203d3e20323632313539.roa (raw, json)
Hash identifier:          9CfNck9FuKkghBOviQ/xN7+sbJw+iNig1iG/jkrwiRw=
Subject key identifier:   5F:84:0C:4A:91:86:CB:DD:9E:14:38:0D:1D:7E:6E:C3:24:F1:80:61
Certificate issuer:       /CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
Certificate serial:       67FD4CD1AA13B1D370B7EE11C6F8408B3A296B94
Authority key identifier: 94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3136382e3232382e3133322e302f32322d3234203d3e20323632313539.roa
Signing time:             Tue 06 Jan 2026 18:57:23 +0000
ROA not before:           Tue 06 Jan 2026 18:52:23 +0000
ROA not after:            Tue 05 Jan 2027 18:57:23 +0000
asID:                     262159
IP address blocks:        168.228.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fd:4c:d1:aa:13:b1:d3:70:b7:ee:11:c6:f8:40:8b:3a:29:6b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
        Validity
            Not Before: Jan  6 18:52:23 2026 GMT
            Not After : Jan  5 18:57:23 2027 GMT
        Subject: CN=5F840C4A9186CBDD9E14380D1D7E6EC324F18061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4e:4e:6a:8f:00:eb:89:d6:83:22:c0:1b:07:
                    3e:80:5c:11:b9:10:1a:ab:d3:cd:72:d2:8c:32:de:
                    e1:63:d3:02:c3:3e:ea:36:83:f0:9f:50:3e:e0:05:
                    6a:e7:e9:8e:6d:5b:18:7f:bf:08:c6:96:f5:0e:eb:
                    75:a8:3f:ab:ad:cf:d5:11:78:7d:c5:c0:80:76:75:
                    da:1a:e3:ed:a8:31:0d:a6:57:8d:52:f2:55:52:7b:
                    3e:a0:76:43:4b:2d:d7:5d:5d:67:41:35:8f:3b:1c:
                    27:e3:ce:49:d9:cc:65:8c:a9:3e:53:52:cc:99:d1:
                    1a:b1:0f:37:94:a8:f0:b6:67:42:42:ad:9d:0b:1c:
                    77:91:3f:b7:81:bc:8b:f5:c5:b5:23:2b:c0:2b:85:
                    0a:e7:69:21:ef:94:f5:68:98:c2:95:33:9c:42:93:
                    cd:12:e7:35:83:c7:c7:5b:32:29:79:14:c9:d5:d4:
                    e3:f6:2a:02:05:16:9b:f2:f6:40:fc:8e:b3:51:b7:
                    06:41:55:af:7b:4a:0c:3b:4e:3f:c8:da:83:e0:49:
                    2a:60:a8:4c:96:5a:a5:aa:62:20:e3:6c:b6:d8:f2:
                    59:b3:f2:b9:49:cb:97:34:40:d6:e2:3b:b3:e5:b4:
                    17:13:5f:b8:12:46:2d:84:0a:60:f0:eb:69:5d:ad:
                    98:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:84:0C:4A:91:86:CB:DD:9E:14:38:0D:1D:7E:6E:C3:24:F1:80:61
            X509v3 Authority Key Identifier:
                keyid:94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3136382e3232382e3133322e302f32322d3234203d3e20323632313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:d3:b8:82:4f:d9:b7:c0:61:c5:70:62:5b:2f:2b:67:94:4c:
         9b:e6:99:9e:c7:0a:4a:4f:0f:f9:40:6b:4b:cc:3d:d1:89:4c:
         a1:11:c7:a1:db:e3:74:6c:4d:5d:92:08:ac:c6:44:6b:5a:5f:
         db:14:8e:e2:21:a4:c0:0e:df:04:30:34:11:f5:ce:54:04:9f:
         10:99:2c:62:c8:ae:68:bd:d6:e3:73:68:5e:b5:d9:9f:c6:4d:
         4c:c8:ae:b3:78:bd:27:90:f0:19:7f:41:1e:71:0f:7d:61:c3:
         3b:e2:cf:a0:64:33:72:c3:f2:27:1d:b9:f3:41:86:14:10:9e:
         c4:1a:78:52:59:49:81:66:86:6e:1c:3d:76:7f:bd:69:5e:96:
         3e:bb:03:54:9d:26:cf:40:05:d5:9c:8a:36:b5:d2:b4:1c:1a:
         96:71:bb:8a:93:22:4a:5c:ed:81:46:85:07:f9:0d:4c:df:0f:
         95:8a:88:00:88:ec:07:0a:6e:1f:70:19:55:d1:31:42:fb:45:
         f0:3e:4c:c6:34:1e:39:85:03:38:50:c2:a3:c2:3e:9f:f8:dc:
         7a:6e:03:f7:d6:38:cd:78:86:5b:78:12:34:af:43:c5:d9:76:
         7c:fd:fa:46:5f:bf:94:a3:e8:b2:5b:4d:6d:89:17:2c:54:cc:
         5d:07:f5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:37:35 2026 by rpki-client