This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131372e302f32342d3234203d3e203237373733.roa
File:                     3136382e3234332e3131372e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          +ytGYPwDj1EZsc9J+20rYf9j4ueAWvJTpdPF4zZYooc=
Subject key identifier:   2B:5E:6B:88:13:66:FD:29:CE:14:1B:0E:B6:5E:EB:7E:99:C6:C8:C2
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       02E2ACE5AF5BE9D7F9CC55C70D299FFE1ADF1168
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131372e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 19:16:28 +0000
ROA not before:           Tue 06 Jan 2026 19:11:28 +0000
ROA not after:            Tue 05 Jan 2027 19:16:28 +0000
asID:                     27773
IP address blocks:        168.243.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 02:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e2:ac:e5:af:5b:e9:d7:f9:cc:55:c7:0d:29:9f:fe:1a:df:11:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Jan  6 19:11:28 2026 GMT
            Not After : Jan  5 19:16:28 2027 GMT
        Subject: CN=2B5E6B881366FD29CE141B0EB65EEB7E99C6C8C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:1a:99:33:e5:f2:fe:de:24:0c:81:df:86:
                    17:cb:ae:f0:74:41:78:fc:92:30:7b:f3:08:65:33:
                    d8:b4:91:35:a2:6d:20:74:93:0c:71:cb:1b:b3:14:
                    26:0b:43:9c:0e:34:91:b3:ae:55:24:61:46:4b:81:
                    e0:fa:b7:71:02:c1:4d:e9:59:58:e8:1b:24:2d:fa:
                    c4:cc:3f:00:2a:36:3a:96:92:6a:23:97:c8:dd:aa:
                    4d:ac:bb:5b:c1:90:f7:0f:60:c9:02:63:5d:cb:ad:
                    9d:f6:73:a8:29:c3:d0:09:37:45:33:bf:fb:91:cd:
                    97:79:89:25:ec:a5:3f:78:0b:f7:9e:58:e5:01:ca:
                    c6:b3:ef:2d:8f:63:11:1d:67:db:7c:69:48:63:81:
                    ef:cd:fc:7f:76:1e:c2:e1:e2:8d:1d:dc:80:08:e7:
                    af:05:68:dc:97:ef:92:c5:44:15:90:47:54:10:ee:
                    aa:ec:ef:ee:f5:20:0e:29:82:8b:38:53:26:b0:18:
                    c7:43:03:cd:fc:e9:81:b0:82:ee:32:c9:47:24:29:
                    96:a7:19:3b:52:c3:64:f3:8d:94:c7:13:9b:4f:06:
                    e7:04:31:d2:bb:c8:54:b0:c4:6c:74:43:0f:b9:3e:
                    1e:16:ed:0a:00:7b:ed:6b:0c:27:1d:8f:e6:e9:6a:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5E:6B:88:13:66:FD:29:CE:14:1B:0E:B6:5E:EB:7E:99:C6:C8:C2
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131372e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:79:fa:72:16:9a:0c:71:69:e7:9a:e2:78:8a:9b:53:56:84:
         ab:6c:54:4a:1c:57:1f:50:22:98:d1:db:a8:ce:8a:71:d3:38:
         d8:f5:01:7b:3d:2f:cb:56:b4:1e:d1:51:f4:06:6c:9e:0c:dc:
         38:8f:47:79:ca:6b:5e:f4:39:07:10:6a:35:68:6c:ea:a5:8a:
         8c:d4:c3:35:69:b1:fe:e0:6d:b0:cb:7d:7a:50:3e:0c:8d:6a:
         32:68:50:9e:76:46:43:5b:cc:a8:9b:a4:ca:fa:da:07:72:77:
         64:5c:36:c5:ec:da:8d:f9:f0:65:03:52:5e:e0:02:98:fb:29:
         fb:ab:14:68:4c:f6:31:78:e1:3e:38:0f:69:9a:5c:d3:39:f7:
         f3:3d:84:9f:47:29:6a:5d:38:0a:3c:c9:60:56:58:82:48:d7:
         c9:94:b2:d7:15:bc:9e:96:11:a8:4c:88:99:d8:07:b1:e0:89:
         d5:4c:80:1d:85:b3:7e:f6:84:6f:a8:cf:1f:cb:99:42:39:10:
         dc:57:c0:5d:b2:af:63:ba:3f:a0:19:15:67:2a:22:54:eb:ea:
         d9:98:12:f6:a0:e8:d8:89:c0:91:96:e7:a5:80:c8:cc:71:0a:
         b7:f8:b4:f9:f9:7c:e6:1d:63:85:81:0b:42:68:74:dd:e0:af:
         4f:c1:17:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 19:00:59 2026 by rpki-client