This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/3136332e31302e302e302f31362d3234203d3e2035363932.roa
File:                     3136332e31302e302e302f31362d3234203d3e2035363932.roa (raw, json)
Hash identifier:          6ENfOi7NaXFeEz1axcTJcS+9WCVNqf0PAHHuo18rBfk=
Subject key identifier:   BB:4D:D3:F6:02:BB:01:F2:F2:FD:4F:BB:72:36:20:E0:0F:C2:B4:9F
Certificate issuer:       /CN=7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD
Certificate serial:       7B000AD533E4030913801CCB3EC61AABBB1BF910
Authority key identifier: 7B:F5:5E:4B:2D:02:8A:40:96:F4:6A:4E:B8:26:03:99:DE:E1:E8:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/3136332e31302e302e302f31362d3234203d3e2035363932.roa
Signing time:             Tue 06 Jan 2026 20:57:10 +0000
ROA not before:           Tue 06 Jan 2026 20:52:10 +0000
ROA not after:            Tue 05 Jan 2027 20:57:10 +0000
asID:                     5692
IP address blocks:        163.10.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Feb 2026 12:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:00:0a:d5:33:e4:03:09:13:80:1c:cb:3e:c6:1a:ab:bb:1b:f9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD
        Validity
            Not Before: Jan  6 20:52:10 2026 GMT
            Not After : Jan  5 20:57:10 2027 GMT
        Subject: CN=BB4DD3F602BB01F2F2FD4FBB723620E00FC2B49F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e2:11:1d:d3:3a:6f:df:1d:21:02:ed:8c:3e:
                    e9:e8:c4:18:2e:2b:44:08:6e:67:51:0d:7d:79:c3:
                    cb:57:80:d9:8f:c9:09:0b:a0:99:6a:d6:0f:7f:87:
                    0d:83:14:a5:70:90:97:13:4f:41:47:ac:20:02:95:
                    be:c7:10:b5:41:19:c7:d5:22:7f:aa:22:35:52:cc:
                    a2:97:c5:5f:50:7c:da:64:f1:f7:33:31:13:30:e1:
                    f2:a4:61:b8:ff:59:d3:b8:b8:26:c4:89:59:76:b1:
                    a1:d6:08:64:73:50:94:16:d4:ad:b0:e8:08:5c:a1:
                    a7:e0:51:17:4a:53:3f:97:11:54:cc:35:9e:25:f2:
                    cc:b0:fe:9d:c2:88:60:de:35:c8:c3:58:5e:b3:9e:
                    4f:e0:76:56:9a:63:9c:46:5c:c8:54:ed:91:ee:98:
                    ed:4a:ee:1e:13:89:48:a8:fa:c6:c5:21:6f:7d:ae:
                    06:c3:c5:8f:4a:a9:f3:27:97:e7:57:0f:25:05:3a:
                    9b:82:a2:93:23:86:25:d7:29:72:7a:3a:c7:f8:92:
                    2b:42:91:8c:64:08:05:36:33:82:17:2a:8d:67:19:
                    05:7a:3c:34:ba:ef:ff:ed:b6:25:bd:80:67:a3:7f:
                    69:34:50:2d:45:6f:37:c9:5b:e9:cf:f2:52:87:53:
                    aa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4D:D3:F6:02:BB:01:F2:F2:FD:4F:BB:72:36:20:E0:0F:C2:B4:9F
            X509v3 Authority Key Identifier:
                keyid:7B:F5:5E:4B:2D:02:8A:40:96:F4:6A:4E:B8:26:03:99:DE:E1:E8:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BF55E4B2D028A4096F46A4EB8260399DEE1E8FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A3DC6A413BF60284F0EE22095F38DBBA69B7322EF39B67C336CC9EAA06C6482/0/3136332e31302e302e302f31362d3234203d3e2035363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.10.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:24:ac:2e:97:ef:81:12:b7:4d:f6:6f:46:21:24:26:13:a8:
         65:04:bd:39:15:2b:90:20:38:55:f8:b9:06:e3:52:3c:80:e8:
         43:b3:38:60:b1:ad:09:21:07:a4:3d:9f:09:3f:17:c1:e0:d7:
         33:5d:04:55:0d:12:c8:b9:ee:31:a9:71:71:8d:85:52:c6:62:
         b3:75:2d:db:df:40:f0:26:0c:cd:63:39:3b:fd:0c:e0:79:12:
         1a:3d:ea:74:3d:ad:7e:93:87:b6:12:1e:2a:29:f2:52:f0:4e:
         d5:30:25:43:a7:fd:65:7f:ba:b2:70:29:33:f8:8b:29:29:9b:
         ce:90:7b:3a:6e:62:3c:aa:58:ac:55:b9:f8:ed:33:80:30:20:
         16:2b:e6:1d:60:30:9c:44:90:a9:45:cf:06:43:90:ef:80:1a:
         63:0c:5b:db:9e:e1:eb:37:53:39:21:4a:ea:89:f1:36:7c:6c:
         d5:81:c1:ff:bf:d6:cb:11:6a:82:d7:3d:25:14:de:06:ac:e6:
         e3:38:dd:d4:23:e3:58:23:ad:dc:8b:79:cd:26:8b:91:25:34:
         df:54:29:8f:59:10:19:9c:81:f2:69:76:24:8c:ad:b5:61:36:
         2c:13:8c:12:1d:6c:eb:8c:77:7a:ae:53:ed:6e:4f:45:49:21:
         d0:68:ee:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:00:01 2026 by rpki-client