This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3135302e302f32342d3234203d3e20323634373434.roa
File:                     3136382e3139342e3135302e302f32342d3234203d3e20323634373434.roa (raw, json)
Hash identifier:          dAfAAUbUzrrQwoP+9eIH7a1KTXz84+iZXayX3ceSB6M=
Subject key identifier:   36:60:6C:01:52:2D:65:40:E4:A5:B7:EC:D1:45:7A:09:B7:0D:31:48
Certificate issuer:       /CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
Certificate serial:       32911D2CB4A2BC83A697752B2331320E3DDCFDB4
Authority key identifier: E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3135302e302f32342d3234203d3e20323634373434.roa
Signing time:             Tue 06 Jan 2026 19:46:23 +0000
ROA not before:           Tue 06 Jan 2026 19:41:23 +0000
ROA not after:            Tue 05 Jan 2027 19:46:23 +0000
asID:                     264744
IP address blocks:        168.194.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:91:1d:2c:b4:a2:bc:83:a6:97:75:2b:23:31:32:0e:3d:dc:fd:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
        Validity
            Not Before: Jan  6 19:41:23 2026 GMT
            Not After : Jan  5 19:46:23 2027 GMT
        Subject: CN=36606C01522D6540E4A5B7ECD1457A09B70D3148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:5d:68:9c:29:9f:d4:f3:ed:d4:b0:e5:49:
                    a9:69:83:a1:b9:6e:88:4b:91:a0:aa:2f:a0:f0:46:
                    fd:59:b7:57:ff:1c:7e:2c:ed:8b:00:c7:32:c7:3b:
                    55:c3:99:50:36:f7:f7:01:dc:dc:f6:1a:90:1a:95:
                    c3:3b:b2:32:81:28:94:99:ed:9c:50:01:dc:b4:c7:
                    46:7b:4c:f4:63:91:9e:4e:d7:c1:80:a1:d7:45:86:
                    db:d2:84:c5:c8:7f:90:c0:30:18:b2:e5:b1:18:c9:
                    b4:f3:d3:51:c8:31:1d:d8:65:4c:90:c0:4e:42:18:
                    9a:b7:0a:ba:ae:ad:f7:f9:37:47:d7:30:14:f7:2b:
                    04:e5:c0:c0:03:67:96:92:60:de:a4:86:5c:ab:13:
                    c3:d3:46:c2:03:c9:41:db:42:41:a5:a0:09:95:bc:
                    06:02:b2:fb:89:62:1f:b4:c9:6d:6a:9e:0c:35:12:
                    69:97:20:d0:0d:59:14:90:1d:cd:f2:b5:84:65:07:
                    65:95:c6:e3:ce:82:00:5a:61:ef:ee:ba:c3:75:8a:
                    ed:b6:cc:23:0a:86:96:ff:0a:75:8f:b7:97:97:d6:
                    b4:94:4b:bb:53:c8:4a:61:12:66:74:ea:e4:e6:73:
                    aa:48:3a:c4:a1:99:18:2a:dc:4d:86:8f:a3:a7:52:
                    85:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:60:6C:01:52:2D:65:40:E4:A5:B7:EC:D1:45:7A:09:B7:0D:31:48
            X509v3 Authority Key Identifier:
                keyid:E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3135302e302f32342d3234203d3e20323634373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:a5:bd:f1:f3:3d:fa:48:2b:7c:d0:9e:da:40:99:14:bf:32:
         3c:58:cc:86:32:d5:ef:e8:f3:2e:a3:ca:f4:d1:8c:38:00:09:
         10:1a:a4:ca:7e:40:8a:0b:83:d9:42:28:dd:18:90:86:43:49:
         72:42:96:a3:19:12:87:96:00:ee:b1:e6:d8:b0:45:8f:13:04:
         89:d5:ea:38:16:c6:ff:a0:3a:2b:cb:7c:55:b6:ad:cb:b8:70:
         ae:19:86:3d:d7:cb:76:42:77:a8:7a:f0:35:7d:a7:ab:c7:38:
         47:6e:2c:59:19:15:a7:aa:b7:48:b5:ac:80:15:24:8e:32:3c:
         77:c8:90:3c:7e:9f:8b:6e:99:c5:2f:58:2b:3b:9d:37:53:5a:
         7d:3a:76:b2:de:89:d7:94:7d:6b:f2:f0:70:5c:a5:eb:2d:00:
         d6:b7:9b:61:18:a7:9c:b8:da:67:13:00:f1:32:e5:b1:0a:7a:
         ee:3b:45:b9:66:c0:1e:db:8f:8a:4b:8d:f4:87:3d:96:52:6f:
         7f:16:26:99:ef:6c:81:b6:aa:81:4a:a4:b5:03:e0:99:c2:ab:
         34:2e:cd:04:d4:08:cb:e1:fe:b1:4c:05:02:9a:14:7b:b8:6f:
         53:7d:66:9e:03:11:b7:d3:c3:bd:85:ed:49:a4:82:4f:9a:84:
         c7:88:27:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:38:39 2026 by rpki-client