This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C154DC6889E51919AF7524A66F2383AC7C10E6499A785A24B6654105CF04A223/0/3132382e3230312e3233362e302f32322d3234203d3e20323635373439.roa
File:                     3132382e3230312e3233362e302f32322d3234203d3e20323635373439.roa (raw, json)
Hash identifier:          yLTCJdwJXWj/4LOfh3GqP1Wk3+eeFpFL+VY3cZEPvZI=
Subject key identifier:   96:F8:42:1B:EE:48:49:10:C6:3F:61:CD:A0:24:DC:FB:93:EB:BF:E4
Certificate issuer:       /CN=1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D
Certificate serial:       4504D26E77077B3DA691FC85947A75F0A01B1F7B
Authority key identifier: 1C:F3:A7:C8:B8:69:FE:DE:23:D6:DD:16:E8:DA:1F:B8:0C:68:6C:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C154DC6889E51919AF7524A66F2383AC7C10E6499A785A24B6654105CF04A223/0/3132382e3230312e3233362e302f32322d3234203d3e20323635373439.roa
Signing time:             Tue 06 Jan 2026 19:04:44 +0000
ROA not before:           Tue 06 Jan 2026 18:59:44 +0000
ROA not after:            Tue 05 Jan 2027 19:04:44 +0000
asID:                     265749
IP address blocks:        128.201.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C154DC6889E51919AF7524A66F2383AC7C10E6499A785A24B6654105CF04A223/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C154DC6889E51919AF7524A66F2383AC7C10E6499A785A24B6654105CF04A223/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 16:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:04:d2:6e:77:07:7b:3d:a6:91:fc:85:94:7a:75:f0:a0:1b:1f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D
        Validity
            Not Before: Jan  6 18:59:44 2026 GMT
            Not After : Jan  5 19:04:44 2027 GMT
        Subject: CN=96F8421BEE484910C63F61CDA024DCFB93EBBFE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:ad:b2:05:32:e8:3b:2f:48:4d:da:a1:6f:
                    fc:21:b5:1e:f7:29:70:96:52:07:d5:06:8e:a2:c6:
                    5c:4d:3c:97:58:2f:e3:0b:77:48:c0:87:df:4f:af:
                    cd:d8:73:07:bd:0a:11:d9:07:1f:09:30:17:d0:e2:
                    03:be:dd:12:10:46:4c:48:b7:37:5c:e7:eb:13:1f:
                    9a:a8:e2:49:8b:0f:cc:32:04:6f:51:32:ff:ff:61:
                    eb:c3:90:62:ee:9a:6e:0d:8e:29:49:fd:99:1f:3c:
                    0e:11:90:43:4c:fb:3f:06:91:11:19:ad:91:ca:9b:
                    6a:b2:f2:0c:1f:65:4d:aa:78:5b:b5:40:fe:77:5d:
                    13:3a:6e:cc:2a:64:b8:d8:4d:ff:2d:e7:a6:02:01:
                    59:48:5e:13:e9:f9:84:42:bc:85:f5:39:3d:2d:5a:
                    2d:24:64:0a:31:14:36:25:98:05:57:91:5e:fc:4f:
                    dc:28:77:00:f6:ff:3a:c3:1e:55:71:9e:41:5a:59:
                    03:b3:0a:8e:11:34:af:86:cc:da:50:d7:71:fd:04:
                    22:3f:8d:bc:f8:75:2e:4c:a2:3e:20:fd:ef:47:05:
                    87:41:c0:36:99:bd:c4:85:ca:30:44:f6:9f:fa:b3:
                    88:15:19:50:64:e4:c4:59:f8:1d:23:c8:47:60:b4:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F8:42:1B:EE:48:49:10:C6:3F:61:CD:A0:24:DC:FB:93:EB:BF:E4
            X509v3 Authority Key Identifier:
                keyid:1C:F3:A7:C8:B8:69:FE:DE:23:D6:DD:16:E8:DA:1F:B8:0C:68:6C:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C154DC6889E51919AF7524A66F2383AC7C10E6499A785A24B6654105CF04A223/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CF3A7C8B869FEDE23D6DD16E8DA1FB80C686C7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C154DC6889E51919AF7524A66F2383AC7C10E6499A785A24B6654105CF04A223/0/3132382e3230312e3233362e302f32322d3234203d3e20323635373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:f8:9a:99:4e:4b:4e:d3:e0:49:3c:eb:e6:66:64:1e:dc:e0:
         ee:40:d9:8e:9f:3a:72:2b:b1:f8:f7:6a:56:4a:a1:dd:ee:bb:
         03:6a:fa:e0:7b:47:e0:b4:f0:6c:93:49:c1:57:3c:98:54:57:
         08:58:68:ce:a8:ef:bc:23:9c:2d:62:ed:05:c2:03:b5:81:07:
         0d:14:43:f3:5f:fe:00:3f:2c:8a:2e:52:55:4f:da:f9:ce:be:
         f5:cd:56:6f:37:a3:1f:da:6b:25:5b:d0:f5:f1:c4:06:aa:00:
         5b:a9:36:ec:53:02:68:29:02:83:ef:db:37:fe:10:7c:8e:4d:
         3c:a2:bd:87:ad:9a:fe:2d:a5:01:25:1e:4e:41:97:e0:37:ee:
         7a:fc:a6:45:88:08:48:90:10:c4:45:90:49:c9:0e:5b:1b:1f:
         76:d3:57:68:65:e2:93:0f:40:5c:fb:9a:39:ad:21:91:b0:13:
         75:b8:98:f1:c0:fd:8c:e8:59:5a:9a:ba:0c:65:23:3a:8b:29:
         be:a3:d1:3c:04:c2:27:a8:fb:0a:93:fe:3a:eb:b7:d9:79:f4:
         bf:f8:32:3f:87:3e:93:5f:b3:74:5d:d7:2e:d7:2a:5d:13:c3:
         df:91:b1:4f:94:60:0a:a7:eb:d3:97:21:00:43:12:c3:b4:64:
         fb:d1:4f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:26:46 2026 by rpki-client