This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3136382e3138312e3230382e302f32322d3234203d3e203532343336.roa
File:                     3136382e3138312e3230382e302f32322d3234203d3e203532343336.roa (raw, json)
Hash identifier:          16prafAnFeH29V4vRU1g1i1tMmnvHYO8t7EFhjGaicc=
Subject key identifier:   95:5B:9B:F0:28:B5:8B:86:0F:16:60:04:23:8A:BF:CB:65:DB:15:36
Certificate issuer:       /CN=0DD8C886E7D641E553703DC5E196957F1368902C
Certificate serial:       55422FD55FEF6CBC079B053546042DF3F8AA2D4C
Authority key identifier: 0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3136382e3138312e3230382e302f32322d3234203d3e203532343336.roa
Signing time:             Tue 06 Jan 2026 19:28:45 +0000
ROA not before:           Tue 06 Jan 2026 19:23:45 +0000
ROA not after:            Tue 05 Jan 2027 19:28:45 +0000
asID:                     52436
IP address blocks:        168.181.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 09:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:42:2f:d5:5f:ef:6c:bc:07:9b:05:35:46:04:2d:f3:f8:aa:2d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD8C886E7D641E553703DC5E196957F1368902C
        Validity
            Not Before: Jan  6 19:23:45 2026 GMT
            Not After : Jan  5 19:28:45 2027 GMT
        Subject: CN=955B9BF028B58B860F166004238ABFCB65DB1536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:48:9a:88:60:c7:04:6a:86:4b:d5:5c:27:
                    1d:23:3b:90:50:c7:1d:61:be:be:e2:83:4f:e7:3b:
                    b1:d1:56:df:7d:e5:ec:fd:6c:6e:bf:c2:aa:4e:f1:
                    f0:d2:fb:ee:df:b0:fc:d5:7e:6e:f0:12:49:1f:ad:
                    68:6e:95:87:91:2d:5f:2f:b5:b2:6e:34:8e:4e:1a:
                    bd:16:ce:37:c3:cb:85:69:83:cb:2b:56:57:83:53:
                    cc:2f:f3:18:cf:3d:27:65:71:1f:e2:db:e6:29:57:
                    0b:82:72:cc:6c:62:9f:df:cf:00:df:af:a3:a2:15:
                    95:a4:6f:1a:65:d5:78:c8:e2:b1:9b:47:f3:43:69:
                    cc:a0:57:5f:b8:c4:d3:19:0f:ca:14:1e:31:f3:3a:
                    66:1b:0f:f8:ea:57:dc:98:6d:d1:36:61:4e:a2:d0:
                    69:c3:4b:38:22:72:aa:41:26:2c:1d:5c:93:9b:a5:
                    d8:8c:ad:66:fd:1b:d9:37:9e:03:f7:76:2c:dd:32:
                    7b:6d:f3:d9:8a:42:20:29:da:32:85:ad:f1:f5:97:
                    d7:78:02:13:d1:c3:4e:15:f6:02:95:07:25:07:21:
                    67:66:08:85:ba:24:d5:6a:71:16:55:c4:59:8b:24:
                    65:4a:14:10:b0:b3:90:27:3a:75:32:d0:3a:42:07:
                    82:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5B:9B:F0:28:B5:8B:86:0F:16:60:04:23:8A:BF:CB:65:DB:15:36
            X509v3 Authority Key Identifier:
                keyid:0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3136382e3138312e3230382e302f32322d3234203d3e203532343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:72:a1:f7:83:b6:b8:3f:aa:ea:87:83:1d:f8:ed:2e:e9:12:
         20:38:31:aa:a4:1c:1e:4d:8c:88:f4:8f:e4:ed:7b:d4:61:e9:
         0e:19:8a:55:71:30:6a:34:bf:14:a0:6d:6c:8d:49:e4:99:2c:
         ac:28:d7:41:1c:ed:98:f8:a3:a3:6b:71:0f:3a:d1:4c:3c:8b:
         16:e0:dc:1a:f4:4e:7f:c9:99:0c:e9:72:fa:bf:4e:7a:1b:3b:
         e5:82:8a:f9:cb:5a:57:55:6b:56:36:3a:08:fd:f9:1f:46:3f:
         fa:03:1d:c5:2b:9a:ed:de:fb:76:be:75:87:97:d8:ba:b7:71:
         e9:93:3c:59:0a:99:d4:61:c9:89:ec:47:e0:2e:33:6e:95:81:
         26:23:cc:35:7f:e1:11:93:55:a8:a2:d8:7b:3b:9c:fc:03:b3:
         74:62:b1:a5:2a:4f:3d:d5:a9:87:c5:8a:a8:31:bc:aa:f8:8e:
         ce:36:2f:a1:8b:89:8b:5c:53:f2:01:cf:2d:9d:68:a7:61:c2:
         2c:56:d3:28:c3:d0:c2:e7:1e:7a:28:59:27:7b:8e:7e:f8:b2:
         f5:76:c1:86:b5:92:1c:87:e2:9d:ab:ae:51:57:12:80:87:e6:
         7a:c4:54:dc:47:ef:dd:aa:d9:d8:25:11:aa:66:d1:3d:b9:48:
         55:cb:b3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:32:02 2026 by rpki-client