This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3134332e3230382e3136382e302f32322d3234203d3e20323632313435.roa
File:                     3134332e3230382e3136382e302f32322d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          nPP9Zb/qyqU9YZJU4r63GcsDXw6qZoAl0fENVwmcrSc=
Subject key identifier:   8C:0A:93:86:7A:92:22:31:58:C5:22:74:5A:6D:4C:76:78:61:13:DF
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       7724BF3715EBB03236D9E19AA8EFAE3127F1A2D5
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3134332e3230382e3136382e302f32322d3234203d3e20323632313435.roa
Signing time:             Tue 06 Jan 2026 19:33:56 +0000
ROA not before:           Tue 06 Jan 2026 19:28:56 +0000
ROA not after:            Tue 05 Jan 2027 19:33:56 +0000
asID:                     262145
IP address blocks:        143.208.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 03:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:24:bf:37:15:eb:b0:32:36:d9:e1:9a:a8:ef:ae:31:27:f1:a2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Jan  6 19:28:56 2026 GMT
            Not After : Jan  5 19:33:56 2027 GMT
        Subject: CN=8C0A93867A92223158C522745A6D4C76786113DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:31:8c:6d:d5:ef:04:cd:d2:f6:0d:5f:da:
                    80:50:0c:eb:4a:48:4e:1d:24:3a:68:58:4b:ec:1b:
                    b0:67:d0:91:a4:cb:8a:72:10:28:e3:a3:2b:d2:4e:
                    96:58:49:37:e6:0b:4e:08:8e:b7:e6:48:97:11:4d:
                    2e:12:4e:c1:1c:37:98:99:4f:db:cd:3f:60:e8:40:
                    e4:d1:e8:6d:27:3d:62:74:3b:46:93:01:fe:01:83:
                    ea:0b:63:3f:24:0f:a1:f6:87:17:ab:80:fa:ae:a1:
                    e7:b7:ef:85:ac:a3:b0:06:92:90:f0:60:7f:92:01:
                    1a:1a:7c:cd:ab:66:9a:63:42:da:76:e5:ed:22:3b:
                    b1:5c:58:a3:a3:4c:ea:60:a6:1f:1e:8b:c7:9e:09:
                    6e:09:5b:d3:8a:54:5f:3a:b6:9f:21:9e:0f:56:8d:
                    45:16:7d:d1:a1:50:76:70:90:ce:10:20:92:01:55:
                    60:c2:51:ab:fe:6e:03:57:0f:22:d2:1a:0f:92:11:
                    38:1c:92:54:89:c9:6b:c9:ee:bd:03:31:f7:5e:6b:
                    f9:16:fc:7b:d0:57:02:af:ba:7e:58:b1:48:8d:82:
                    e1:3b:7e:3b:98:02:91:50:65:e5:23:6f:a7:4f:93:
                    4b:0d:bb:16:e2:16:d5:d6:de:0c:e4:19:cc:f3:8d:
                    b1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0A:93:86:7A:92:22:31:58:C5:22:74:5A:6D:4C:76:78:61:13:DF
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3134332e3230382e3136382e302f32322d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:43:ad:0b:69:84:d2:eb:5e:71:6c:d9:6e:17:8d:cc:57:b2:
         99:3b:ae:48:77:e9:c5:aa:5e:85:18:db:17:b0:66:08:ee:7e:
