This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234392e302f32342d3234203d3e20323634373031.roa
File:                     3136382e3233322e3234392e302f32342d3234203d3e20323634373031.roa (raw, json)
Hash identifier:          /SG2g6mWfWy2KW6yw2x1WVd+bUqUWlSPRBiGHMAH6+U=
Subject key identifier:   25:D0:CF:32:F3:76:B5:24:24:FB:F2:EB:E0:A2:17:99:6A:D7:D8:16
Certificate issuer:       /CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
Certificate serial:       6C82F23236AD26812B222828E0D283CF66A598DF
Authority key identifier: 15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234392e302f32342d3234203d3e20323634373031.roa
Signing time:             Tue 06 Jan 2026 19:22:45 +0000
ROA not before:           Tue 06 Jan 2026 19:17:45 +0000
ROA not after:            Tue 05 Jan 2027 19:22:45 +0000
asID:                     264701
IP address blocks:        168.232.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 16:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:82:f2:32:36:ad:26:81:2b:22:28:28:e0:d2:83:cf:66:a5:98:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
        Validity
            Not Before: Jan  6 19:17:45 2026 GMT
            Not After : Jan  5 19:22:45 2027 GMT
        Subject: CN=25D0CF32F376B52424FBF2EBE0A217996AD7D816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7d:57:01:58:ee:39:ba:e6:bb:c3:15:0c:9b:
                    d7:77:70:9f:b1:c6:b9:26:4d:f6:73:70:30:6c:64:
                    f3:ce:02:b3:e3:e2:79:f9:83:6d:75:ee:69:4a:b1:
                    a1:2e:7d:0d:cf:eb:d6:ec:66:01:e3:1a:87:cb:e6:
                    62:74:e0:73:9c:8f:9d:30:86:0a:16:98:fd:52:f2:
                    d5:64:44:87:ac:6c:95:e4:0b:a4:a8:e1:15:37:61:
                    8c:b4:de:87:28:c9:f0:79:d2:a4:8a:80:65:2b:dd:
                    86:2e:bd:d3:5c:41:24:2c:15:65:c2:f7:68:08:2d:
                    c7:06:ed:46:ad:16:e9:4b:97:d4:37:7d:12:48:cc:
                    d8:96:f3:b5:a7:10:77:d4:92:81:2b:58:9e:4c:4a:
                    1b:d2:1d:41:c0:dc:3e:5f:df:b0:dd:90:11:3e:8d:
                    21:94:33:aa:1b:36:09:5c:b3:65:2c:c2:86:97:71:
                    fe:bd:fc:33:08:41:e9:9f:d9:5c:0d:53:8f:cb:b7:
                    00:51:d3:a5:c9:11:74:20:03:cf:0d:95:25:ee:fb:
                    96:f4:72:28:92:34:75:b3:d0:7f:e5:ee:53:bf:58:
                    b6:d5:35:97:68:2a:e7:88:47:e0:ba:ed:c2:4f:f8:
                    54:c5:7c:b4:08:44:ff:d3:78:3d:99:d1:0e:64:3a:
                    47:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D0:CF:32:F3:76:B5:24:24:FB:F2:EB:E0:A2:17:99:6A:D7:D8:16
            X509v3 Authority Key Identifier:
                keyid:15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234392e302f32342d3234203d3e20323634373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:6a:12:4a:85:67:49:6a:ac:c1:c3:dc:23:30:ae:14:dd:40:
