This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3232302e302f32342d3234203d3e203634313132.roa
File:                     3136382e3233312e3232302e302f32342d3234203d3e203634313132.roa (raw, json)
Hash identifier:          yPgj37PL0tQuUzifZT+v0zUda50xH0RIsEY4prUvqYo=
Subject key identifier:   EB:71:26:7A:AA:85:D3:21:F4:8E:19:3F:F6:F5:B7:89:11:15:B5:47
Certificate issuer:       /CN=2EEA5CACCAFE22736FD46CB2A532C287D9472855
Certificate serial:       0E9F6E825E200F6667E544DDAF3E310E94EA9B70
Authority key identifier: 2E:EA:5C:AC:CA:FE:22:73:6F:D4:6C:B2:A5:32:C2:87:D9:47:28:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3232302e302f32342d3234203d3e203634313132.roa
Signing time:             Mon 26 Jan 2026 15:15:00 +0000
ROA not before:           Mon 26 Jan 2026 15:10:00 +0000
ROA not after:            Mon 25 Jan 2027 15:15:00 +0000
asID:                     64112
IP address blocks:        168.231.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.crl
                          rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:9f:6e:82:5e:20:0f:66:67:e5:44:dd:af:3e:31:0e:94:ea:9b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EEA5CACCAFE22736FD46CB2A532C287D9472855
        Validity
            Not Before: Jan 26 15:10:00 2026 GMT
            Not After : Jan 25 15:15:00 2027 GMT
        Subject: CN=EB71267AAA85D321F48E193FF6F5B7891115B547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bd:ff:65:da:42:70:b1:a6:22:03:bd:21:80:
                    19:ae:ad:c1:73:29:12:03:46:6a:16:ec:0e:57:ed:
                    51:01:3c:b1:de:ce:f9:4a:1c:e3:e3:c4:d0:5e:c9:
                    fd:18:4a:ff:f3:a8:74:74:66:40:5c:b9:e4:93:cb:
                    cc:cc:49:2a:cb:e9:6c:e4:1f:1c:fc:0e:c9:01:86:
                    6e:40:30:10:00:a7:82:89:58:d7:34:33:6b:df:1e:
                    cc:25:23:c1:b9:2c:00:01:ff:6c:2e:24:23:d1:4f:
                    28:70:2c:c3:48:73:bc:1a:c5:89:cc:ee:7f:db:80:
                    c7:93:c7:7e:2a:31:71:22:62:bc:2f:19:3e:58:a6:
                    98:69:23:e3:7e:a1:d2:2f:ea:e2:0e:a6:d7:99:2a:
                    52:4f:0a:f4:b0:03:5e:5b:69:65:8b:7c:21:e9:20:
                    72:a1:07:95:b5:ca:d2:7a:a7:ec:e0:41:fc:e6:bc:
                    9f:88:44:88:22:68:81:19:6a:8f:b2:06:ac:ed:0d:
                    d9:ac:34:b5:f5:f9:f0:9d:29:c4:75:ad:a2:51:a2:
                    c3:00:4c:d2:2f:22:3c:fa:ad:0a:1d:d3:76:b8:a2:
                    37:55:04:a3:0a:13:a9:88:c6:84:f2:34:84:24:d1:
                    d9:a5:9a:02:7c:73:f3:bc:34:97:77:04:80:87:d0:
                    4b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:71:26:7A:AA:85:D3:21:F4:8E:19:3F:F6:F5:B7:89:11:15:B5:47
            X509v3 Authority Key Identifier:
                keyid:2E:EA:5C:AC:CA:FE:22:73:6F:D4:6C:B2:A5:32:C2:87:D9:47:28:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3232302e302f32342d3234203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.231.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:80:4f:aa:5b:d5:3f:99:62:f9:56:b0:98:7a:92:b9:69:73:
         08:5f:ff:16:19:91:9a:1c:6c:06:6f:f1:61:02:08:4d:7e:4d:
         1a:74:ac:ff:7c:87:bf:c9:ad:4a:73:d5:ed:d8:b5:82:24:01:
         61:c0:bb:be:19:6b:5b:6f:3c:84:ed:11:9f:a2:96:76:8b:7b:
         c2:62:43:7e:6a:03:3e:c7:9d:db:35:7d:fd:12:a1:7a:65:af:
         63:d3:48:a4:7e:38:b0:5c:39:07:89:af:b1:11:7e:26:a0:1f:
         2e:52:fc:ae:44:89:37:df:30:ad:ca:b6:8e:87:12:d6:9e:94:
         b5:cf:e6:a7:21:dd:a1:5e:14:53:33:9c:1f:9a:ad:47:54:a4:
         7c:93:89:72:97:bc:9a:6a:bd:17:e7:0d:4e:59:09:9b:f7:84:
         b0:7a:f4:05:e7:20:d2:b7:75:ce:2e:90:28:cc:ea:ee:11:96:
         41:f7:4f:26:17:3d:51:58:b2:dd:e2:e6:7d:43:ca:dc:b2:04:
         e7:57:3c:6e:20:38:d3:87:b8:d7:16:4a:a3:84:15:21:86:0d:
         4b:d4:e2:87:64:18:f7:71:39:22:03:52:3a:9c:23:2a:f3:59:
         e5:3b:8a:d1:54:9a:a2:26:e8:e4:f0:4b:35:42:7f:08:4f:94:
         87:1b:21:d0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDp9ugl4gD2Zn5UTdrz4xDpTqm3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVFQTVDQUNDQUZFMjI3MzZGRDQ2Q0IyQTUzMkMyODdE
OTQ3Mjg1NTAeFw0yNjAxMjYxNTEwMDBaFw0yNzAxMjUxNTE1MDBaMDMxMTAvBgNV
BAMTKEVCNzEyNjdBQUE4NUQzMjFGNDhFMTkzRkY2RjVCNzg5MTExNUI1NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWvf9l2kJwsaYiA70hgBmurcFz
KRIDRmoW7A5X7VEBPLHezvlKHOPjxNBeyf0YSv/zqHR0ZkBcueSTy8zMSSrL6Wzk
Hxz8DskBhm5AMBAAp4KJWNc0M2vfHswlI8G5LAAB/2wuJCPRTyhwLMNIc7waxYnM
7n/bgMeTx34qMXEiYrwvGT5YpphpI+N+odIv6uIOpteZKlJPCvSwA15baWWLfCHp
IHKhB5W1ytJ6p+zgQfzmvJ+IRIgiaIEZao+yBqztDdmsNLX1+fCdKcR1raJRosMA
TNIvIjz6rQod03a4ojdVBKMKE6mIxoTyNIQk0dmlmgJ8c/O8NJd3BICH0EtRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU63EmeqqF0yH0jhk/9vW3iREVtUcwHwYDVR0j
BBgwFoAULupcrMr+InNv1GyypTLCh9lHKFUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOTc2ODYwNDdCOUFFODFGNDA2QjQ2OTEwNUY2ODJDQjRF
RjgzN0U1MzIxMUI4MzNGQTFGMzcxQjlCNDNENjhFLzAvMkVFQTVDQUNDQUZFMjI3
MzZGRDQ2Q0IyQTUzMkMyODdEOTQ3Mjg1NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRUVBNUNBQ0NBRkUyMjczNkZE
NDZDQjJBNTMyQzI4N0Q5NDcyODU1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjk3Njg2MDQ3QjlBRTgxRjQwNkI0NjkxMDVGNjgyQ0I0RUY4MzdFNTMy
MTFCODMzRkExRjM3MUI5QjQzRDY4RS8wLzMxMzYzODJlMzIzMzMxMmUzMjMyMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjM0MzEzMTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOfc
MA0GCSqGSIb3DQEBCwUAA4IBAQBGgE+qW9U/mWL5VrCYepK5aXMIX/8WGZGaHGwG
b/FhAghNfk0adKz/fIe/ya1Kc9Xt2LWCJAFhwLu+GWtbbzyE7RGfopZ2i3vCYkN+
agM+x53bNX39EqF6Za9j00ikfjiwXDkHia+xEX4moB8uUvyuRIk33zCtyraOhxLW
npS1z+anId2hXhRTM5wfmq1HVKR8k4lyl7yaar0X5w1OWQmb94SwevQF5yDSt3XO
LpAozOruEZZB908mFz1RWLLd4uZ9Q8rcsgTnVzxuIDjTh7jXFkqjhBUhhg1L1OKH
ZBj3cTkiA1I6nCMq81nlO4rRVJqiJujk8Es1Qn8IT5SHGyHQ
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:01:22 2026 by rpki-client