         0e:25:6c:f8:83:60:6e:20:50:c5:73:73:49:13:01:f8:f5:30:
         40:e2:2a:c1:b8:71:87:d5:19:7d:b2:bc:71:41:1f:a2:ca:94:
         9f:e8:80:cf:b0:46:eb:b9:21:03:72:74:a4:7c:3f:22:05:f2:
         9b:e0:e7:21:3f:25:ef:a7:38:34:1f:fc:4b:85:f1:9c:93:c4:
         e4:7b:ed:53:6b:1a:b0:0a:f5:08:bd:df:29:34:ce:73:9e:ec:
         ff:9d:69:bb:b3:39:0c:25:8b:9a:1f:af:81:a4:86:ee:73:a4:
         28:31:22:e3:6d:ec:6b:a0:d9:0d:86:ee:a0:bb:3f:de:db:18:
         cf:36:20:55:40:ed:d5:c3:f8:e9:f8:84:4b:bd:db:ac:cc:f1:
         47:cd:09:fd:a0:81:2b:1c:c4:31:34:55:e2:c8:de:75:d6:1c:
         9f:1f:b4:2e:8d:dd:8b:c6:56:25:43:f2:66:a3:e7:e6:a4:e9:
         f5:81:63:d8:cf:f1:7e:ad:0d:50:84:92:b4:24:4c:78:fb:35:
         1a:8d:4d:2a:e5:81:32:bb:ad:c3:a1:04:15:da:3e:53:ea:a6:
         4c:ce:f1:c0
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUdyS/NxXrsDI22eGaqO+uMSfxotUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc5MDBENUFCRjQ3NjE1MTEyN0U1OTdGMjhGM0IxNEU2
MUFGQjg0QzAeFw0yNjAxMDYxOTI4NTZaFw0yNzAxMDUxOTMzNTZaMDMxMTAvBgNV
BAMTKDhDMEE5Mzg2N0E5MjIyMzE1OEM1MjI3NDVBNkQ0Qzc2Nzg2MTEzREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmkTGMbdXvBM3S9g1f2oBQDOtK
SE4dJDpoWEvsG7Bn0JGky4pyECjjoyvSTpZYSTfmC04IjrfmSJcRTS4STsEcN5iZ
T9vNP2DoQOTR6G0nPWJ0O0aTAf4Bg+oLYz8kD6H2hxergPquoee374Wso7AGkpDw
YH+SARoafM2rZppjQtp25e0iO7FcWKOjTOpgph8ei8eeCW4JW9OKVF86tp8hng9W
jUUWfdGhUHZwkM4QIJIBVWDCUav+bgNXDyLSGg+SETgcklSJyWvJ7r0DMfdea/kW
/HvQVwKvun5YsUiNguE7fjuYApFQZeUjb6dPk0sNuxbiFtXW3gzkGczzjbFHAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUjAqThnqSIjFYxSJ0Wm1MdnhhE98wHwYDVR0j
BBgwFoAU55ANWr9HYVESfll/KPOxTmGvuEwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NjI1MUY4NDkzQUZGQUZFRkIzRDFDN0MyMEQyRjkyMjY3
RjgzOEVGRTZBQjc1QjMwMjA3QTE3MEIxQUYyNjA5LzAvRTc5MDBENUFCRjQ3NjE1
MTEyN0U1OTdGMjhGM0IxNEU2MUFGQjg0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzkwMEQ1QUJGNDc2MTUxMTI3
RTU5N0YyOEYzQjE0RTYxQUZCODRDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzYyNTFGODQ5M0FGRkFGRUZCM0QxQzdDMjBEMkY5MjI2N0Y4MzhFRkU2
QUI3NUIzMDIwN0ExNzBCMUFGMjYwOS8wLzMxMzQzMzJlMzIzMDM4MmUzMTM2Mzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM0MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKP
0KgwDQYJKoZIhvcNAQELBQADggEBABZDrQtphNLrXnFs2W4XjcxXspk7rkh36cWq
XoUY2xewZgjufg4lbPiDYG4gUMVzc0kTAfj1MEDiKsG4cYfVGX2yvHFBH6LKlJ/o
gM+wRuu5IQNydKR8PyIF8pvg5yE/Je+nODQf/EuF8ZyTxOR77VNrGrAK9Qi93yk0
znOe7P+dabuzOQwli5ofr4Gkhu5zpCgxIuNt7Gug2Q2G7qC7P97bGM82IFVA7dXD
+On4hEu926zM8UfNCf2ggSscxDE0VeLI3nXWHJ8ftC6N3YvGViVD8maj5+ak6fWB
Y9jP8X6tDVCEkrQkTHj7NRqNTSrlgTK7rcOhBBXaPlPqpkzO8cA=
-----END CERTIFICATE-----
Generated at Tue Jan 13 22:12:50 2026 by rpki-client