This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e302e302f31362d3234203d3e203237363531.roa
File:                     3136342e37372e302e302f31362d3234203d3e203237363531.roa (raw, json)
Hash identifier:          DtBW6dxlADsLgfvOVA+yi7oaJL83sfwmh+I5cB72D0k=
Subject key identifier:   B7:C3:3C:7C:F3:91:AB:F9:1F:8C:D2:81:60:D7:CF:96:7B:9D:23:DE
Certificate issuer:       /CN=2652C1433114197317FCA49E051F361760D69E0E
Certificate serial:       258C3892C8103E9A0D1E8177881DDD86AC67E587
Authority key identifier: 26:52:C1:43:31:14:19:73:17:FC:A4:9E:05:1F:36:17:60:D6:9E:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e302e302f31362d3234203d3e203237363531.roa
Signing time:             Tue 06 Jan 2026 20:51:54 +0000
ROA not before:           Tue 06 Jan 2026 20:46:54 +0000
ROA not after:            Tue 05 Jan 2027 20:51:54 +0000
asID:                     27651
IP address blocks:        164.77.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8c:38:92:c8:10:3e:9a:0d:1e:81:77:88:1d:dd:86:ac:67:e5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2652C1433114197317FCA49E051F361760D69E0E
        Validity
            Not Before: Jan  6 20:46:54 2026 GMT
            Not After : Jan  5 20:51:54 2027 GMT
        Subject: CN=B7C33C7CF391ABF91F8CD28160D7CF967B9D23DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:81:e9:af:98:3a:73:56:a2:1e:01:c9:52:
                    18:7c:e7:2d:bf:be:f1:0f:a4:33:de:db:55:15:25:
                    68:b9:14:a7:57:7b:18:58:28:3d:32:e7:09:58:7d:
                    11:19:37:db:df:a0:6f:09:83:dd:7e:6e:f7:79:60:
                    14:c0:9d:98:bd:3d:28:3a:7a:39:4c:1c:d2:89:2a:
                    b0:30:4c:b3:a7:6a:92:99:12:db:a3:e8:29:8d:14:
                    eb:f7:4a:93:ab:bb:fd:3c:47:71:85:61:e1:77:88:
                    80:20:73:b5:7c:a7:0d:c1:e5:84:65:9a:6d:d2:e8:
                    07:a3:0b:90:4f:4a:59:3a:bb:12:4a:7b:13:76:ff:
                    d7:72:db:81:8b:d9:d7:54:fc:02:33:a8:ef:61:a3:
                    51:ec:db:2a:c6:61:72:32:82:ae:ed:f7:a1:26:28:
                    6e:c8:bb:a6:ad:79:91:76:62:75:86:c8:37:1e:5d:
                    5e:5b:c4:1d:51:49:01:64:04:b8:be:e0:59:56:95:
                    bf:3a:e6:a0:da:2a:c7:63:60:7f:2b:a4:ff:9b:0d:
                    91:dc:8d:4a:11:29:f2:14:51:ee:44:7a:ec:e6:30:
                    1b:f3:f3:63:f8:05:0a:fe:76:f6:3d:94:4f:f7:d7:
                    78:c1:5c:c2:cf:10:0a:31:28:cf:28:d5:0a:af:76:
                    52:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C3:3C:7C:F3:91:AB:F9:1F:8C:D2:81:60:D7:CF:96:7B:9D:23:DE
            X509v3 Authority Key Identifier:
                keyid:26:52:C1:43:31:14:19:73:17:FC:A4:9E:05:1F:36:17:60:D6:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e302e302f31362d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.77.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9b:42:aa:13:d0:61:ea:4a:97:fa:6a:13:08:fe:9f:47:b0:c9:
         5d:aa:eb:e4:3f:81:bc:90:02:33:f0:95:9b:91:c0:e2:ba:79:
         e9:dc:b3:65:57:83:d1:d0:cb:60:da:c9:b5:98:fc:26:9f:eb:
         87:62:52:43:de:db:b5:17:45:d9:7a:fa:b3:52:52:0d:23:59:
         a7:94:fd:ae:44:c2:2e:2e:3b:7c:c4:3a:78:c3:13:4e:fe:40:
         fd:83:ee:d7:96:1a:bc:f2:ed:e2:72:99:7f:b2:ee:08:3a:0c:
         ed:fe:16:33:09:eb:08:da:1b:4d:77:e9:9f:88:9e:92:70:b6:
         33:d2:18:1d:e5:f5:95:21:20:0c:ba:03:8c:1d:22:b0:ab:34:
         32:28:91:d3:0b:8e:13:db:73:46:6f:b0:38:2c:f6:e2:c4:c0:
         92:f1:72:0d:12:83:6d:4d:4d:e6:7a:61:15:d8:42:72:4d:ff:
         db:44:31:98:79:d1:42:80:f7:f0:c3:77:cc:07:fe:4e:29:da:
         f1:e3:6f:54:8d:0d:d9:f2:15:76:80:19:37:cc:d2:49:94:61:
         a2:d5:d3:82:3f:04:de:a5:ba:87:70:08:27:fb:42:f6:93:b2:
         b0:74:4a:4f:cf:fc:96:46:23:61:4c:a2:3f:1a:17:28:64:b6:
         80:0f:94:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:19:18 2026 by rpki-client