This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138352e302f32342d3234203d3e203130373738.roa
File:                     3136382e3139362e3138352e302f32342d3234203d3e203130373738.roa (raw, json)
Hash identifier:          Zwa2TWlD5cJkw+t/hNAZJkdlTWr6TuQ6wQR569M8t6w=
Subject key identifier:   1E:66:30:7B:F8:9F:5E:56:FC:C2:0D:95:43:57:D6:CD:44:39:0D:BE
Certificate issuer:       /CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
Certificate serial:       7D1A3BBEECD54DCE0EBF17791DCF442B1DAAF3EE
Authority key identifier: E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138352e302f32342d3234203d3e203130373738.roa
Signing time:             Tue 06 Jan 2026 19:44:24 +0000
ROA not before:           Tue 06 Jan 2026 19:39:24 +0000
ROA not after:            Tue 05 Jan 2027 19:44:24 +0000
asID:                     10778
IP address blocks:        168.196.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1a:3b:be:ec:d5:4d:ce:0e:bf:17:79:1d:cf:44:2b:1d:aa:f3:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
        Validity
            Not Before: Jan  6 19:39:24 2026 GMT
            Not After : Jan  5 19:44:24 2027 GMT
        Subject: CN=1E66307BF89F5E56FCC20D954357D6CD44390DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:54:74:6e:91:df:16:2d:9c:54:a9:47:5f:
                    6f:cc:14:8d:4a:f9:6a:20:5e:d2:01:42:82:d3:54:
                    49:ec:b5:54:52:43:a5:cb:d5:f0:99:11:1b:40:36:
                    94:35:29:eb:23:dc:4d:f3:cf:ff:96:74:8f:da:b2:
                    50:19:73:67:cf:fb:20:75:a5:7c:6d:d1:72:af:10:
                    0c:7d:62:2d:fa:63:62:b2:79:28:45:51:da:50:36:
                    8c:ac:a5:03:4f:03:aa:d2:d9:46:6d:2e:df:61:84:
                    bc:06:ac:a3:aa:da:b4:90:30:35:ff:d7:8e:a7:d0:
                    0f:d0:ef:8d:10:18:0a:89:b6:fe:98:94:87:96:62:
                    bb:b2:78:24:da:24:26:b4:53:66:5b:70:4f:7b:27:
                    0e:21:8e:a3:2e:f2:c7:57:c8:86:b6:64:5c:33:85:
                    35:69:41:c6:62:b6:88:1a:35:5f:4c:91:15:22:e6:
                    1f:4b:51:ef:d9:f8:14:2a:70:34:4b:14:4b:ab:8b:
                    8e:0d:e7:ec:74:8f:a4:a9:d2:15:1b:36:25:3d:24:
                    dc:72:4a:2f:83:4e:f5:ac:fe:5d:6f:a6:fb:7a:3e:
                    1c:0d:83:b9:7f:c8:19:d4:e4:07:b6:2f:82:85:9d:
                    1d:d4:b4:91:95:8b:b0:a7:4d:83:ae:a6:45:38:f9:
                    c6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:66:30:7B:F8:9F:5E:56:FC:C2:0D:95:43:57:D6:CD:44:39:0D:BE
            X509v3 Authority Key Identifier:
                keyid:E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138352e302f32342d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:4b:92:cd:ff:b0:9f:9d:08:12:71:b2:2b:72:37:d8:d9:44:
         fa:a5:32:fb:e3:9a:68:fd:80:da:71:76:7e:ec:ca:bc:66:58:
         93:65:f2:81:4f:9c:5f:b9:2f:cb:e3:53:56:f0:1e:6c:8c:14:
         aa:83:9a:3a:c5:da:a6:49:da:44:c8:f3:92:a2:50:13:16:8b:
         a2:ca:86:6c:64:f8:b4:58:84:06:5a:dd:43:a2:68:28:da:c4:
         b3:48:1a:65:cd:0e:d1:47:38:fb:4f:13:92:90:a3:1d:48:4a:
         e7:fa:a9:40:d3:9a:dd:15:cc:54:c6:10:e3:b1:ce:97:95:79:
         0c:25:58:53:0c:71:b0:04:84:ed:a5:0e:66:36:d1:76:f8:69:
         1d:32:b0:1e:c9:d9:20:d0:6f:65:f8:63:e7:67:75:5c:56:af:
         23:53:24:03:75:c3:88:67:9b:f8:cf:13:91:ae:28:54:46:03:
         6d:ad:db:6e:4a:fe:03:a2:a1:98:2d:34:d7:83:3a:49:f6:08:
         fb:7c:b6:a4:bb:03:71:57:60:45:66:67:48:54:71:bd:51:62:
         11:f8:90:e4:68:f3:81:b4:8c:4d:5b:ef:60:00:07:1d:c9:f2:
         d6:cc:f1:d4:b9:06:28:b3:08:dc:a8:9a:ed:3d:00:44:e0:25:
         d1:85:e3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 24 02:44:59 2026 by rpki-client