This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/3136342e3136332e3138382e302f32322d3234203d3e203238333938.roa
File:                     3136342e3136332e3138382e302f32322d3234203d3e203238333938.roa (raw, json)
Hash identifier:          nVSXyjCaaMU0eAOGhtn+93oj84kr0zNijpWy3UTDtKQ=
Subject key identifier:   F6:D5:F8:3B:6B:84:43:5A:A1:73:C6:BD:83:C3:CF:8C:6D:3A:F2:6C
Certificate issuer:       /CN=2944F2D96674AA0C160B60053EA3A61E1232E82C
Certificate serial:       162FD6841BAA2F4901E467463F77B21B98FA8C71
Authority key identifier: 29:44:F2:D9:66:74:AA:0C:16:0B:60:05:3E:A3:A6:1E:12:32:E8:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/3136342e3136332e3138382e302f32322d3234203d3e203238333938.roa
Signing time:             Tue 06 Jan 2026 19:00:29 +0000
ROA not before:           Tue 06 Jan 2026 18:55:29 +0000
ROA not after:            Tue 05 Jan 2027 19:00:29 +0000
asID:                     28398
IP address blocks:        164.163.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2f:d6:84:1b:aa:2f:49:01:e4:67:46:3f:77:b2:1b:98:fa:8c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2944F2D96674AA0C160B60053EA3A61E1232E82C
        Validity
            Not Before: Jan  6 18:55:29 2026 GMT
            Not After : Jan  5 19:00:29 2027 GMT
        Subject: CN=F6D5F83B6B84435AA173C6BD83C3CF8C6D3AF26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8e:ff:24:c4:6a:2e:a7:69:93:64:ff:bc:df:
                    7d:30:0a:c8:b7:61:16:e7:5e:31:ac:a8:64:e0:eb:
                    20:4f:ee:0f:3e:90:e1:2a:08:79:51:a2:3e:fd:6a:
                    ba:8b:b6:3b:61:08:14:7a:78:7c:65:95:58:d0:6c:
                    b2:57:b5:52:81:c9:ee:ae:ae:2a:b3:9f:4b:8f:01:
                    37:f0:b0:1d:08:32:88:d8:51:d8:2e:4f:93:7f:8e:
                    d6:43:09:f5:86:3c:80:e2:8e:4e:3b:b9:ec:4e:24:
                    e4:c8:89:49:b9:c9:08:87:e2:55:6f:a1:5c:bd:3d:
                    25:a4:3b:3a:fe:f2:08:0b:6d:d8:f3:77:db:b6:c0:
                    c6:0e:12:aa:ce:7c:27:64:4d:42:c7:6c:cd:da:ef:
                    15:c4:12:6e:e4:61:56:fa:52:c6:c8:e9:6b:f6:e5:
                    d0:d0:fe:ac:80:e0:7c:12:f8:00:fc:79:c0:88:ae:
                    5c:d9:92:7e:c3:8d:5a:5a:32:e4:6d:c5:92:7d:12:
                    20:70:38:15:4f:28:9a:10:60:ad:a0:43:6c:c9:d7:
                    1f:8e:45:a1:46:70:a0:0b:2f:6b:18:44:e9:2c:06:
                    b8:90:bf:d7:9a:46:9a:f0:c7:1c:92:4e:03:bb:36:
                    f2:24:4e:2e:b7:fc:0b:52:07:74:a9:db:6e:ac:38:
                    ca:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D5:F8:3B:6B:84:43:5A:A1:73:C6:BD:83:C3:CF:8C:6D:3A:F2:6C
            X509v3 Authority Key Identifier:
                keyid:29:44:F2:D9:66:74:AA:0C:16:0B:60:05:3E:A3:A6:1E:12:32:E8:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2944F2D96674AA0C160B60053EA3A61E1232E82C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF1C4FB54417F45994F002F6EB83B7CAF5A3F3683B3376EEA623E22FAA172134/0/3136342e3136332e3138382e302f32322d3234203d3e203238333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:61:01:eb:90:9c:8f:08:30:ac:46:d6:9d:2f:09:08:14:f6:
         0a:6e:19:93:22:8a:13:0d:2d:bb:ad:a9:f0:2b:4e:1c:cf:87:
         a0:de:bd:56:6b:bb:48:4e:8c:34:17:71:8c:9a:4a:26:b3:75:
         85:8a:39:77:31:f4:2e:5c:a5:33:7e:73:81:69:06:a0:12:88:
         27:34:53:0d:b4:a6:bb:3b:16:13:57:8c:ad:ed:ca:76:20:5a:
         75:50:f4:40:bf:3d:e2:65:e7:ea:90:56:ba:e2:c3:1f:71:b9:
         34:4b:60:ed:d2:0c:1b:26:a6:1e:07:bb:29:0a:2e:bb:2d:37:
         0f:c3:e0:46:de:f6:18:75:c7:9e:81:f6:b5:d4:fe:8c:03:34:
         69:45:0a:e3:4b:45:ab:89:44:43:3a:e3:0a:04:ce:6e:af:27:
         fa:3b:ec:42:f9:64:d5:06:ab:3a:a5:60:98:fb:ca:34:c0:e1:
         09:e1:1d:a8:85:29:19:3f:1a:59:94:3a:19:2e:c9:21:96:1c:
         1d:89:43:47:ca:81:92:94:b9:2c:0b:a2:24:64:f8:28:d5:0b:
         f9:ff:31:83:eb:d1:9b:2d:d3:88:dc:80:1f:8f:c7:ec:27:02:
         1a:ae:aa:cb:b2:2f:f9:da:11:15:ef:99:bc:dd:c8:d4:8e:66:
         92:c5:ec:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 12:36:22 2026 by rpki-client