This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/3136382e3132312e3234322e302f32342d3234203d3e20323730313736.roa
File:                     3136382e3132312e3234322e302f32342d3234203d3e20323730313736.roa (raw, json)
Hash identifier:          wrAYFrSTaxtk4Y7ZpgHjJCQW9f4qdUXdLHyOBzT68S4=
Subject key identifier:   0A:AB:4F:0A:F5:3F:42:36:3A:FF:B8:32:A4:B6:44:EF:1A:E2:4C:1A
Certificate issuer:       /CN=377703DABE7DD60453DE406A737FFAC0BC41D4C4
Certificate serial:       0DCE595AFBB2586BF5C6AE1A4CE52B254E836048
Authority key identifier: 37:77:03:DA:BE:7D:D6:04:53:DE:40:6A:73:7F:FA:C0:BC:41:D4:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/3136382e3132312e3234322e302f32342d3234203d3e20323730313736.roa
Signing time:             Mon 10 Nov 2025 21:50:00 +0000
ROA not before:           Mon 10 Nov 2025 21:45:00 +0000
ROA not after:            Mon 09 Nov 2026 21:50:00 +0000
asID:                     270176
IP address blocks:        168.121.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Nov 2025 18:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ce:59:5a:fb:b2:58:6b:f5:c6:ae:1a:4c:e5:2b:25:4e:83:60:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=377703DABE7DD60453DE406A737FFAC0BC41D4C4
        Validity
            Not Before: Nov 10 21:45:00 2025 GMT
            Not After : Nov  9 21:50:00 2026 GMT
        Subject: CN=0AAB4F0AF53F42363AFFB832A4B644EF1AE24C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:15:df:7f:eb:c9:85:c5:22:97:0a:18:99:
                    51:bf:a1:2f:b7:32:23:18:e5:36:bc:e5:48:37:e1:
                    7b:5e:45:e2:bd:16:27:5e:f0:75:21:6e:f3:a2:43:
                    c4:ba:41:b1:45:8a:8a:58:fd:eb:87:c9:7d:f1:7b:
                    e4:e2:16:a2:21:93:6f:a9:32:77:d5:98:9d:db:86:
                    75:d6:85:51:d7:08:91:f5:1c:81:12:bd:d0:0c:22:
                    a6:ab:57:ef:08:d6:c1:73:77:bb:1e:9c:da:ee:30:
                    47:4a:3a:4e:fd:52:3c:55:1f:4a:c3:86:cc:ee:e2:
                    36:22:98:e4:54:f6:fe:04:f6:17:06:be:fb:f8:85:
                    a0:d4:f5:7a:bb:c4:78:cb:21:a9:ec:6b:6a:b8:d7:
                    3a:20:07:01:3c:71:82:a0:71:8f:9f:56:5b:bc:47:
                    a2:b7:86:3b:21:e7:64:05:82:29:c6:be:41:a1:f4:
                    11:32:a1:4d:d7:0b:ae:74:a0:d0:57:89:f7:b3:10:
                    2f:d9:33:85:ab:8d:c9:d6:d0:6e:38:f6:84:cf:ec:
                    53:62:9e:f7:92:72:f8:44:77:5c:bb:d7:4c:a0:26:
                    4c:9e:e5:ac:c1:d3:be:42:a3:22:6f:9d:4b:6f:6e:
                    e2:56:2a:90:60:5b:a1:66:a3:97:1a:b6:a6:85:43:
                    e4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AB:4F:0A:F5:3F:42:36:3A:FF:B8:32:A4:B6:44:EF:1A:E2:4C:1A
            X509v3 Authority Key Identifier:
                keyid:37:77:03:DA:BE:7D:D6:04:53:DE:40:6A:73:7F:FA:C0:BC:41:D4:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/377703DABE7DD60453DE406A737FFAC0BC41D4C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56ABAAC7374B15A972E8A3B17AF87DF9D2426EFE72D073CA779E0E95601D5FB0/0/3136382e3132312e3234322e302f32342d3234203d3e20323730313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:e2:ab:70:bf:1c:f8:bf:06:5f:6d:c8:09:34:a0:4b:31:50:
         95:9b:27:ee:86:ee:ff:1f:4f:8a:03:50:67:4e:ec:04:5c:69:
         41:14:8c:23:d1:c7:76:cf:13:36:fe:34:49:89:5d:b0:ab:26:
         fe:26:8d:99:83:a4:03:ab:c0:36:16:55:17:f6:8f:c2:a4:a8:
         19:4e:2e:1e:aa:58:b8:4f:d8:03:a6:df:db:ee:82:9b:40:e7:
         f1:61:12:17:b4:4d:af:df:19:51:73:09:46:ef:e4:02:f7:38:
         42:49:d4:c2:f6:39:db:11:14:82:d3:3f:be:74:05:31:70:aa:
         54:07:dd:f9:51:45:b4:72:21:90:cb:1f:a0:6b:b8:1c:9c:16:
         49:5f:7c:72:46:45:80:38:61:d2:4a:d5:14:f7:11:ab:a0:d1:
         46:18:0d:fb:bd:e2:ae:0d:f5:6d:db:74:f4:96:d0:b0:3d:f4:
         ce:0a:db:7f:75:57:20:d7:f0:32:db:8b:ea:74:9f:3e:af:b1:
         0a:4a:1e:d7:0b:7a:fc:2b:4e:21:fd:06:76:82:47:b7:b9:02:
         a3:fb:d2:36:97:14:33:1c:61:dc:d9:e3:f7:6a:9b:6f:2e:f3:
         7f:6a:a7:51:63:a8:c6:59:ae:65:db:08:41:19:39:a8:a4:04:
         e6:28:70:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 13:01:47 2025 by rpki-client