         a1:53:b9:96:7f:5b:db:72:c5:02:3a:f1:33:6b:9e:ef:ea:6b:
         b7:92:24:37:9c:c8:c5:95:87:3f:1a:13:5e:18:f6:83:0b:61:
         b1:3a:ca:c2:9c:37:63:28:95:1d:c3:38:e7:e3:d8:32:90:aa:
         34:ac:ab:75:65:f2:e4:10:4a:95:c6:dc:2a:5f:17:77:51:ae:
         ef:a8:be:45:b9:47:bf:d2:3f:3f:c9:a6:71:c6:0e:3e:48:28:
         01:d9:ca:46:24:ba:56:82:b5:c1:bf:55:7d:44:ad:78:0d:e5:
         04:b0:cf:8c:a1:6c:73:e7:24:2e:7e:3b:1d:9b:b5:23:e9:a1:
         7f:1a:52:52:57:9b:59:39:27:15:fa:44:07:90:a4:48:b8:72:
         43:5e:05:cd:c1:17:59:4c:7c:8a:fb:09:80:1a:d6:e0:a1:26:
         b5:bb:bd:04:61:f6:c0:1a:86:ae:3f:21:4a:c3:8f:2b:1a:e4:
         da:ba:f6:a8:80:b0:d4:a2:1a:9d:d0:22:b3:dd:d0:13:c2:90:
         55:5b:71:7d:d8:91:51:4a:4d:22:60:3e:82:2a:df:a5:08:27:
         49:4a:20:ff:47:ce:3c:cc:d5:d7:3f:f0:74:be:1a:4b:30:88:
         b8:fb:89:2d
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUbILyMjatJoErIigo4NKDz2almN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVDMzQ0OTI5M0FFOTFCNjUyNDRFODlBMUI0QUVFQzdE
QzAxOTM1RDAeFw0yNjAxMDYxOTE3NDVaFw0yNzAxMDUxOTIyNDVaMDMxMTAvBgNV
BAMTKDI1RDBDRjMyRjM3NkI1MjQyNEZCRjJFQkUwQTIxNzk5NkFEN0Q4MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcfVcBWO45uua7wxUMm9d3cJ+x
xrkmTfZzcDBsZPPOArPj4nn5g2117mlKsaEufQ3P69bsZgHjGofL5mJ04HOcj50w
hgoWmP1S8tVkRIesbJXkC6So4RU3YYy03ocoyfB50qSKgGUr3YYuvdNcQSQsFWXC
92gILccG7UatFulLl9Q3fRJIzNiW87WnEHfUkoErWJ5MShvSHUHA3D5f37DdkBE+
jSGUM6obNglcs2UswoaXcf69/DMIQemf2VwNU4/LtwBR06XJEXQgA88NlSXu+5b0
ciiSNHWz0H/l7lO/WLbVNZdoKueIR+C67cJP+FTFfLQIRP/TeD2Z0Q5kOkc/AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUJdDPMvN2tSQk+/Lr4KIXmWrX2BYwHwYDVR0j
BBgwFoAUFcNEkpOukbZSROiaG0rux9wBk10wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQjEyOTA3RTAyN0FGNDBFMUM2REI2NDFFNUE2MjgwM0U4
MzQwODNGMTdFNTE3NUY0QzlFNENFMEZDMDNDRDU0LzAvMTVDMzQ0OTI5M0FFOTFC
NjUyNDRFODlBMUI0QUVFQzdEQzAxOTM1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNUMzNDQ5MjkzQUU5MUI2NTI0
NEU4OUExQjRBRUVDN0RDMDE5MzVELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREIxMjkwN0UwMjdBRjQwRTFDNkRCNjQxRTVBNjI4MDNFODM0MDgzRjE3
RTUxNzVGNEM5RTRDRTBGQzAzQ0Q1NC8wLzMxMzYzODJlMzIzMzMyMmUzMjM0Mzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNzMwMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo
6PkwDQYJKoZIhvcNAQELBQADggEBAFxqEkqFZ0lqrMHD3CMwrhTdQKFTuZZ/W9ty
xQI68TNrnu/qa7eSJDecyMWVhz8aE14Y9oMLYbE6ysKcN2MolR3DOOfj2DKQqjSs
q3Vl8uQQSpXG3CpfF3dRru+ovkW5R7/SPz/JpnHGDj5IKAHZykYkulaCtcG/VX1E
rXgN5QSwz4yhbHPnJC5+Ox2btSPpoX8aUlJXm1k5JxX6RAeQpEi4ckNeBc3BF1lM
fIr7CYAa1uChJrW7vQRh9sAahq4/IUrDjysa5Nq69qiAsNSiGp3QIrPd0BPCkFVb
cX3YkVFKTSJgPoIq36UIJ0lKIP9HzjzM1dc/8HS+GkswiLj7iS0=
-----END CERTIFICATE-----
Generated at Tue Jan 13 05:12:06 2026 by rpki-client