This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132352e302f32342d3234203d3e20323632313931.roa
File:                     3136382e3232382e3132352e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          vI1aT2U5of8bsFW+ivkKiXRCPGjpBM09j4zgbQ+bAWA=
Subject key identifier:   F5:30:60:F1:E3:AB:36:A8:5A:3E:92:66:F2:C2:C0:26:1E:9A:44:E9
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       4A76B9C57E13EE8ECFBC839780D3474DD3263E87
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132352e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 20:55:38 +0000
ROA not before:           Tue 06 Jan 2026 20:50:38 +0000
ROA not after:            Tue 05 Jan 2027 20:55:38 +0000
asID:                     262191
IP address blocks:        168.228.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:76:b9:c5:7e:13:ee:8e:cf:bc:83:97:80:d3:47:4d:d3:26:3e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Jan  6 20:50:38 2026 GMT
            Not After : Jan  5 20:55:38 2027 GMT
        Subject: CN=F53060F1E3AB36A85A3E9266F2C2C0261E9A44E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:d8:46:ea:4b:8b:3c:bb:19:65:bd:b7:ea:
                    f6:16:92:46:a9:00:af:89:b8:eb:be:d3:45:b3:5a:
                    77:31:f5:ad:84:24:26:09:8e:c5:ac:dd:d1:0e:6c:
                    e3:12:9b:85:11:54:7f:54:98:d3:99:60:0d:c4:42:
                    22:ed:dc:c1:f1:8c:70:54:df:18:97:b0:44:44:99:
                    e5:26:f4:ae:f4:8d:58:15:7a:67:c5:62:d1:d8:31:
                    be:13:7d:39:85:bb:96:76:6c:d6:fd:76:6a:a7:f7:
                    60:29:d7:56:98:b7:6f:34:bb:55:9e:cb:21:20:d0:
                    a1:c4:da:78:a8:4e:03:92:ff:78:f0:69:42:fb:0d:
                    77:72:10:91:da:ce:98:4f:db:c1:54:0f:2b:69:84:
                    4e:c7:db:f2:43:65:c5:a0:26:ce:85:a5:f7:de:2e:
                    8b:dc:28:a1:1d:45:b4:06:c2:9e:6c:f9:9a:27:1a:
                    52:5d:62:4f:f0:14:0c:d1:95:c4:99:9e:40:46:6c:
                    74:60:12:2f:47:23:56:45:ad:ae:45:5a:2f:5c:b7:
                    9d:a0:66:98:aa:9e:6b:92:6a:4b:7d:86:d8:a8:57:
                    2b:0e:61:82:ce:2e:06:35:b3:a9:e1:7b:31:d8:a5:
                    ff:85:4a:8c:10:d5:8e:26:d4:be:57:d7:11:7e:97:
                    c0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:30:60:F1:E3:AB:36:A8:5A:3E:92:66:F2:C2:C0:26:1E:9A:44:E9
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132352e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:2f:d3:96:08:d9:eb:82:b6:ac:a1:ef:65:5f:00:b4:c3:a3:
         ee:3e:9a:9b:ef:83:c8:3e:7d:4c:77:70:1d:a2:f2:a6:0c:a0:
         33:3a:9e:a4:02:ad:08:ee:af:0e:34:5c:38:90:85:5e:9d:53:
         b6:fb:43:de:2e:29:89:b5:b7:49:8f:1b:c2:1d:7e:b8:05:5c:
         f6:de:69:5b:07:f5:15:3c:c9:cd:5e:9d:79:ef:41:6d:50:b5:
         73:0c:53:e6:d2:2f:75:9e:42:fd:fc:47:82:d5:6d:51:0b:98:
         78:a6:28:c5:db:41:39:4a:b3:e0:b7:cb:6d:4c:9f:2b:ba:f6:
         2f:3b:27:f0:45:0b:31:14:52:a3:5d:dc:18:a0:ee:3c:b1:c0:
         48:7b:92:54:a8:e8:42:8c:51:54:ae:75:a4:09:07:30:bf:c9:
         1e:d1:b1:bb:de:8f:19:e8:34:30:5b:a4:dd:c7:d4:b1:9a:ee:
         24:5f:af:3b:1b:b0:38:1d:15:92:d0:fa:7b:85:ca:fb:76:11:
         42:0a:0d:f6:c6:6c:38:ae:e9:61:59:a6:39:f7:b2:89:37:4a:
         74:16:eb:fd:6a:ab:cc:e3:1a:70:26:30:7c:a3:6d:c9:90:0f:
         91:8f:2b:d6:64:9d:e4:f5:d4:b0:1f:80:3d:55:5c:e7:66:9a:
         10:45:60:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 02:23:53 2026 by rpki-client