This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230312e3136382e302e302f31362d3234203d3e203139333332.roa
File:                     3230312e3136382e302e302f31362d3234203d3e203139333332.roa (raw, json)
Hash identifier:          96WlwFfE+uK9daXoehPInkzctZ3D7is8uGEdcAVz1kk=
Subject key identifier:   26:5F:06:A8:AD:C6:57:1B:BD:52:09:3C:AD:27:61:D8:7F:4A:6A:33
Certificate issuer:       /CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
Certificate serial:       535214C0A77690F3664E782DF99EA76178B57E02
Authority key identifier: 95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230312e3136382e302e302f31362d3234203d3e203139333332.roa
Signing time:             Tue 06 Jan 2026 19:08:12 +0000
ROA not before:           Tue 06 Jan 2026 19:03:12 +0000
ROA not after:            Tue 05 Jan 2027 19:08:12 +0000
asID:                     19332
IP address blocks:        201.168.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:52:14:c0:a7:76:90:f3:66:4e:78:2d:f9:9e:a7:61:78:b5:7e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
        Validity
            Not Before: Jan  6 19:03:12 2026 GMT
            Not After : Jan  5 19:08:12 2027 GMT
        Subject: CN=265F06A8ADC6571BBD52093CAD2761D87F4A6A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:44:b7:85:72:7b:97:99:3a:83:85:8f:2d:
                    44:82:cb:a1:9e:b0:7d:48:f9:79:c1:b4:69:d0:d9:
                    b3:98:ec:57:29:69:10:a4:d3:a9:3e:d3:9e:23:42:
                    a3:c1:e4:f8:5e:ca:59:3e:17:ba:b7:97:55:32:59:
                    02:31:30:54:47:d5:72:99:c8:0a:35:a8:96:75:e3:
                    0a:34:97:77:58:3f:22:e6:d1:f2:b4:58:1f:ff:21:
                    63:cc:ec:eb:98:be:e8:83:ee:6f:17:cb:99:c6:c8:
                    3b:4f:c2:a0:3d:08:c2:b5:9c:02:93:a4:59:d0:46:
                    a5:e6:51:3c:23:c7:84:36:a1:c0:bc:16:dd:fa:4e:
                    df:2a:6c:22:19:d9:a7:50:f7:36:ac:13:e0:46:48:
                    b1:0e:07:88:69:d8:f1:a7:cf:69:bb:cb:a9:74:23:
                    a1:3e:1c:76:fc:15:90:41:04:2f:43:90:70:49:93:
                    d7:7a:2f:4d:18:11:62:72:02:53:6e:f7:77:bf:2f:
                    6e:8e:af:0a:b7:26:8f:cb:cb:e1:71:08:d3:b7:cf:
                    ca:9b:56:12:c2:84:64:47:19:ce:2c:52:58:93:f5:
                    9b:76:8b:f2:88:e1:25:c9:b3:76:28:da:85:65:89:
                    45:7d:89:f5:ce:5e:19:c3:0c:1a:ab:43:62:5f:d2:
                    5c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5F:06:A8:AD:C6:57:1B:BD:52:09:3C:AD:27:61:D8:7F:4A:6A:33
            X509v3 Authority Key Identifier:
                keyid:95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230312e3136382e302e302f31362d3234203d3e203139333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.168.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         04:41:f8:c8:68:79:c3:07:c0:41:65:b2:c1:87:0e:a6:e4:93:
         f4:56:b9:05:47:ab:9f:95:5d:c5:b2:27:2b:1a:5c:c2:94:93:
         b2:bc:3e:86:23:99:49:90:77:2a:7e:21:dd:b0:25:15:0e:a0:
         d2:f7:77:7b:8d:6a:61:7f:a9:6c:0f:ef:8a:cf:17:8c:a5:4b:
         56:57:ed:25:88:22:fa:24:49:9c:e9:2a:ea:ed:2d:f4:9d:6a:
         92:2e:c7:6f:13:81:f3:22:f5:88:b4:4a:9c:a3:1b:87:57:03:
         ec:36:42:a8:e3:1b:65:54:64:47:2b:c0:6c:b6:c7:18:00:19:
         7d:10:18:3e:24:a1:d3:06:fb:2e:9f:73:ad:b8:6c:3c:b2:b9:
         a4:92:65:b6:ab:60:26:ff:c8:66:1c:a5:bc:65:03:c7:e0:41:
         17:17:37:bd:dc:25:15:72:af:a6:ca:64:4d:91:ff:77:6c:0c:
         eb:51:ed:a0:46:fb:a1:9b:f7:73:ba:59:f7:37:85:46:86:24:
         36:40:0d:4f:c8:a1:b1:28:c0:a1:0b:c9:f2:93:84:37:59:47:
         33:53:89:d8:d3:a0:32:b3:4c:0c:e8:27:7b:52:57:a7:88:6a:
         89:e0:88:37:06:e9:b1:d7:45:c0:2e:c4:05:72:72:5b:e4:85:
         6e:5b:45:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:00:09 2026 by rpki-client