This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e342e302f32342d3234203d3e20323730313439.roa
File:                     3135392e31362e342e302f32342d3234203d3e20323730313439.roa (raw, json)
Hash identifier:          LvbpS+dayCqWocdlPgTLx2hD4Dr9gc/evY8uYiGWLZQ=
Subject key identifier:   ED:10:69:89:7F:99:DE:F1:FE:CD:5B:1F:43:7B:26:42:68:72:F9:08
Certificate issuer:       /CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
Certificate serial:       06C082558DA1A2E0C06BF0BD75BE838A6B64F2D8
Authority key identifier: D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e342e302f32342d3234203d3e20323730313439.roa
Signing time:             Tue 06 Jan 2026 20:51:25 +0000
ROA not before:           Tue 06 Jan 2026 20:46:25 +0000
ROA not after:            Tue 05 Jan 2027 20:51:25 +0000
asID:                     270149
IP address blocks:        159.16.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c0:82:55:8d:a1:a2:e0:c0:6b:f0:bd:75:be:83:8a:6b:64:f2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3ECA9E328BAD678A3AD28C9C53518EF9ED06703
        Validity
            Not Before: Jan  6 20:46:25 2026 GMT
            Not After : Jan  5 20:51:25 2027 GMT
        Subject: CN=ED1069897F99DEF1FECD5B1F437B26426872F908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e8:75:4f:6c:2e:22:5e:92:fb:69:4c:db:00:
                    10:2e:fc:39:f0:03:c0:3d:57:52:1b:a1:a0:c6:6d:
                    ee:be:05:42:ad:1f:db:fe:e5:2f:f7:f0:2a:82:83:
                    d8:5c:05:8e:3b:14:8a:23:ba:96:7f:57:f0:4c:84:
                    70:e3:1a:a2:0c:fa:d0:b1:3d:df:81:67:95:16:33:
                    75:70:7f:55:86:3d:30:37:25:f6:d4:8b:2d:08:7a:
                    df:6e:7f:bc:4a:69:6e:e6:0b:db:6c:73:00:b5:fc:
                    5f:61:51:d5:99:a2:fc:e6:a8:5d:b7:b5:e4:2a:19:
                    59:95:9e:78:79:9a:b3:ab:03:e3:cd:d2:25:f5:e9:
                    ca:1b:ed:d4:4b:1b:b3:4e:43:2c:b4:00:90:21:af:
                    63:74:ba:da:07:2b:5b:a9:d0:67:9c:88:6d:c7:2b:
                    0c:0b:2f:82:47:f3:d4:4d:69:52:07:c8:c0:68:eb:
                    f7:22:a5:44:05:37:af:84:80:ce:f3:9e:2a:db:df:
                    11:3e:c4:64:23:0e:7e:4d:52:b9:94:7b:fc:08:fb:
                    0f:25:06:12:82:0d:b9:be:a5:73:e0:98:87:2c:d3:
                    7a:ed:95:c1:19:89:2e:28:90:a9:0a:d9:99:3d:dd:
                    7e:02:d0:4a:04:21:e1:0a:54:b5:35:c5:c6:c4:a1:
                    a6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:10:69:89:7F:99:DE:F1:FE:CD:5B:1F:43:7B:26:42:68:72:F9:08
            X509v3 Authority Key Identifier:
                keyid:D3:EC:A9:E3:28:BA:D6:78:A3:AD:28:C9:C5:35:18:EF:9E:D0:67:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3ECA9E328BAD678A3AD28C9C53518EF9ED06703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4B9AA7740AEAAC1942C6D49BD0C759EECBC0A6F31BE3828958A9A9A763ABB11/0/3135392e31362e342e302f32342d3234203d3e20323730313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.16.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:e1:eb:f5:e7:26:e4:d9:5f:04:c8:8e:4c:7c:97:61:75:e9:
         07:95:cc:d6:3d:05:fd:04:df:02:b3:97:a0:df:b2:1f:ed:04:
         06:b4:78:60:55:ef:d6:5d:cb:ec:b6:26:68:2b:bf:15:78:c7:
         f4:df:3d:18:a7:39:29:43:6f:bc:d2:89:26:e9:74:0b:fb:de:
         fb:ad:ad:e4:cb:fa:ad:43:d3:b5:6b:1e:98:42:4d:0b:d1:d7:
         c3:cb:54:a5:29:ca:19:61:56:c5:d1:aa:ef:45:0f:75:68:2b:
         68:c0:c7:3b:85:0f:87:62:b1:c1:fd:5d:41:fc:71:6a:86:d3:
         60:6a:fa:86:c6:1e:39:b4:e2:0d:00:dd:ad:2d:74:32:ac:88:
         d3:1b:db:c9:8d:f9:86:2f:8b:b6:bf:58:e3:64:b3:68:c0:f0:
         15:b1:ab:5f:64:89:8e:36:91:de:29:26:d9:1d:06:2d:55:21:
         4a:9c:78:7f:1c:0b:e9:a5:44:ad:cd:25:9b:15:b5:19:47:15:
         ed:8a:92:51:55:09:16:b9:e4:0b:3d:1c:d1:1f:aa:58:d7:e0:
         bc:4d:16:64:3f:fa:86:fa:12:bb:39:ad:1d:55:22:83:7c:f4:
         5a:ad:97:1c:eb:ab:76:c2:40:63:98:6b:1f:4d:e0:bf:9d:0d:
         ff:e2:d9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:26:41 2026 by rpki-client