This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131352e302f32342d3234203d3e203237373733.roa
File:                     3136382e3234332e3131352e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          SIjVRZefbSAeIO9645WKR9XYdw8zyNdbSBX9eSAp+88=
Subject key identifier:   80:6B:6B:FF:C0:09:20:AA:B5:07:6A:12:B8:A9:1D:D5:FD:01:35:5E
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       459631EDCAD3BA252A49DA845604C041B430C380
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131352e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 19:16:27 +0000
ROA not before:           Tue 06 Jan 2026 19:11:27 +0000
ROA not after:            Tue 05 Jan 2027 19:16:27 +0000
asID:                     27773
IP address blocks:        168.243.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 02:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:96:31:ed:ca:d3:ba:25:2a:49:da:84:56:04:c0:41:b4:30:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Jan  6 19:11:27 2026 GMT
            Not After : Jan  5 19:16:27 2027 GMT
        Subject: CN=806B6BFFC00920AAB5076A12B8A91DD5FD01355E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:72:f7:8c:ea:a9:d1:14:5e:81:02:3d:44:
                    e7:ff:88:c5:1a:4b:ea:5d:25:85:b2:88:53:38:0e:
                    6a:bd:b7:ef:31:3a:98:9d:44:ab:79:7b:39:1e:20:
                    91:b7:79:57:d6:bf:91:d2:86:58:94:0e:2e:fc:42:
                    fd:13:f5:f5:2c:62:86:d6:32:0b:45:0d:0c:14:c4:
                    39:db:32:8c:fc:7b:3b:ba:4c:d0:9a:35:ce:d8:5f:
                    20:f7:e6:95:66:55:8e:71:23:e1:07:d4:12:44:2e:
                    7e:75:fd:9f:8e:77:e6:8c:0b:7a:98:b9:a4:4e:81:
                    95:1a:54:2a:71:d4:07:03:4c:f2:17:cc:04:a5:e8:
                    c1:27:13:dc:f0:6e:e0:71:ca:a4:57:6f:3c:f1:81:
                    d6:73:f0:1e:03:c5:cb:d0:ce:0d:89:6d:00:b5:d1:
                    1e:ee:c7:2e:a8:23:02:54:cd:eb:de:41:2a:82:6a:
                    36:2e:e0:89:89:59:b9:6d:9a:b3:15:3e:a7:20:05:
                    5a:3d:f6:a9:fb:7a:ec:8b:41:4d:0b:9d:08:a5:9b:
                    bc:6e:b1:5c:14:ee:86:75:bd:a1:ba:b5:be:2d:65:
                    de:28:da:49:41:3a:84:97:c2:4d:52:07:9c:dc:a9:
                    35:73:30:fa:86:b1:b3:65:9f:25:e2:ee:a3:63:de:
                    ee:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6B:6B:FF:C0:09:20:AA:B5:07:6A:12:B8:A9:1D:D5:FD:01:35:5E
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131352e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:4c:ac:71:ba:f2:a1:ed:54:65:49:b9:c1:63:5a:13:10:80:
         1f:b3:40:18:98:28:4e:f6:8a:da:ab:6e:19:77:43:d7:28:4d:
         7b:cd:46:73:9d:3f:4d:2a:74:bf:bb:c1:04:6e:d0:91:0d:41:
         fc:f5:cc:c3:8f:f4:40:75:52:35:66:e2:a4:b1:49:bc:e3:47:
         80:0e:c2:03:4e:8f:ba:11:87:36:0e:58:a6:ef:91:92:a7:12:
         e6:2f:a5:0e:38:55:35:7e:8d:cc:7e:74:47:9f:f6:79:42:41:
         bd:27:8e:a3:5b:6f:24:55:95:30:59:5d:ea:09:a2:58:e1:38:
         cd:92:95:4c:25:9d:76:a9:1e:9c:e7:20:48:50:7b:69:b0:5a:
         35:9c:3e:4d:96:a4:4c:34:cd:70:45:a0:32:bc:20:05:58:eb:
         3b:a9:79:ea:c3:70:9e:47:38:f6:01:a3:d6:77:37:7e:2d:33:
         f7:e2:04:7b:9b:49:aa:f4:05:82:87:8c:c3:dd:36:cf:b3:b5:
         9c:cc:e1:f8:ff:0a:0f:78:f1:e0:b0:c7:7b:86:79:8b:6f:86:
         65:d4:fa:c5:39:17:fd:da:75:90:0e:2d:32:a1:56:87:d3:62:
         74:a7:68:11:61:2f:d3:07:e6:1f:39:cc:85:cb:7c:53:1c:ee:
         ac:f8:6d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 19:00:58 2026 by rpki-client