This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/3134332e302e3136382e302f32322d3234203d3e203238303830.roa
File:                     3134332e302e3136382e302f32322d3234203d3e203238303830.roa (raw, json)
Hash identifier:          SyvNudkJUT+EfVdS10gQAmnixi++4XhTDSp3PXtm/Xg=
Subject key identifier:   DB:FE:20:71:2F:90:D6:D1:37:C8:A2:39:7C:B3:F5:72:5E:63:92:F7
Certificate issuer:       /CN=2905F3DD739DE8F57BFF83877ECBC631E7B12A02
Certificate serial:       22383C3EA825301A84F65114573399B75DF88E9E
Authority key identifier: 29:05:F3:DD:73:9D:E8:F5:7B:FF:83:87:7E:CB:C6:31:E7:B1:2A:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/3134332e302e3136382e302f32322d3234203d3e203238303830.roa
Signing time:             Tue 06 Jan 2026 19:41:01 +0000
ROA not before:           Tue 06 Jan 2026 19:36:01 +0000
ROA not after:            Tue 05 Jan 2027 19:41:01 +0000
asID:                     28080
IP address blocks:        143.0.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:38:3c:3e:a8:25:30:1a:84:f6:51:14:57:33:99:b7:5d:f8:8e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905F3DD739DE8F57BFF83877ECBC631E7B12A02
        Validity
            Not Before: Jan  6 19:36:01 2026 GMT
            Not After : Jan  5 19:41:01 2027 GMT
        Subject: CN=DBFE20712F90D6D137C8A2397CB3F5725E6392F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:80:f5:8e:77:b8:45:c6:7e:a6:0d:8f:a9:
                    9a:0e:a5:18:ca:cb:3c:d6:a6:69:cf:b5:b5:ce:dc:
                    db:a7:d8:91:ef:35:85:4d:c6:8a:23:b5:02:4b:a6:
                    1d:0b:9c:21:4e:b9:95:6a:12:c8:43:9b:3f:64:2d:
                    b6:9c:06:99:24:b2:56:71:b4:ea:7f:8f:08:ca:d2:
                    ed:a6:34:3f:6f:7f:d9:9d:70:64:31:8a:f0:ab:61:
                    38:6d:88:ab:c1:73:61:99:13:9e:97:af:71:55:8e:
                    29:71:92:d6:7d:f0:e4:c3:50:02:82:0e:de:fa:42:
                    78:e4:fa:32:e0:5d:e0:5d:e9:a2:94:09:f6:bb:94:
                    f5:ae:83:2d:45:a1:05:af:34:31:43:6f:e5:70:ce:
                    7d:3d:24:d9:e5:b9:e8:16:d2:1e:00:0d:2b:3b:23:
                    9f:24:dc:7e:26:52:bd:56:d2:10:de:c7:30:e2:e6:
                    6b:00:db:52:c7:99:3f:ec:84:85:ee:a4:43:ed:34:
                    1c:8f:bf:7a:44:34:fc:76:3f:96:a9:bd:ee:07:4b:
                    ed:5b:f6:fd:9f:ae:00:58:00:e5:6e:34:2f:ff:5b:
                    8c:35:e9:fd:38:28:39:40:4b:90:e2:14:3f:6f:ef:
                    4c:c3:4e:1d:db:30:fa:a4:f1:9f:ea:aa:b4:9f:b4:
                    6c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FE:20:71:2F:90:D6:D1:37:C8:A2:39:7C:B3:F5:72:5E:63:92:F7
            X509v3 Authority Key Identifier:
                keyid:29:05:F3:DD:73:9D:E8:F5:7B:FF:83:87:7E:CB:C6:31:E7:B1:2A:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/3134332e302e3136382e302f32322d3234203d3e203238303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:a9:81:04:c6:49:03:4a:6e:72:2c:6a:6a:80:14:4e:22:e0:
         5a:ef:1f:ab:b0:a0:83:3f:f7:c0:48:fe:a0:95:6c:a1:92:ee:
         b1:a9:b1:eb:30:d0:da:e7:40:a1:f6:20:c6:78:3b:99:21:f3:
         11:f0:97:31:a8:df:11:ca:2a:1a:7c:04:33:72:04:f9:54:f2:
         c4:8c:9f:2f:81:a0:43:a3:74:ab:8c:50:5e:49:86:0c:19:6d:
         9d:ac:53:92:6c:15:8e:42:53:65:06:8c:1d:a0:3d:d7:73:7d:
         e6:18:e2:5d:61:e9:1e:86:9e:e5:80:d5:1f:fa:a4:6e:5c:1b:
         a1:c7:4c:3d:4e:8b:95:b4:fa:48:12:44:14:54:9b:c8:99:da:
         c7:81:62:44:f1:ea:98:21:a3:41:66:b7:6a:f2:17:bb:b8:eb:
         d1:7c:cb:6b:57:13:56:c1:3a:c8:32:8d:65:c8:10:31:3a:08:
         96:65:20:6e:75:c9:bc:f6:af:fc:3b:93:76:60:98:ac:38:2b:
         3a:a3:ed:e2:d0:16:eb:ad:16:93:4c:c0:0f:61:cc:f2:e1:04:
         4a:6a:01:03:04:a7:f1:36:9e:51:75:b7:c7:32:40:1a:c3:62:
         9e:f0:7f:56:a9:bf:ba:3c:11:28:3f:9d:14:7c:57:55:f5:fd:
         4e:de:a2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:01:08 2026 by rpki-client