This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e38302e302f32322d3234203d3e20323633323138.roa
File:                     3136382e3234332e38302e302f32322d3234203d3e20323633323138.roa (raw, json)
Hash identifier:          2XiX4dG1FNnbKxGITy5VJ8oGA4nFbWW4lzhmkzsnuqA=
Subject key identifier:   A9:F2:C9:C4:5E:D7:C1:EE:06:58:38:81:29:C3:89:86:A0:3E:DE:4B
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       41C7CD61918AC8AA13CCD700F01A43B841E6B610
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e38302e302f32322d3234203d3e20323633323138.roa
Signing time:             Tue 06 Jan 2026 19:16:26 +0000
ROA not before:           Tue 06 Jan 2026 19:11:26 +0000
ROA not after:            Tue 05 Jan 2027 19:16:26 +0000
asID:                     263218
IP address blocks:        168.243.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 02:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c7:cd:61:91:8a:c8:aa:13:cc:d7:00:f0:1a:43:b8:41:e6:b6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Jan  6 19:11:26 2026 GMT
            Not After : Jan  5 19:16:26 2027 GMT
        Subject: CN=A9F2C9C45ED7C1EE0658388129C38986A03EDE4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:15:14:21:b6:74:81:d4:18:5d:c8:ca:57:e7:
                    a3:50:84:e8:b8:e4:9c:f2:79:1d:bb:ce:d3:96:9f:
                    3f:00:37:e7:74:62:64:b1:3f:88:d1:cd:09:d3:f5:
                    fb:b3:0d:60:73:d2:3e:f6:5b:8f:8c:5d:d4:bd:f9:
                    ed:49:9c:16:5a:d6:03:ce:d4:4b:41:f2:68:14:fa:
                    19:fa:8d:eb:dc:d1:1e:d1:02:34:ae:1f:48:01:d1:
                    bc:8e:e7:24:d8:e4:b9:39:eb:31:58:40:89:eb:d8:
                    ce:94:a9:69:4c:f0:9d:79:4d:18:2e:0a:b7:06:5c:
                    61:01:aa:c7:95:81:5d:99:0a:e2:01:13:ff:8d:72:
                    87:d0:61:05:14:d3:ad:dc:bc:22:69:fb:1e:55:0d:
                    75:b6:64:e5:ab:14:35:0a:f5:c2:79:1a:2d:57:36:
                    80:95:5a:99:9d:d1:ad:c3:94:0a:ca:e7:61:9d:2d:
                    a1:e5:25:74:91:1e:8e:33:34:67:05:9a:9e:44:2c:
                    8a:87:38:1e:42:f5:0e:65:87:14:70:2f:8d:87:12:
                    f5:96:04:de:6c:ef:fd:3c:dc:4b:0b:2b:7a:43:1c:
                    0f:97:f2:5b:51:ca:0b:8d:8b:c8:92:b2:c4:6d:f2:
                    bd:75:fa:75:4f:7c:a6:a2:53:e5:66:ab:93:70:ca:
                    54:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F2:C9:C4:5E:D7:C1:EE:06:58:38:81:29:C3:89:86:A0:3E:DE:4B
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e38302e302f32322d3234203d3e20323633323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:e1:79:14:05:22:8e:01:0d:f4:df:7c:8e:ec:a9:0e:e0:2a:
         cd:5b:f4:69:e2:63:8f:37:65:25:02:a5:4c:b8:a2:44:4e:7c:
         31:0d:b3:9f:5f:f4:3c:02:dd:e7:b2:da:cc:f3:a5:6b:fd:20:
         1a:ac:a8:0c:1f:2d:d9:f1:c1:3e:ec:bb:3f:f9:b6:31:7b:79:
         6f:09:3c:8d:14:28:da:28:c5:73:f4:49:f6:15:21:c9:a5:3b:
         b0:eb:5e:90:b2:3b:db:ce:ae:fa:24:89:60:e1:f6:f9:27:03:
         cc:57:85:6f:bf:25:3e:fe:45:d6:66:09:38:94:e7:c4:9a:e3:
         57:11:a0:34:88:9c:43:27:e8:51:87:fd:28:b2:7f:79:2a:e1:
         c2:8d:29:b1:6a:ca:dd:e8:00:8e:68:f9:60:a6:a4:bf:ef:75:
         38:0f:75:0f:59:c3:32:5f:88:f7:c7:3d:18:a9:30:cb:f0:f1:
         c8:cd:cc:3d:80:02:c1:ff:68:22:6f:19:5a:2b:9a:d8:50:ff:
         18:2e:06:10:4f:f6:c8:8d:87:95:12:51:4e:56:de:df:1e:21:
         c4:db:ab:47:ec:99:70:e6:be:1b:dd:05:6a:11:b3:cb:63:8c:
         18:79:08:c4:95:9b:4d:5d:56:0b:76:fe:59:f5:7a:b8:c0:6b:
         48:63:99:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:40:17 2026 by rpki-client