This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3138312e382e302f32322d3234203d3e203237383433.roa
File:                     3136382e3138312e382e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier:          nQovJgzGWIWrM8zSG+zo4MrWnKtPOMfoEYabmLekEus=
Subject key identifier:   C6:CD:CB:B8:AA:19:BE:BB:0B:69:39:77:00:81:B2:DD:07:A2:A0:04
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       3552ADA78429388FAE7AA8927E1F3CF3AA1484B3
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3138312e382e302f32322d3234203d3e203237383433.roa
Signing time:             Tue 06 Jan 2026 19:03:53 +0000
ROA not before:           Tue 06 Jan 2026 18:58:53 +0000
ROA not after:            Tue 05 Jan 2027 19:03:53 +0000
asID:                     27843
IP address blocks:        168.181.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 22:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:52:ad:a7:84:29:38:8f:ae:7a:a8:92:7e:1f:3c:f3:aa:14:84:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Jan  6 18:58:53 2026 GMT
            Not After : Jan  5 19:03:53 2027 GMT
        Subject: CN=C6CDCBB8AA19BEBB0B6939770081B2DD07A2A004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d3:ee:4e:15:59:57:ae:dc:31:da:e6:82:95:
                    9e:7f:48:05:ee:63:b3:66:4a:86:c0:36:5a:f2:1b:
                    b8:fd:50:b4:7d:54:5b:d7:9d:1c:93:da:24:b3:3d:
                    42:d7:eb:58:f5:eb:ce:47:5b:47:76:5e:59:fc:43:
                    c0:e6:a3:14:b4:fc:8e:89:9d:de:f8:fb:9e:45:49:
                    6b:7a:1d:51:49:76:f7:78:3c:fd:04:83:0f:20:cb:
                    79:f1:c2:82:5e:f9:cc:fe:fe:bb:70:b5:c6:0e:47:
                    3d:1c:78:62:83:33:40:4c:d4:72:c6:45:0d:41:8e:
                    c5:df:3e:04:e3:f6:50:57:a1:89:d1:bb:4b:ef:17:
                    8a:27:dd:b6:14:e6:ec:f0:d4:83:6b:55:ef:5f:7d:
                    67:d0:e6:db:97:45:51:24:13:58:fa:eb:a7:3c:3d:
                    bd:32:f8:db:23:47:d0:a2:e6:9a:a4:6e:10:33:72:
                    9c:af:1b:21:44:ae:2d:8f:ac:0b:61:d5:5f:39:a3:
                    c8:d9:b5:4a:a5:38:df:0a:51:65:44:2f:1c:96:35:
                    99:b0:6f:89:85:dd:e9:d3:76:f5:92:5c:61:aa:c3:
                    d5:94:cc:36:f9:b4:37:bd:81:07:60:c4:cc:bf:f8:
                    56:4d:b1:46:3f:f6:16:fb:6e:d9:1d:6b:ab:cb:29:
                    5c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CD:CB:B8:AA:19:BE:BB:0B:69:39:77:00:81:B2:DD:07:A2:A0:04
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3138312e382e302f32322d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:31:9d:8b:31:e5:71:d5:35:e5:ca:a3:ca:2a:aa:5c:77:71:
         a0:28:2a:25:e6:5b:9f:89:ad:b3:25:59:53:b0:7c:4f:5b:7d:
         72:15:c6:57:41:f1:89:cf:81:83:d2:b9:51:77:7a:b3:7a:8a:
         c2:7a:25:ae:f4:04:e7:17:69:47:99:04:86:27:c0:ad:cd:32:
         23:01:96:7f:86:24:d1:f9:ee:f4:2e:a9:f6:96:4d:a4:c4:db:
         23:84:48:d0:a9:ef:2d:e0:92:35:39:11:83:68:34:30:41:68:
         9d:67:73:77:23:4f:eb:61:a0:75:e9:93:11:4d:ec:b9:c8:5b:
         fe:04:b9:93:7a:90:6d:02:ae:31:c3:08:ce:b3:08:b1:93:d8:
         b9:00:38:80:e0:42:13:9b:a4:18:f4:f5:87:4a:44:8c:f2:5d:
         d2:63:ab:19:40:93:ba:cf:e4:33:cf:bb:8b:95:60:37:55:08:
         01:4e:76:4c:ff:8c:96:f3:c3:e2:8c:0e:e6:2c:85:0e:d9:e8:
         24:ff:49:5e:29:ea:11:92:12:1b:49:bf:c2:70:ac:60:48:23:
         69:4f:30:db:4b:90:f3:4b:47:af:25:c1:07:78:f3:84:99:16:
         b0:08:bf:30:a1:bf:c3:cd:38:73:26:75:c7:23:64:fc:b8:da:
         4c:de:d5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:24:15 2026 by rpki-client