This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3136382e3232382e34382e302f32322d3234203d3e20323632313435.roa
File:                     3136382e3232382e34382e302f32322d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          sEbFa5Fe8k9Y2SCaWguaSY6882pwBQ4jaWluv6ichxA=
Subject key identifier:   87:45:85:13:E8:D1:5D:4B:30:35:B8:A9:3B:57:2E:E0:BC:1D:2E:68
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       3B0BC93E991ED80ED6A8ADBCEA9C9EA5E2642308
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3136382e3232382e34382e302f32322d3234203d3e20323632313435.roa
Signing time:             Tue 06 Jan 2026 19:33:57 +0000
ROA not before:           Tue 06 Jan 2026 19:28:57 +0000
ROA not after:            Tue 05 Jan 2027 19:33:57 +0000
asID:                     262145
IP address blocks:        168.228.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 03:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0b:c9:3e:99:1e:d8:0e:d6:a8:ad:bc:ea:9c:9e:a5:e2:64:23:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Jan  6 19:28:57 2026 GMT
            Not After : Jan  5 19:33:57 2027 GMT
        Subject: CN=87458513E8D15D4B3035B8A93B572EE0BC1D2E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:23:c9:39:a6:df:01:73:03:1f:9a:56:6a:
                    21:45:da:a7:36:ed:1f:18:7b:e3:50:ae:c0:f4:8e:
                    26:ad:69:c8:93:5e:15:9b:89:c5:a3:13:46:5c:5d:
                    02:45:24:25:45:0d:61:fb:0a:2e:48:53:b1:92:2e:
                    38:bd:17:8d:e6:94:6d:07:42:fb:c9:7d:23:de:c8:
                    a7:88:c1:7c:be:48:a7:5d:4c:3c:1c:37:56:63:59:
                    7b:c0:c9:3b:21:c8:03:f5:e1:ca:6c:de:73:07:52:
                    cb:57:d9:96:a6:10:e5:0f:6a:ad:43:76:b4:e4:48:
                    09:db:b3:23:fd:7f:56:32:95:5b:e4:d3:13:4c:a6:
                    c2:0e:8a:f2:d6:8e:86:6f:41:a1:96:7e:99:81:29:
                    9c:99:da:05:d0:31:df:db:df:a6:37:eb:a5:1d:fe:
                    e1:40:c3:5a:75:13:3f:0c:45:59:2b:50:35:a2:e7:
                    47:43:3a:8e:b3:fb:4b:bd:90:c7:ba:7a:3d:e7:32:
                    3f:24:3b:a2:21:8a:16:5b:f2:a2:bb:8d:c7:0b:06:
                    ab:19:4c:5a:c4:d4:61:ef:21:5d:75:41:53:32:d0:
                    72:3c:7c:5a:1d:06:df:0d:9c:21:14:e3:26:95:f9:
                    c3:58:cd:07:e3:27:b5:9a:0b:dd:23:ae:c1:e2:a2:
                    14:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:45:85:13:E8:D1:5D:4B:30:35:B8:A9:3B:57:2E:E0:BC:1D:2E:68
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3136382e3232382e34382e302f32322d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:ae:8e:03:42:dc:0f:25:2c:44:7a:fb:b5:31:3e:e7:8b:85:
         cb:af:fd:62:80:41:26:b8:ec:42:3c:8f:f4:18:d3:75:15:fc:
         e8:61:a5:45:49:a3:9a:67:a6:c3:ba:88:b6:2e:92:5c:9d:e3:
         a1:e1:42:fa:ea:cd:98:36:7f:56:a8:39:9c:7c:1e:3b:28:05:
         2c:8b:89:75:81:45:87:c7:6c:02:41:d6:9f:ad:d3:1e:bf:6a:
         7e:5f:c5:ba:8d:ab:bb:95:27:ea:f0:55:5e:4d:bb:c9:eb:59:
         64:43:99:de:f7:98:8c:17:2e:46:c4:2f:52:e1:d5:5d:21:19:
         e7:b1:80:af:26:a1:1b:4f:60:09:14:0e:38:3e:0f:9c:1d:f4:
         d9:c9:da:34:96:8e:47:9c:e7:23:b9:e4:20:66:5c:fb:26:38:
         39:11:0d:f7:5b:31:0b:2c:f3:3e:be:64:1d:76:57:11:71:35:
         6a:8e:c6:7f:c1:67:53:0f:a9:84:1f:6a:da:e3:d3:24:fa:e5:
         12:8f:8d:7f:92:43:e8:1c:75:43:e7:68:8d:9d:8a:f8:a3:ec:
         4b:ac:ef:be:39:9d:51:f3:8c:91:59:96:ff:b0:2c:59:60:26:
         ec:cf:8d:88:01:df:d2:f6:fa:97:55:b1:f2:9a:85:8a:72:d7:
         1a:5c:db:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:09:44 2026 by rpki-client