This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/3136382e3230352e3131362e302f32322d3234203d3e20323634363738.roa
File:                     3136382e3230352e3131362e302f32322d3234203d3e20323634363738.roa (raw, json)
Hash identifier:          WDGfyubzX1wzQwbMcb4U75qBC9gVf/OrC2OtTFEgzeM=
Subject key identifier:   8C:34:BC:4F:4D:AD:64:00:A0:6E:55:7E:8B:98:77:C4:3A:1A:76:C2
Certificate issuer:       /CN=BFA364CC05C34700B6C32AC37512D94D292D301C
Certificate serial:       42FDE81606486AA6418C27B99E5C8D3E33319BFB
Authority key identifier: BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/3136382e3230352e3131362e302f32322d3234203d3e20323634363738.roa
Signing time:             Tue 06 Jan 2026 19:25:31 +0000
ROA not before:           Tue 06 Jan 2026 19:20:31 +0000
ROA not after:            Tue 05 Jan 2027 19:25:31 +0000
asID:                     264678
IP address blocks:        168.205.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 04:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:fd:e8:16:06:48:6a:a6:41:8c:27:b9:9e:5c:8d:3e:33:31:9b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFA364CC05C34700B6C32AC37512D94D292D301C
        Validity
            Not Before: Jan  6 19:20:31 2026 GMT
            Not After : Jan  5 19:25:31 2027 GMT
        Subject: CN=8C34BC4F4DAD6400A06E557E8B9877C43A1A76C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:68:c6:ac:9a:6f:96:52:9e:d1:65:d7:d0:
                    8a:e7:ce:50:eb:61:91:42:05:58:29:6c:a1:5c:99:
                    d3:60:ae:e3:ed:0c:8c:47:df:52:38:13:11:97:20:
                    1d:15:9c:72:e4:32:7e:dd:a6:55:71:11:5a:7b:62:
                    e1:bd:60:57:b3:4f:7f:f7:2e:42:05:ac:0a:0d:7e:
                    e8:91:84:9c:f2:b5:2f:95:e8:87:1e:04:cd:b6:0e:
                    ef:c5:a5:f3:32:88:5a:a2:b8:f1:6d:bc:52:a0:09:
                    88:74:55:3d:a9:16:a0:cc:0f:ca:e9:ff:bf:19:b0:
                    33:74:ac:46:4f:57:56:3a:cb:7e:43:d1:cb:ab:01:
                    a9:0c:cd:8d:03:df:ed:11:9d:bb:7f:ef:e4:7c:37:
                    59:95:8f:c5:9f:0e:51:61:2f:2d:b0:92:4a:fd:3a:
                    46:81:50:7e:3c:d9:cd:fa:9f:a2:47:1d:51:e8:7d:
                    f4:2a:a1:ae:93:ac:10:58:1f:20:af:d1:ab:94:f8:
                    ff:bc:da:b4:e1:a2:e3:28:ef:42:94:4d:ac:b4:68:
                    8a:ad:12:84:f9:a6:93:33:3d:37:30:8a:e0:a3:93:
                    87:e7:b0:37:e4:0e:33:75:68:26:63:2a:32:ec:d4:
                    20:f5:56:ab:ef:ac:45:a6:56:34:6a:90:19:96:35:
                    6c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:34:BC:4F:4D:AD:64:00:A0:6E:55:7E:8B:98:77:C4:3A:1A:76:C2
            X509v3 Authority Key Identifier:
                keyid:BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/3136382e3230352e3131362e302f32322d3234203d3e20323634363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:9b:61:44:db:0c:44:8e:ac:d0:17:06:ae:31:52:e7:e2:08:
         65:22:6f:4c:3b:03:2c:7e:42:bb:c9:12:d1:55:c1:a4:53:98:
         f2:80:74:ab:83:84:54:2b:37:c4:b3:ef:d7:c8:de:53:fe:ca:
         45:76:2a:12:db:53:e2:f9:95:ba:f9:b3:66:5c:2e:ec:0f:fb:
         f9:48:c5:ef:d0:fa:02:3e:f3:04:b1:d5:2c:a4:11:b0:d6:8e:
         14:a3:8a:95:ab:82:6e:41:36:70:07:0a:66:77:3e:23:8d:84:
         8e:4c:55:47:de:cf:db:02:0f:13:5f:6b:fc:34:f4:a6:55:82:
         91:77:4a:91:cf:95:88:bd:a9:7a:34:2e:5f:6d:99:3e:fd:57:
         02:0e:5f:3d:92:d0:f5:8e:c0:e0:fd:46:a2:d0:e6:28:4f:a5:
         0c:07:8f:81:1d:b1:3a:1d:12:4e:92:3d:96:d4:2f:8e:b1:83:
         27:51:5f:2f:a3:cb:aa:8a:23:c1:fc:79:fe:5c:de:a4:20:63:
         13:27:ce:98:61:95:c9:42:60:fb:2e:5b:1b:ef:5c:2f:99:ce:
         92:8f:27:31:05:be:91:e6:8b:5a:96:96:31:ec:82:5d:31:40:
         95:c0:65:d8:e4:4f:23:4d:b1:a4:f6:39:ab:fe:56:d4:f7:fb:
         5a:33:b5:5a
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUQv3oFgZIaqZBjCe5nlyNPjMxm/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZBMzY0Q0MwNUMzNDcwMEI2QzMyQUMzNzUxMkQ5NEQy
OTJEMzAxQzAeFw0yNjAxMDYxOTIwMzFaFw0yNzAxMDUxOTI1MzFaMDMxMTAvBgNV
BAMTKDhDMzRCQzRGNERBRDY0MDBBMDZFNTU3RThCOTg3N0M0M0ExQTc2QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3nGjGrJpvllKe0WXX0IrnzlDr
YZFCBVgpbKFcmdNgruPtDIxH31I4ExGXIB0VnHLkMn7dplVxEVp7YuG9YFezT3/3
LkIFrAoNfuiRhJzytS+V6IceBM22Du/FpfMyiFqiuPFtvFKgCYh0VT2pFqDMD8rp
/78ZsDN0rEZPV1Y6y35D0curAakMzY0D3+0Rnbt/7+R8N1mVj8WfDlFhLy2wkkr9
OkaBUH482c36n6JHHVHoffQqoa6TrBBYHyCv0auU+P+82rThouMo70KUTay0aIqt
EoT5ppMzPTcwiuCjk4fnsDfkDjN1aCZjKjLs1CD1VqvvrEWmVjRqkBmWNWx7AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUjDS8T02tZACgblV+i5h3xDoadsIwHwYDVR0j
BBgwFoAUv6NkzAXDRwC2wyrDdRLZTSktMBwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNDFGQ0ZGRjMzMjI2MTVGNUYyQzlCQjI2QUE5ODdGQUNF
NjgzRTA4NjhBMDdDQ0E3NjJERTdBNkJBQkVEOTUwLzAvQkZBMzY0Q0MwNUMzNDcw
MEI2QzMyQUMzNzUxMkQ5NEQyOTJEMzAxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkEzNjRDQzA1QzM0NzAwQjZD
MzJBQzM3NTEyRDk0RDI5MkQzMDFDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjQxRkNGRkYzMzIyNjE1RjVGMkM5QkIyNkFBOTg3RkFDRTY4M0UwODY4
QTA3Q0NBNzYyREU3QTZCQUJFRDk1MC8wLzMxMzYzODJlMzIzMDM1MmUzMTMxMzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNjM3Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKo
zXQwDQYJKoZIhvcNAQELBQADggEBACCbYUTbDESOrNAXBq4xUufiCGUib0w7Ayx+
QrvJEtFVwaRTmPKAdKuDhFQrN8Sz79fI3lP+ykV2KhLbU+L5lbr5s2ZcLuwP+/lI
xe/Q+gI+8wSx1SykEbDWjhSjipWrgm5BNnAHCmZ3PiONhI5MVUfez9sCDxNfa/w0
9KZVgpF3SpHPlYi9qXo0Ll9tmT79VwIOXz2S0PWOwOD9RqLQ5ihPpQwHj4EdsTod
Ek6SPZbUL46xgydRXy+jy6qKI8H8ef5c3qQgYxMnzphhlclCYPsuWxvvXC+ZzpKP
JzEFvpHmi1qWljHsgl0xQJXAZdjkTyNNsaT2Oav+VtT3+1oztVo=
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:05:31 2026 by rpki-client