This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32332d3233203d3e20323635373436.roa
File:                     3132382e3230312e3136382e302f32332d3233203d3e20323635373436.roa (raw, json)
Hash identifier:          cv+py8cuM+qPiMhUnk3GeVzv/D88zZCpd4t2uOcs02w=
Subject key identifier:   02:92:5E:5E:C1:E4:84:C2:81:4B:2F:CA:FB:35:8F:28:A4:74:65:28
Certificate issuer:       /CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
Certificate serial:       63420A93209B8D04CDD48A3485A9AB5608C9523B
Authority key identifier: D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32332d3233203d3e20323635373436.roa
Signing time:             Tue 06 Jan 2026 19:28:49 +0000
ROA not before:           Tue 06 Jan 2026 19:23:49 +0000
ROA not after:            Tue 05 Jan 2027 19:28:49 +0000
asID:                     265746
IP address blocks:        128.201.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:42:0a:93:20:9b:8d:04:cd:d4:8a:34:85:a9:ab:56:08:c9:52:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
        Validity
            Not Before: Jan  6 19:23:49 2026 GMT
            Not After : Jan  5 19:28:49 2027 GMT
        Subject: CN=02925E5EC1E484C2814B2FCAFB358F28A4746528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:20:20:e6:24:19:d1:12:8e:f1:e6:16:1d:
                    fd:48:1a:ae:6a:64:59:ce:aa:f2:75:56:fa:31:30:
                    d8:f2:e5:9a:85:e4:45:86:95:3d:1e:7d:d0:e5:b1:
                    de:2c:ce:c2:bb:f3:ed:95:e7:91:61:77:bf:7e:e7:
                    c4:d6:c4:b9:22:80:70:3d:f2:54:48:b6:e1:26:17:
                    33:63:de:19:f1:b9:d6:f7:4f:30:ca:62:8d:99:38:
                    f2:d8:9d:04:6c:eb:93:01:8c:61:2a:c7:eb:f1:e5:
                    3d:70:75:c2:2a:53:8f:97:d0:e5:7b:6e:b5:fb:79:
                    5f:53:c6:14:54:b9:bc:28:22:f4:a2:14:ee:38:b0:
                    9d:6c:16:59:9e:24:74:b4:a1:6d:23:a7:c6:86:0a:
                    96:7c:c6:ec:99:cc:fe:43:cf:5f:23:c9:77:32:8a:
                    b1:80:f7:00:9b:d5:5c:78:3a:61:ff:57:0d:40:ef:
                    98:9d:8d:df:c7:64:65:6b:8b:cd:1e:57:ae:a5:85:
                    5d:7c:40:8b:22:0e:cb:3d:c5:0f:06:09:fd:7f:83:
                    07:7c:39:49:20:2c:93:1d:37:9c:e5:b3:a8:1d:58:
                    82:76:6c:f6:b2:30:7c:f5:d0:30:93:b0:de:1e:ae:
                    d4:d7:21:41:d0:ec:14:8b:c2:bb:12:53:8f:62:0e:
                    98:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:92:5E:5E:C1:E4:84:C2:81:4B:2F:CA:FB:35:8F:28:A4:74:65:28
            X509v3 Authority Key Identifier:
                keyid:D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32332d3233203d3e20323635373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:3e:31:df:d7:e4:26:c6:70:b9:0d:34:ff:a1:51:9c:7e:c3:
         f8:48:53:27:b2:f1:e2:7f:c5:20:f0:0e:1d:93:de:0c:1a:be:
         ff:e4:7e:8a:da:a4:82:4b:3d:6e:18:d3:ca:9f:3a:5f:a8:f3:
         99:1d:23:84:cf:4b:05:34:fa:9d:f6:04:fe:bc:77:49:e0:ee:
         a5:9f:14:79:0e:84:17:ae:17:f6:ab:1f:74:12:07:ef:5c:59:
         d7:04:f1:46:58:c6:99:57:91:f4:43:44:b9:e7:ff:46:4c:4e:
         78:a1:99:86:2b:96:1f:86:fa:9d:3d:10:5e:15:40:94:fe:ba:
         ac:fc:7a:ef:71:87:bc:5b:fd:a4:b7:06:9d:68:8b:76:55:f9:
         b5:9f:d1:c7:9e:7f:24:cf:97:ec:47:36:07:bc:a1:a2:64:73:
         ca:68:d1:9b:19:71:a4:c9:40:f0:ed:d0:06:ce:33:cf:cf:11:
         98:dc:be:61:d5:8e:87:9f:c5:a7:3d:38:28:cc:f6:03:f9:1d:
         a5:98:f8:eb:b3:0d:fd:40:20:10:3b:96:97:11:85:f4:9a:2e:
         e2:62:96:e2:c9:85:08:c2:70:8f:71:20:39:95:1f:bf:07:7a:
         6a:5e:32:da:4a:46:59:24:28:78:3d:dc:58:0a:77:12:e2:66:
         b3:25:bc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:34:20 2026 by rpki-client