This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BDB5FF0E4093211A866FC5E13E1A29013E31F824D6CFD7B6536E92EFED673D8/0/3134332e3230382e3138302e302f32322d3234203d3e203233323433.roa
File:                     3134332e3230382e3138302e302f32322d3234203d3e203233323433.roa (raw, json)
Hash identifier:          0aIHBsGMZyzGc+NNGEJ68OyYWhPNSZO0zE6k1Ajsj/U=
Subject key identifier:   A5:57:25:B1:61:AB:7F:C0:56:39:73:2A:26:5E:92:69:BE:39:5B:72
Certificate issuer:       /CN=D8A91636BC601170CADDA4ECDBB71FCD5F7EC062
Certificate serial:       233BE85398EECA951D190B7BA79CF0AADF89ADBC
Authority key identifier: D8:A9:16:36:BC:60:11:70:CA:DD:A4:EC:DB:B7:1F:CD:5F:7E:C0:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A91636BC601170CADDA4ECDBB71FCD5F7EC062.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8BDB5FF0E4093211A866FC5E13E1A29013E31F824D6CFD7B6536E92EFED673D8/0/3134332e3230382e3138302e302f32322d3234203d3e203233323433.roa
Signing time:             Tue 06 Jan 2026 19:22:25 +0000
ROA not before:           Tue 06 Jan 2026 19:17:25 +0000
ROA not after:            Tue 05 Jan 2027 19:22:25 +0000
asID:                     23243
IP address blocks:        143.208.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8BDB5FF0E4093211A866FC5E13E1A29013E31F824D6CFD7B6536E92EFED673D8/0/D8A91636BC601170CADDA4ECDBB71FCD5F7EC062.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8BDB5FF0E4093211A866FC5E13E1A29013E31F824D6CFD7B6536E92EFED673D8/0/D8A91636BC601170CADDA4ECDBB71FCD5F7EC062.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A91636BC601170CADDA4ECDBB71FCD5F7EC062.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 08:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3b:e8:53:98:ee:ca:95:1d:19:0b:7b:a7:9c:f0:aa:df:89:ad:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8A91636BC601170CADDA4ECDBB71FCD5F7EC062
        Validity
            Not Before: Jan  6 19:17:25 2026 GMT
            Not After : Jan  5 19:22:25 2027 GMT
        Subject: CN=A55725B161AB7FC05639732A265E9269BE395B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:87:05:2e:16:94:64:71:10:9f:90:6d:4e:98:
                    dc:b2:90:8d:cf:20:5c:e5:95:ce:bc:d8:b2:23:b2:
                    6f:2c:e8:91:f9:a6:30:9d:aa:cf:b5:12:2f:6f:7e:
                    56:18:16:09:98:17:f9:9a:9c:f8:64:c7:ec:63:33:
                    e4:b0:d3:2f:1e:1c:b8:49:c9:c4:e3:77:41:83:f7:
                    a9:da:cb:8f:67:35:4d:2e:7e:9d:65:ca:c0:7f:ff:
                    00:da:0f:2a:92:43:8f:ce:9d:20:f2:da:df:38:24:
                    56:f1:9f:1e:72:c5:02:e4:bc:05:d4:0b:03:35:b5:
                    19:92:08:a5:57:fd:4d:a0:2d:31:ff:29:4f:7a:d0:
                    51:28:d4:67:8e:2c:c7:71:4f:99:79:06:9a:35:5e:
                    c1:30:ca:2f:95:45:5d:6a:60:75:29:a5:2f:e4:83:
                    d0:83:86:b9:10:ef:85:ff:83:1a:33:26:57:5a:77:
                    3b:af:f0:33:c2:42:b4:d3:df:e3:6d:05:31:37:bc:
                    99:b3:47:a9:e0:5a:9c:44:6e:77:8f:68:f7:70:b1:
                    e2:fd:38:21:da:7a:d1:a8:fa:7b:d0:e9:a4:a6:8d:
                    46:ba:8c:55:f2:c2:67:bb:57:6a:d9:ae:db:41:17:
                    7c:ce:83:a8:84:ba:34:c6:ae:5e:75:e4:3e:31:49:
                    6b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:57:25:B1:61:AB:7F:C0:56:39:73:2A:26:5E:92:69:BE:39:5B:72
            X509v3 Authority Key Identifier:
                keyid:D8:A9:16:36:BC:60:11:70:CA:DD:A4:EC:DB:B7:1F:CD:5F:7E:C0:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8BDB5FF0E4093211A866FC5E13E1A29013E31F824D6CFD7B6536E92EFED673D8/0/D8A91636BC601170CADDA4ECDBB71FCD5F7EC062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A91636BC601170CADDA4ECDBB71FCD5F7EC062.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BDB5FF0E4093211A866FC5E13E1A29013E31F824D6CFD7B6536E92EFED673D8/0/3134332e3230382e3138302e302f32322d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:49:59:00:1e:72:ef:63:73:53:2c:e3:dc:a4:d1:1d:33:ea:
         86:54:a7:53:7f:10:80:7e:dc:08:c4:ea:af:2c:23:74:db:9d:
         b6:bd:9e:d0:f6:f1:36:39:5b:8d:f6:fb:3e:8f:5f:79:44:46:
         95:12:ef:f8:59:e3:b2:33:59:25:93:a8:22:51:c2:4a:17:2b:
         8e:7f:cf:ef:bd:6b:c3:41:6f:2f:9e:09:91:23:be:86:7c:84:
         84:97:4a:41:ed:10:3b:fa:bc:58:60:15:ba:81:f9:4d:21:2e:
         38:ff:5f:4b:3a:46:9a:48:92:1c:6a:38:9b:0b:1c:8a:a2:33:
         20:94:db:68:5a:8a:2e:ab:c9:c0:96:4e:a1:6c:cb:89:bc:f9:
         d9:7b:b3:8f:6f:6e:e0:a5:cd:e3:44:69:be:74:f1:fd:1f:b6:
         ba:77:d8:98:70:7b:ef:e2:8f:f5:b6:48:13:75:c0:79:89:3e:
         4f:3c:ba:e7:a3:b1:8b:6f:7c:7a:86:8c:7f:c9:93:ef:51:f0:
         e3:11:f3:dc:b6:37:bf:ee:2f:29:03:aa:e0:0f:3a:4a:42:c7:
         e8:4f:4f:df:09:63:47:1f:4f:6f:c4:d6:98:01:08:47:8d:d9:
         8f:1a:a0:b1:c5:32:cd:f0:e2:52:27:d6:8a:3c:8f:33:55:0c:
         b3:6c:49:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:23:32 2026 by rpki-client