This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232322e302f32342d3234203d3e20323635353034.roa
File:                     3136382e302e3232322e302f32342d3234203d3e20323635353034.roa (raw, json)
Hash identifier:          CPatIFjc4g6UMM8W8B20H9WXFUl2hYF4kADZMaKDIXo=
Subject key identifier:   34:6C:F6:F6:28:EF:A1:00:1E:3D:21:78:39:DB:5C:D9:5A:A9:45:CC
Certificate issuer:       /CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
Certificate serial:       04F31CE9237B4413C83FECD8D53EBC9330C7F108
Authority key identifier: 1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232322e302f32342d3234203d3e20323635353034.roa
Signing time:             Tue 06 Jan 2026 19:22:41 +0000
ROA not before:           Tue 06 Jan 2026 19:17:41 +0000
ROA not after:            Tue 05 Jan 2027 19:22:41 +0000
asID:                     265504
IP address blocks:        168.0.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl
                          rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f3:1c:e9:23:7b:44:13:c8:3f:ec:d8:d5:3e:bc:93:30:c7:f1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
        Validity
            Not Before: Jan  6 19:17:41 2026 GMT
            Not After : Jan  5 19:22:41 2027 GMT
        Subject: CN=346CF6F628EFA1001E3D217839DB5CD95AA945CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:e9:58:f9:36:a1:7b:e8:a2:24:29:2c:77:
                    65:22:14:ea:2c:5a:06:23:68:57:b4:69:c2:11:b1:
                    f1:47:b6:05:c7:35:f5:10:2a:c3:f9:f9:23:17:b7:
                    ce:87:9d:aa:04:79:2b:bf:ea:82:e9:bd:90:5a:07:
                    35:05:4b:54:f2:0e:13:78:79:79:1a:08:a4:fc:73:
                    79:36:ad:5c:2e:09:23:59:4c:8d:3b:d6:77:38:90:
                    c9:a1:a2:eb:38:18:e5:69:6e:e4:7e:ff:f6:cb:f6:
                    c6:5c:20:2c:2c:82:8f:04:9f:56:74:e4:df:7e:6a:
                    d0:5f:32:70:eb:e6:fe:53:52:d1:ba:24:31:85:ce:
                    7e:ae:71:7f:76:48:e9:2f:97:14:63:72:09:8f:45:
                    48:b7:fc:91:0e:51:82:38:a1:0f:84:5c:90:2a:47:
                    31:67:fa:3d:a2:6f:b7:53:fa:84:60:c9:06:7b:e9:
                    e4:6c:d6:17:f7:f2:84:13:e6:90:3f:2c:7b:c3:f4:
                    8f:5a:f8:7c:b1:74:24:76:1b:cd:aa:b7:50:ed:35:
                    5b:02:a2:1f:80:b1:bb:6c:02:9f:b2:b5:c3:d3:f3:
                    8e:32:56:19:5c:29:bb:f0:2d:1e:d6:5c:ef:ae:68:
                    f2:58:e6:25:5c:1c:e1:2d:f3:32:5e:bc:46:16:4c:
                    db:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6C:F6:F6:28:EF:A1:00:1E:3D:21:78:39:DB:5C:D9:5A:A9:45:CC
            X509v3 Authority Key Identifier:
                keyid:1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232322e302f32342d3234203d3e20323635353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:91:79:50:d6:dd:fe:07:77:8a:7a:f9:ed:89:b2:65:fb:ee:
         12:81:7b:67:b3:d8:e3:6b:20:02:0d:8b:58:88:ea:ca:eb:c5:
         2f:04:fe:e1:45:33:66:79:1d:17:82:02:b7:4b:f6:04:5f:96:
         91:32:5e:88:97:ed:30:6c:06:f1:df:32:b0:ab:1c:11:87:10:
         e0:81:22:2c:55:1d:8f:16:9f:4d:08:09:f9:4b:73:00:b7:07:
         8b:e9:2f:0c:bc:d3:a0:0e:08:d8:fc:92:75:dd:94:6b:12:77:
         22:19:65:a7:f5:5b:8c:19:c8:0b:b3:6a:03:e3:60:52:2c:5d:
         a6:09:86:b6:05:a3:f3:40:b9:d0:e1:3e:0a:72:ab:17:8e:01:
         b0:91:1c:7b:34:54:3b:9b:f7:92:ce:5f:0d:09:f2:12:c3:bc:
         49:9f:02:16:41:0b:09:0c:39:5f:ea:d8:06:d5:5b:26:30:87:
         c2:12:91:a0:c1:ee:7a:89:cb:1a:81:f0:c2:7e:f9:6b:6f:c7:
         46:60:e3:ba:cf:ac:d4:e7:e5:54:c8:95:48:39:e3:94:33:17:
         02:43:ac:d7:94:c8:d0:02:75:86:a6:c5:f4:c1:d7:db:02:c2:
         89:9d:60:95:72:d5:5d:ca:4b:84:c0:ea:50:b2:e9:4c:d1:21:
         44:a1:ea:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:57:50 2026 by rpki-client