This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e3234332e302f32342d3234203d3e2036343731.roa
File:                     3136342e37372e3234332e302f32342d3234203d3e2036343731.roa (raw, json)
Hash identifier:          PVTdr0h8zwRfbuh0OjIL+9Z12ALKkt0aTxMnaib2WH4=
Subject key identifier:   33:AB:33:B8:A9:3C:0D:F8:DF:85:7B:EA:68:A4:E1:91:A2:24:8A:82
Certificate issuer:       /CN=2652C1433114197317FCA49E051F361760D69E0E
Certificate serial:       578EF8DC8B041630CBF0D4C588BAA4C2A0AD4B8D
Authority key identifier: 26:52:C1:43:31:14:19:73:17:FC:A4:9E:05:1F:36:17:60:D6:9E:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e3234332e302f32342d3234203d3e2036343731.roa
Signing time:             Tue 06 Jan 2026 20:51:53 +0000
ROA not before:           Tue 06 Jan 2026 20:46:53 +0000
ROA not after:            Tue 05 Jan 2027 20:51:53 +0000
asID:                     6471
IP address blocks:        164.77.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8e:f8:dc:8b:04:16:30:cb:f0:d4:c5:88:ba:a4:c2:a0:ad:4b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2652C1433114197317FCA49E051F361760D69E0E
        Validity
            Not Before: Jan  6 20:46:53 2026 GMT
            Not After : Jan  5 20:51:53 2027 GMT
        Subject: CN=33AB33B8A93C0DF8DF857BEA68A4E191A2248A82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8b:6d:16:aa:10:02:10:16:f3:5f:07:4d:65:
                    16:0e:7e:a4:76:84:49:e4:a2:b6:62:fc:a8:1c:56:
                    f8:e6:a0:15:7e:79:9c:b6:dd:bb:c8:94:d5:50:95:
                    68:f5:b2:3d:9d:08:ab:30:f7:90:2b:23:0c:04:c6:
                    14:38:2b:5d:65:00:37:fa:13:94:27:9c:b0:54:f5:
                    46:05:9b:50:e6:98:7b:cf:49:5a:27:f5:56:fc:bb:
                    42:2a:4f:49:a2:b3:08:87:e2:40:51:73:fe:f2:57:
                    ef:98:a1:8d:30:03:52:1c:0e:65:03:6e:af:fe:8f:
                    31:b4:54:8b:e0:68:59:8a:62:33:ed:4b:cd:51:6f:
                    c8:fc:e0:f9:1c:3f:56:88:ac:5b:17:5d:b7:75:90:
                    1e:c6:30:95:14:f0:10:50:74:b1:64:e6:4a:65:d5:
                    fc:7a:fe:9c:b1:2f:b1:39:2a:62:7a:3c:1f:1a:d2:
                    d2:3c:a2:ac:91:67:a2:ab:26:73:f0:26:11:7e:a2:
                    2a:27:9f:9a:12:d0:c5:02:b6:92:0e:0c:ff:2a:86:
                    e5:60:5a:8d:fa:4e:a5:d9:04:41:67:d2:c3:ff:15:
                    98:c8:7f:68:0e:cf:ea:af:20:93:fb:22:4f:cf:6d:
                    d6:bc:30:74:02:a7:5e:d3:d3:ce:9c:fc:db:a5:1c:
                    f6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AB:33:B8:A9:3C:0D:F8:DF:85:7B:EA:68:A4:E1:91:A2:24:8A:82
            X509v3 Authority Key Identifier:
                keyid:26:52:C1:43:31:14:19:73:17:FC:A4:9E:05:1F:36:17:60:D6:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e3234332e302f32342d3234203d3e2036343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.77.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:e1:d6:78:de:75:85:33:63:22:48:f0:f8:94:e8:ac:9c:4a:
         34:8e:91:73:98:1c:7c:a9:81:c4:c2:26:c6:e8:06:3f:cd:b4:
         b0:34:a6:e2:4c:ce:2f:2b:63:a2:35:f3:25:f5:a1:dc:b2:60:
         a6:9f:c8:77:4d:02:72:28:5b:a2:63:ef:88:6b:b9:99:ee:2e:
         d6:88:5e:2f:26:98:e2:90:b3:cb:e4:58:fe:f1:76:07:da:e9:
         fd:bd:43:2d:c4:5a:9c:78:b3:d4:bb:24:fc:63:5f:2f:06:50:
         69:72:23:6f:77:c8:cf:9f:49:e3:26:64:68:f0:1d:e2:a2:6e:
         de:dc:9d:69:70:b9:5c:91:fe:d2:a5:5c:80:cc:1f:78:cc:e0:
         35:25:bd:af:9d:74:c0:4b:96:74:e9:f8:74:b1:ee:0f:e9:9e:
         e4:fe:22:e8:c2:02:05:2f:4c:cd:e5:28:a6:05:52:76:28:87:
         22:21:1f:9e:68:e7:51:16:fa:d7:88:97:bb:e3:e4:30:ed:b0:
         07:2c:8d:33:1b:2f:fd:be:48:a4:84:6b:85:1b:8e:42:0b:c8:
         a8:90:1a:b4:c7:b5:f4:dc:dc:0e:30:bd:f1:f2:8b:6d:2d:28:
         0f:89:e4:82:c8:42:e2:24:bb:e6:dc:54:80:07:06:6b:1c:f9:
         64:ec:b0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:50:33 2026 by rpki-client