This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/3136342e3136332e3132382e302f32322d3234203d3e20323635373338.roa
File:                     3136342e3136332e3132382e302f32322d3234203d3e20323635373338.roa (raw, json)
Hash identifier:          AvI4vp1e7+JUb+UznwhLVAH4xDJAsL9NNQad6XubJhg=
Subject key identifier:   8A:7D:48:17:10:D5:65:3B:59:EA:EB:18:89:D4:25:81:F7:D8:7B:30
Certificate issuer:       /CN=9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E
Certificate serial:       3E77A2DC5FA8598EBC42B7B37413FC503CB0C496
Authority key identifier: 9F:8E:C7:CE:66:A6:7C:20:F1:A2:4E:22:0E:07:01:A4:B8:12:9C:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/3136342e3136332e3132382e302f32322d3234203d3e20323635373338.roa
Signing time:             Tue 06 Jan 2026 19:06:54 +0000
ROA not before:           Tue 06 Jan 2026 19:01:54 +0000
ROA not after:            Tue 05 Jan 2027 19:06:54 +0000
asID:                     265738
IP address blocks:        164.163.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:77:a2:dc:5f:a8:59:8e:bc:42:b7:b3:74:13:fc:50:3c:b0:c4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E
        Validity
            Not Before: Jan  6 19:01:54 2026 GMT
            Not After : Jan  5 19:06:54 2027 GMT
        Subject: CN=8A7D481710D5653B59EAEB1889D42581F7D87B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:10:4a:19:66:27:c6:99:96:5f:09:29:e2:
                    2a:3d:e2:1a:65:ef:74:55:dd:5f:5a:75:5f:d1:3f:
                    fa:bf:f4:5d:f1:ac:0a:4b:ef:c7:9b:f9:7c:1f:63:
                    a2:40:20:d5:93:2e:a1:d1:60:b5:62:fe:2c:b9:a7:
                    8e:ae:47:61:b4:5c:a1:c8:15:f2:49:14:08:88:4c:
                    c4:db:e7:17:f2:0a:71:4e:ad:aa:c7:0d:33:21:fc:
                    dc:4f:25:2b:67:95:ea:55:89:4b:77:61:82:7f:da:
                    5c:21:b1:62:a7:33:da:f6:5f:da:df:41:04:cd:cf:
                    d8:5d:35:ef:09:cd:d1:50:a2:19:59:35:b0:44:08:
                    7d:c0:7d:06:6b:a2:22:4c:47:1b:d5:2c:77:aa:d4:
                    61:5a:50:39:de:e8:10:ae:e4:e2:a3:e3:e9:75:b8:
                    b7:d4:46:42:61:c4:a6:a3:47:a1:d3:33:d0:f6:9d:
                    fd:cc:ff:fb:d7:02:c0:d8:15:62:4d:9b:06:ca:4a:
                    03:d6:4b:29:dd:d1:60:c8:9e:d8:7e:da:88:9f:10:
                    2c:4e:d4:80:d4:d8:44:fd:a5:92:80:5a:83:3e:50:
                    af:87:ad:8c:ed:1c:d5:a0:23:71:a2:30:86:3d:2d:
                    32:d7:39:30:83:31:b6:05:46:8c:ef:59:f6:8f:9f:
                    8f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7D:48:17:10:D5:65:3B:59:EA:EB:18:89:D4:25:81:F7:D8:7B:30
            X509v3 Authority Key Identifier:
                keyid:9F:8E:C7:CE:66:A6:7C:20:F1:A2:4E:22:0E:07:01:A4:B8:12:9C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/3136342e3136332e3132382e302f32322d3234203d3e20323635373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:fb:b0:8c:ed:b2:1d:4c:e3:0f:ab:bd:2f:6f:7c:69:f8:e6:
         fe:c7:b4:f6:9d:c5:22:ec:b7:7e:6f:b7:df:b9:ca:9d:a0:09:
         f6:0d:e8:f1:5e:ef:45:d8:59:04:9e:16:a2:64:7a:d7:33:c9:
         d9:49:b5:ba:0e:b0:31:d6:2e:db:89:0e:fb:ca:ab:73:9a:d3:
         c6:87:f2:63:8d:54:5e:eb:dc:4a:e1:1b:29:50:75:87:9e:3b:
         7e:94:95:de:05:8b:db:13:1f:d0:d3:81:59:04:7f:f6:0a:96:
         5d:03:6d:9c:7d:92:a1:80:1b:70:5d:4a:e6:72:77:a1:bd:fb:
         d8:cb:4d:de:3e:b2:d0:96:18:53:9e:01:90:3d:5d:87:d8:d4:
         9f:8b:ab:2f:8b:87:01:c8:8d:14:09:10:2d:f4:5f:3d:62:1c:
         d0:78:a9:62:1d:b8:6c:c4:ec:79:83:6d:97:13:7c:67:cd:70:
         10:55:eb:88:45:65:0e:01:e3:7e:a8:2d:d0:c3:9c:70:77:4f:
         a5:14:78:e6:69:e5:f9:77:08:4c:fd:34:80:74:ce:f4:16:45:
         ff:de:d7:66:4c:31:f4:91:65:76:26:08:10:0a:24:ef:d2:37:
         0b:d8:d0:fe:43:9a:5a:dc:c3:7d:a0:55:f4:81:07:ae:c7:8d:
         83:1b:43:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:26:48 2026 by rpki-client