This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EBE5331E5E2F260F10C1D448A0E45E10F532F86102FE19E27D8C221D9B612B5/0/3136382e3232372e342e302f32322d3234203d3e20323634363830.roa
File:                     3136382e3232372e342e302f32322d3234203d3e20323634363830.roa (raw, json)
Hash identifier:          r7ZPdi3T6yhhN0zdoQ5pce6KSZKQf6tdMy3Ipom4ncQ=
Subject key identifier:   F1:C0:1A:D5:9A:FB:7B:86:C9:2B:EE:BC:53:73:8D:A0:81:5B:ED:E8
Certificate issuer:       /CN=A80397D3960DA76B2348577C00AF9F95E46D27AC
Certificate serial:       61EAAC0C7A68D68396D9A8A424B76A1685E29F30
Authority key identifier: A8:03:97:D3:96:0D:A7:6B:23:48:57:7C:00:AF:9F:95:E4:6D:27:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A80397D3960DA76B2348577C00AF9F95E46D27AC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EBE5331E5E2F260F10C1D448A0E45E10F532F86102FE19E27D8C221D9B612B5/0/3136382e3232372e342e302f32322d3234203d3e20323634363830.roa
Signing time:             Tue 06 Jan 2026 20:50:38 +0000
ROA not before:           Tue 06 Jan 2026 20:45:38 +0000
ROA not after:            Tue 05 Jan 2027 20:50:38 +0000
asID:                     264680
IP address blocks:        168.227.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EBE5331E5E2F260F10C1D448A0E45E10F532F86102FE19E27D8C221D9B612B5/0/A80397D3960DA76B2348577C00AF9F95E46D27AC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EBE5331E5E2F260F10C1D448A0E45E10F532F86102FE19E27D8C221D9B612B5/0/A80397D3960DA76B2348577C00AF9F95E46D27AC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A80397D3960DA76B2348577C00AF9F95E46D27AC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ea:ac:0c:7a:68:d6:83:96:d9:a8:a4:24:b7:6a:16:85:e2:9f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A80397D3960DA76B2348577C00AF9F95E46D27AC
        Validity
            Not Before: Jan  6 20:45:38 2026 GMT
            Not After : Jan  5 20:50:38 2027 GMT
        Subject: CN=F1C01AD59AFB7B86C92BEEBC53738DA0815BEDE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:10:4c:e5:58:59:28:30:47:19:be:33:44:13:
                    2c:f8:d4:3a:8f:c3:28:0c:b9:c7:c9:e8:00:eb:22:
                    19:9e:8c:c5:08:e7:ad:6a:8a:7a:1f:89:ef:17:f8:
                    0a:ca:6e:a3:4d:76:9a:19:09:10:29:0e:59:cb:34:
                    ce:db:6e:37:94:70:23:89:07:6a:ea:8c:99:3c:ba:
                    14:31:e2:04:c2:73:ec:e1:7c:36:ef:8c:7b:75:84:
                    b4:cf:2d:11:26:a1:af:bd:51:ed:82:d6:cc:1e:a1:
                    e8:1b:7e:78:fa:2d:26:5e:1d:47:5b:b1:11:b6:42:
                    c7:6c:50:28:06:4e:ee:1d:43:72:d5:e0:21:90:f6:
                    29:5d:23:26:50:ed:56:98:3d:ee:0d:fe:be:98:b7:
                    63:6a:e5:ea:72:a5:ac:2d:c1:f7:ec:9a:b0:bc:70:
                    de:8b:84:d9:f8:58:58:3a:4a:46:7e:f2:e2:18:9f:
                    79:7d:43:5e:e1:e4:a3:a0:08:0b:16:e8:bd:ff:3d:
                    68:ad:a5:e4:fc:42:35:9d:04:f6:6a:0d:09:b1:ea:
                    88:51:8b:49:24:1d:38:16:62:85:bb:7c:d1:7d:f4:
                    ff:b3:8b:c8:65:ff:11:f3:8b:60:25:d0:2f:a8:1d:
                    ac:60:b9:b3:39:bb:17:e9:2c:3d:a2:54:81:fe:66:
                    7c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C0:1A:D5:9A:FB:7B:86:C9:2B:EE:BC:53:73:8D:A0:81:5B:ED:E8
            X509v3 Authority Key Identifier:
                keyid:A8:03:97:D3:96:0D:A7:6B:23:48:57:7C:00:AF:9F:95:E4:6D:27:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EBE5331E5E2F260F10C1D448A0E45E10F532F86102FE19E27D8C221D9B612B5/0/A80397D3960DA76B2348577C00AF9F95E46D27AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A80397D3960DA76B2348577C00AF9F95E46D27AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EBE5331E5E2F260F10C1D448A0E45E10F532F86102FE19E27D8C221D9B612B5/0/3136382e3232372e342e302f32322d3234203d3e20323634363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:1b:c7:0a:9c:de:5d:c3:d6:7a:11:0d:47:11:46:1b:c0:51:
         2f:43:c3:30:2c:37:69:6b:7f:c5:58:9a:ca:ff:7c:5a:f6:d0:
         ed:18:e2:da:f3:77:fa:3f:64:d0:54:db:56:79:95:ca:76:fa:
         e2:db:3c:4d:2b:19:64:3b:1f:56:fd:66:ac:f3:ec:79:d2:ac:
         34:a4:1c:98:0d:b5:4c:55:3d:6c:98:86:8d:bc:f5:c3:58:4a:
         df:10:df:3e:cd:9b:7d:35:b7:c1:0d:9f:a0:d3:dd:cc:ed:7a:
         87:f1:17:df:8f:0a:ed:54:95:0b:64:a7:b1:31:e5:3d:b3:a3:
         24:57:8c:0c:7c:5a:59:c3:66:f4:36:b8:8b:c3:33:05:0e:da:
         84:97:fd:20:d5:c9:2a:da:d8:93:6e:4d:85:79:b3:a5:d2:e7:
         a0:e1:73:ff:9f:2c:5f:59:ad:25:5f:39:48:b1:a5:f3:90:62:
         be:34:b2:71:27:41:4f:f2:6e:c7:00:ce:eb:d1:52:73:3b:ae:
         d0:dc:d7:e4:3b:6f:4b:eb:1c:f8:e2:05:4b:6a:82:70:cd:81:
         8e:84:9b:f9:62:f2:aa:2f:03:21:59:1c:d4:ed:81:5e:c9:88:
         99:06:bb:f0:81:fa:09:2b:a2:4d:b4:a8:b2:66:55:d1:23:bb:
         5f:97:48:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:38:05 2026 by rpki-client