This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130382e302f32342d3234203d3e20323635373731.roa
File:                     3132382e3230312e3130382e302f32342d3234203d3e20323635373731.roa (raw, json)
Hash identifier:          nyc7oD4Qjy1+s969wlHZVWTFc1Kml//eO5GFZBmLr2E=
Subject key identifier:   98:78:9B:80:62:26:16:86:D2:23:37:25:6E:9F:AC:98:EF:41:66:48
Certificate issuer:       /CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
Certificate serial:       1E1B312D72B11FDA3CD537A59397F3E87B0A1CEA
Authority key identifier: 8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130382e302f32342d3234203d3e20323635373731.roa
Signing time:             Tue 06 Jan 2026 19:23:44 +0000
ROA not before:           Tue 06 Jan 2026 19:18:44 +0000
ROA not after:            Tue 05 Jan 2027 19:23:44 +0000
asID:                     265771
IP address blocks:        128.201.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 03:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1b:31:2d:72:b1:1f:da:3c:d5:37:a5:93:97:f3:e8:7b:0a:1c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3
        Validity
            Not Before: Jan  6 19:18:44 2026 GMT
            Not After : Jan  5 19:23:44 2027 GMT
        Subject: CN=98789B8062261686D22337256E9FAC98EF416648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:51:3f:97:a6:fe:1d:dd:cc:13:02:9c:ae:12:
                    39:3e:b3:7e:d8:e9:97:81:bc:48:c2:c3:20:5a:0e:
                    fd:1c:8e:60:41:d9:e8:d4:62:0b:28:15:64:a0:42:
                    d7:3a:36:75:31:a8:cc:8a:e8:97:f7:12:16:4f:9d:
                    99:a4:03:da:0c:5d:4c:a7:d8:80:4d:aa:39:2f:2f:
                    8c:dd:a9:9c:ae:dc:85:89:5d:fa:28:e4:fc:0b:d1:
                    9a:a9:ee:36:b0:c2:9f:cc:1e:bc:ac:16:f7:cc:8f:
                    5f:98:47:2e:6d:d0:b6:d3:da:5d:b6:03:35:6b:30:
                    7e:b4:7e:ad:fe:0a:57:72:a8:53:c1:11:6f:0e:0c:
                    da:fa:72:f8:eb:49:a2:bf:10:27:ad:ba:fb:87:1b:
                    97:28:f9:8b:08:b1:a2:c1:2d:b1:36:96:e5:8d:b0:
                    21:7f:d1:e4:94:26:95:c3:1d:46:19:f5:37:d0:85:
                    91:ff:b3:92:f3:d8:46:c4:d4:2d:21:17:fc:0e:ff:
                    b5:2a:66:3e:1a:5b:f8:6d:35:48:a2:05:93:d2:d2:
                    87:c4:4e:fd:7e:eb:7b:12:fb:ec:11:fa:90:01:86:
                    04:cf:65:fb:39:12:53:d3:7a:1e:6b:93:39:41:56:
                    45:bd:ab:5c:c1:d0:cc:03:0b:a0:42:2b:99:fe:95:
                    5a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:78:9B:80:62:26:16:86:D2:23:37:25:6E:9F:AC:98:EF:41:66:48
            X509v3 Authority Key Identifier:
                keyid:8D:A9:C4:56:55:1A:9F:A4:31:85:65:E4:EF:5B:F4:C6:B5:F9:AA:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA9C456551A9FA4318565E4EF5BF4C6B5F9AAC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6E0C00B921CCCC53D273ACD6F3B25FA643983B1920778E10996AD10008779F1/0/3132382e3230312e3130382e302f32342d3234203d3e20323635373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:e6:be:82:c2:f3:29:0b:fd:e6:8b:df:9b:f9:d8:5e:d1:78:
         36:e3:5e:c5:4b:32:b9:45:61:14:f3:87:d7:d8:5b:3a:35:67:
         84:da:d8:ff:66:b6:45:be:6a:45:f6:2c:ba:93:79:e0:11:5d:
         b2:36:00:15:e4:b1:6a:29:14:f6:30:ca:a8:68:4c:36:4a:9c:
         52:6d:80:18:17:e0:51:ff:31:1a:43:f3:c4:2a:67:3e:cf:66:
         77:71:a8:4c:f2:6a:57:45:1f:e4:f5:72:96:99:d3:d7:9f:9e:
         1d:90:01:39:c9:7f:76:a5:07:8c:53:bd:d6:ca:84:e8:ec:f5:
         c5:54:58:d7:4a:fc:2b:50:3a:e0:ec:8e:93:27:d2:08:dc:35:
         b4:7c:8b:5c:f5:8d:a5:1a:5b:71:a2:fc:22:bb:b1:94:89:ea:
         f9:4e:50:ed:fb:20:e6:d7:6b:1f:74:b7:24:85:aa:59:4d:db:
         26:7c:b6:4a:5c:c7:f3:35:e5:83:21:77:fc:a0:0b:37:c5:08:
         c9:d1:c9:f2:c6:48:93:e0:4d:eb:94:fd:52:e0:da:45:63:94:
         a7:94:f9:78:8f:1a:9c:00:d1:bb:20:ed:69:e3:11:00:87:ac:
         87:65:88:31:a3:ad:d6:c2:e2:54:29:6b:83:32:9e:f5:71:6b:
         49:87:b2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 16:01:39 2026 by rpki-client