This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e31372e302f32342d3234203d3e20323731393636.roa
File:                     3136382e3234332e31372e302f32342d3234203d3e20323731393636.roa (raw, json)
Hash identifier:          KktC6h1shoS4EfP7jMpr19y4atpH3ZoBw4G8jxi0ZNM=
Subject key identifier:   9F:CE:ED:36:0E:3B:55:67:AF:F4:2C:59:93:D5:5F:5F:90:96:FA:B1
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       5CB684CE4E3D77DD1C60DC74B94B6CD4CB09AE2A
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e31372e302f32342d3234203d3e20323731393636.roa
Signing time:             Tue 13 Jan 2026 03:25:00 +0000
ROA not before:           Tue 13 Jan 2026 03:20:00 +0000
ROA not after:            Tue 12 Jan 2027 03:25:00 +0000
asID:                     271966
IP address blocks:        168.243.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 02:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b6:84:ce:4e:3d:77:dd:1c:60:dc:74:b9:4b:6c:d4:cb:09:ae:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Jan 13 03:20:00 2026 GMT
            Not After : Jan 12 03:25:00 2027 GMT
        Subject: CN=9FCEED360E3B5567AFF42C5993D55F5F9096FAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:15:6c:53:a8:dd:b1:f0:12:ea:40:f7:bf:f6:
                    3c:03:72:ca:dc:f0:b8:d1:84:37:b8:9e:06:b8:f1:
                    2a:5e:9c:df:ed:02:88:db:5e:3a:85:35:2d:cd:af:
                    0c:da:d1:9e:8a:c1:25:6b:69:82:3a:a3:d2:c7:04:
                    ae:c9:c0:c7:18:e9:f0:92:07:b0:40:44:76:24:c4:
                    6f:46:2d:1c:fe:b1:ab:cd:76:11:87:bf:12:32:3d:
                    8a:b0:00:68:1e:07:0e:4f:2c:60:02:d2:0b:0d:8f:
                    29:90:9a:6e:81:e8:f0:4f:3f:b9:43:5e:45:6d:05:
                    b9:8f:80:89:73:9b:0f:1b:f9:74:c3:6e:91:b2:bd:
                    e8:4e:29:80:c5:30:b3:9e:ca:aa:33:e7:6c:bc:85:
                    6c:1b:16:07:f7:47:f6:f9:88:38:68:29:89:47:d8:
                    8c:c0:ff:24:ba:ee:a9:72:cc:d8:51:d1:0b:1f:d6:
                    54:3f:e5:04:8d:33:89:3b:4c:86:33:76:28:9b:c5:
                    79:ee:17:3a:79:b2:c3:6e:48:36:2a:7a:09:52:c5:
                    20:f1:c3:c5:d5:44:47:3e:90:77:c4:ac:c5:36:2c:
                    5c:71:a1:8c:c2:4e:11:5c:c2:24:04:d5:87:87:19:
                    bc:96:ce:60:2e:c1:0b:96:57:4d:86:a9:4b:76:ae:
                    94:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CE:ED:36:0E:3B:55:67:AF:F4:2C:59:93:D5:5F:5F:90:96:FA:B1
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e31372e302f32342d3234203d3e20323731393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:8e:7c:14:b7:8f:80:f8:97:74:cf:ec:bf:33:03:85:e3:b6:
         28:97:45:1c:ed:fc:d9:5e:d0:fa:ad:f0:70:6a:d2:ae:44:bd:
         76:34:27:2a:1a:87:85:b7:ef:89:d2:a5:5a:1f:40:1e:3e:dd:
         03:23:8f:fc:74:f6:a1:47:d6:aa:de:8c:35:d8:35:4f:7e:ec:
         95:67:15:f0:93:78:d1:85:10:7b:a3:3f:52:32:b8:6d:83:4e:
         1a:80:37:0c:37:81:90:17:6f:68:8a:2e:8a:db:da:f3:3a:b0:
         ce:55:99:ba:d0:ed:16:bd:8e:9d:0f:d6:10:92:38:91:ca:d8:
         18:35:b7:ee:0b:c4:e1:c2:16:66:aa:c4:b8:92:f2:46:88:8c:
         07:dc:8c:45:af:6e:c8:d1:99:9a:ae:94:e3:1b:fc:fb:2a:17:
         f7:8f:68:37:08:2c:b9:5d:74:13:21:00:3a:9f:d3:fb:f8:5b:
         9c:d0:f1:f5:87:04:46:12:27:74:af:78:ce:b7:8a:f2:13:7a:
         6a:a3:1f:60:f0:37:75:20:a5:a0:74:e5:e4:30:de:19:7c:46:
         23:40:1a:d3:4c:6d:b7:58:0c:b3:17:95:3b:3d:ae:9a:d3:b5:
         67:20:88:30:c4:a3:ee:c1:bb:5c:6c:63:b0:d3:57:1e:4b:16:
         e3:a6:68:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:39:53 2026 by rpki-client