This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/3136382e3232382e3134302e302f32322d3234203d3e20323634363839.roa
File:                     3136382e3232382e3134302e302f32322d3234203d3e20323634363839.roa (raw, json)
Hash identifier:          5DEUzh49hdufhIEd0VKzdaU9fNttfO3OG839pUrBi5U=
Subject key identifier:   39:79:54:E7:D2:79:3A:96:8A:7C:F0:81:B2:33:89:54:ED:EC:EC:65
Certificate issuer:       /CN=5A3D488DA45F1AFC6FFC9C444732139214BFD47A
Certificate serial:       084F2920FB4681EBDB14DDE58D6115972E8C6EBC
Authority key identifier: 5A:3D:48:8D:A4:5F:1A:FC:6F:FC:9C:44:47:32:13:92:14:BF:D4:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/3136382e3232382e3134302e302f32322d3234203d3e20323634363839.roa
Signing time:             Tue 06 Jan 2026 20:57:15 +0000
ROA not before:           Tue 06 Jan 2026 20:52:15 +0000
ROA not after:            Tue 05 Jan 2027 20:57:15 +0000
asID:                     264689
IP address blocks:        168.228.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4f:29:20:fb:46:81:eb:db:14:dd:e5:8d:61:15:97:2e:8c:6e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3D488DA45F1AFC6FFC9C444732139214BFD47A
        Validity
            Not Before: Jan  6 20:52:15 2026 GMT
            Not After : Jan  5 20:57:15 2027 GMT
        Subject: CN=397954E7D2793A968A7CF081B2338954EDECEC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:5c:cc:c9:d7:93:4d:89:b8:5e:4b:42:d3:3d:
                    3d:5c:0a:ee:6d:f9:81:c4:90:e5:a1:c4:1e:ab:e3:
                    e1:10:8c:e8:36:de:bc:bd:fd:71:f3:18:6d:10:98:
                    14:b4:f4:a8:bb:2b:ee:ae:9d:06:a1:45:a6:97:ee:
                    d1:1e:6c:69:fc:25:db:87:0c:5f:6a:be:1a:06:a3:
                    cd:d9:74:14:80:19:06:7a:ef:5a:90:3c:f7:f6:d3:
                    46:75:54:07:a9:94:10:37:9e:a6:6f:de:79:a3:c6:
                    46:f6:fc:ac:af:1e:f2:74:21:97:56:10:80:32:c6:
                    ed:97:41:19:62:00:a2:13:28:dd:61:76:1c:6b:56:
                    7e:b0:c9:b7:a3:d4:37:0b:a5:23:8e:0a:e6:31:d7:
                    ca:db:4c:a5:47:90:93:7c:a1:bd:4d:4f:db:ee:a8:
                    a4:e1:a5:6e:f7:df:49:14:79:e2:5a:98:04:a9:48:
                    ed:ca:1e:37:82:ef:ae:1c:66:70:ec:b1:b4:2e:63:
                    c5:8a:00:94:cf:d2:53:03:d6:5e:97:68:1b:2f:86:
                    70:35:a4:db:37:b0:8c:50:54:80:cc:1f:79:97:a0:
                    a6:8b:09:8b:18:87:d2:87:62:31:62:4a:f7:6f:6f:
                    ec:94:e1:e6:4d:2d:78:e1:c1:17:c1:ac:87:27:6e:
                    e8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:79:54:E7:D2:79:3A:96:8A:7C:F0:81:B2:33:89:54:ED:EC:EC:65
            X509v3 Authority Key Identifier:
                keyid:5A:3D:48:8D:A4:5F:1A:FC:6F:FC:9C:44:47:32:13:92:14:BF:D4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/3136382e3232382e3134302e302f32322d3234203d3e20323634363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:a7:0b:8c:15:77:78:4c:19:6b:58:e9:4b:38:19:a3:15:ce:
         12:53:31:b1:08:22:56:8a:db:2c:c5:af:3a:59:21:6d:15:e7:
         26:d4:a1:6b:43:89:26:7e:1a:78:4e:8f:ac:7e:e0:46:fc:d6:
         8b:f9:7c:fa:4f:c1:f4:21:b2:d2:4c:9b:fd:18:46:02:c4:b1:
         18:15:39:64:4d:c1:90:b2:1a:0c:be:6c:2e:1f:eb:f1:81:a1:
         d7:3c:15:65:93:92:6d:f1:ec:35:a9:dd:df:f9:9d:3a:93:e5:
         9c:26:fc:54:a5:09:af:4f:f9:cc:6e:fd:f2:b3:5f:08:8e:f0:
         e5:02:58:82:39:23:9f:93:c7:39:0e:be:b2:da:e6:77:bf:6f:
         bd:b8:9e:3d:1e:a7:72:29:05:ea:f2:f8:62:53:5c:c9:14:36:
         e9:61:c5:01:4d:89:0a:6e:0c:55:3d:28:73:c9:91:08:e2:f6:
         d1:88:3e:e8:40:7e:1f:28:c4:e7:8f:44:a7:14:d3:50:5e:0f:
         3b:f2:90:d5:dd:51:d3:f7:47:f6:e3:a2:2c:14:2a:82:e9:50:
         10:9f:86:0c:a5:98:98:8f:49:26:82:f1:90:2f:15:2e:50:6b:
         67:b4:74:f8:56:73:93:6e:b9:22:12:5a:0b:27:b2:f2:59:95:
         35:31:d2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:35 2026 by rpki-client