This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3234322e302f32342d3234203d3e203634313132.roa
File:                     3136382e3233312e3234322e302f32342d3234203d3e203634313132.roa (raw, json)
Hash identifier:          c3gcT3ZlFiaoNQN7eeVgLQoPndr8fDReevFz+x7zxQY=
Subject key identifier:   98:CA:5F:F8:7A:CE:2D:B7:27:72:7C:BE:6A:C3:4B:69:A0:0B:36:14
Certificate issuer:       /CN=2EEA5CACCAFE22736FD46CB2A532C287D9472855
Certificate serial:       48B66195DE4B07E1BD4E5BE2561665564488476B
Authority key identifier: 2E:EA:5C:AC:CA:FE:22:73:6F:D4:6C:B2:A5:32:C2:87:D9:47:28:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3234322e302f32342d3234203d3e203634313132.roa
Signing time:             Mon 26 Jan 2026 15:15:00 +0000
ROA not before:           Mon 26 Jan 2026 15:10:00 +0000
ROA not after:            Mon 25 Jan 2027 15:15:00 +0000
asID:                     64112
IP address blocks:        168.231.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.crl
                          rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b6:61:95:de:4b:07:e1:bd:4e:5b:e2:56:16:65:56:44:88:47:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EEA5CACCAFE22736FD46CB2A532C287D9472855
        Validity
            Not Before: Jan 26 15:10:00 2026 GMT
            Not After : Jan 25 15:15:00 2027 GMT
        Subject: CN=98CA5FF87ACE2DB727727CBE6AC34B69A00B3614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fb:21:59:fd:30:45:0e:dc:9f:ed:c7:bf:56:
                    fa:77:26:a4:ad:c7:35:5c:52:53:0b:57:bb:75:27:
                    aa:c3:78:5d:33:92:48:2a:63:1a:de:17:b2:70:d3:
                    d7:60:3a:53:76:03:8e:41:ef:46:68:a9:89:f6:8f:
                    81:63:2d:21:43:87:66:3e:9d:ad:c6:fd:65:81:90:
                    af:d4:61:98:39:38:63:40:db:d1:d9:96:14:70:a5:
                    48:e6:f4:a9:d0:2d:2b:88:a1:29:5f:ad:7f:90:05:
                    c1:2a:d3:41:1a:79:75:62:a9:4b:45:26:ab:b9:c6:
                    b3:35:08:58:c7:e9:6a:d1:a5:5d:80:5f:5d:8b:9b:
                    7e:be:99:ca:c8:f2:7f:89:47:b6:44:e3:b9:97:a9:
                    a5:14:08:5b:01:a9:a3:c5:a8:7e:50:38:96:cd:07:
                    05:53:aa:df:0d:3c:99:3e:a1:a0:65:df:25:b5:45:
                    aa:33:5d:37:16:71:2b:5a:fe:7d:91:32:df:e4:54:
                    82:eb:de:bd:25:f1:73:38:eb:cc:ec:f4:22:7c:54:
                    6e:d4:0f:58:f4:90:98:65:83:19:7d:bb:c1:4c:2e:
                    d0:32:1b:9c:91:2f:e7:03:33:b5:f9:e4:bf:da:6a:
                    4a:49:cd:d9:35:a9:50:94:7b:6a:b1:71:4d:54:42:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CA:5F:F8:7A:CE:2D:B7:27:72:7C:BE:6A:C3:4B:69:A0:0B:36:14
            X509v3 Authority Key Identifier:
                keyid:2E:EA:5C:AC:CA:FE:22:73:6F:D4:6C:B2:A5:32:C2:87:D9:47:28:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3234322e302f32342d3234203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.231.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:47:2c:a4:94:0e:43:39:14:0d:70:d3:71:b6:fe:bb:65:21:
         bd:eb:6f:e9:3e:8b:04:af:ba:30:61:2b:3a:ae:02:ed:26:54:
         f7:a8:78:57:d2:38:95:a7:51:7e:80:c5:87:f4:3e:73:6c:8d:
         92:27:37:c9:56:e6:e2:b7:ac:40:9f:f3:73:d6:d5:1c:78:4d:
         71:aa:25:a6:2c:7c:ce:17:cf:f5:7b:13:de:d3:b1:f0:87:cc:
         9b:ec:81:7b:27:9e:16:93:c5:f8:62:9f:9e:49:8e:c1:e5:00:
         09:b9:a2:11:a2:10:ad:39:24:b3:41:69:c8:ff:06:5e:19:b2:
         2c:18:cd:72:77:03:d3:cd:12:36:93:bc:83:b8:e0:80:0c:db:
         c4:b0:e2:a0:41:f9:8c:a9:ed:21:de:d8:59:34:e4:6d:7f:bb:
         00:83:b0:f2:cd:8c:0f:ec:5c:0e:69:c2:f4:66:27:f4:d9:40:
         3f:4e:9c:68:23:31:22:18:35:cf:79:01:aa:40:9f:4e:d8:f7:
         b2:f7:a0:13:43:f4:cf:18:56:66:b2:90:07:79:b8:b6:f0:af:
         eb:20:1d:95:7f:f7:e3:ac:b3:eb:dd:30:e8:99:93:3c:b4:24:
         3f:82:01:ad:e8:25:5b:c8:a1:15:35:49:2b:bd:82:d4:b9:41:
         9f:47:e7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:01:20 2026 by rpki-client