This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32342d3234203d3e203233323436.roa
File:                     36362e3233312e36342e302f32342d3234203d3e203233323436.roa (raw, json)
Hash identifier:          44Kk11xrZSvrgoF8JwjeNgfLz3QSv71qejOVqbU8Ca4=
Subject key identifier:   7A:A1:AC:4B:E9:E2:91:1E:E4:9B:A7:3F:73:AE:FE:B6:F1:5D:1A:B3
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       65F4D25C2DB5EF385634139D4F5C943CA218F41C
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32342d3234203d3e203233323436.roa
Signing time:             Mon 12 Jan 2026 18:55:00 +0000
ROA not before:           Mon 12 Jan 2026 18:50:00 +0000
ROA not after:            Mon 11 Jan 2027 18:55:00 +0000
asID:                     23246
IP address blocks:        66.231.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f4:d2:5c:2d:b5:ef:38:56:34:13:9d:4f:5c:94:3c:a2:18:f4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Jan 12 18:50:00 2026 GMT
            Not After : Jan 11 18:55:00 2027 GMT
        Subject: CN=7AA1AC4BE9E2911EE49BA73F73AEFEB6F15D1AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:24:14:6c:85:82:d9:4e:0f:98:3d:f7:c1:
                    d4:bc:0e:62:54:72:a8:94:22:52:2d:84:42:c8:98:
                    cb:ba:56:7c:58:3b:40:09:ba:1a:2c:9f:c8:2a:94:
                    ed:57:03:d7:e8:0b:79:21:35:c0:33:05:60:16:b0:
                    b3:60:12:6c:1a:3d:cb:8f:71:ba:1a:78:68:f8:11:
                    f5:52:93:f8:c6:ab:66:8c:80:ae:55:ac:9e:5e:30:
                    89:e1:70:86:e3:3c:cf:52:29:c1:f9:e9:c7:f2:ed:
                    21:e1:61:15:2d:b6:33:18:33:c2:58:a1:54:b3:b9:
                    15:1b:c3:0a:22:f4:b4:33:ac:75:6c:9a:99:9f:25:
                    65:3f:2a:7f:d9:a8:c2:34:19:d8:3d:2a:b3:4c:b1:
                    8f:37:ce:f6:7d:2e:26:bd:71:bb:70:56:6e:ac:a2:
                    e4:18:e0:0f:26:be:81:b4:f7:58:cf:45:3e:35:93:
                    2b:6b:fe:2a:1c:73:d7:5f:86:cb:09:da:fd:49:a7:
                    4b:26:db:b5:d0:70:d0:c4:ba:bf:f6:de:c6:92:62:
                    42:25:e4:1d:b8:81:a0:8f:80:f2:ea:62:8e:a9:5a:
                    c2:cc:82:b2:70:20:79:ac:c9:57:07:64:b2:11:26:
                    f2:06:10:0c:08:9e:64:78:e7:38:d3:bc:79:57:1b:
                    69:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A1:AC:4B:E9:E2:91:1E:E4:9B:A7:3F:73:AE:FE:B6:F1:5D:1A:B3
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32342d3234203d3e203233323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:ef:d2:ef:7e:d8:86:3b:8b:e0:a5:76:69:63:f5:90:39:3b:
         49:65:bd:db:85:1e:22:95:e3:3b:03:a3:c5:ea:ce:c7:e8:29:
         ee:db:ca:78:05:b6:04:26:da:b9:c0:a6:4c:aa:4b:32:be:b9:
         8f:7b:90:59:bb:2f:b7:ec:ea:76:e4:95:a2:0c:79:84:49:5e:
         c7:15:04:7f:23:f0:43:22:c7:2b:6d:a7:ca:54:ba:78:d6:8c:
         9e:c5:31:4a:43:33:03:11:37:c7:c7:19:db:6f:bd:cb:34:c3:
         a7:b2:ae:27:0a:a1:23:a4:64:2a:11:e7:b3:19:96:8d:45:88:
         11:ae:68:dc:65:45:9e:c7:86:81:9e:27:fe:19:6e:7a:a3:b2:
         ae:5e:97:0a:2e:55:c1:da:3b:97:b4:99:d7:c6:b2:5b:f2:59:
         0d:46:19:c5:d1:e9:2b:96:f4:7f:f2:c7:da:27:1c:15:2b:5c:
         2a:93:25:5b:b6:b1:9d:89:e2:b8:21:9a:ff:f1:99:24:12:50:
         64:fb:fc:54:fd:32:50:f4:9c:9b:b7:1f:03:d9:de:5b:19:59:
         21:6e:6c:a2:47:bb:94:4d:19:da:24:cd:34:0b:19:5f:6f:58:
         cf:72:7e:80:5d:f8:e9:01:06:f9:a5:33:b6:6f:60:17:65:a9:
         52:ad:c2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 24 10:21:57 2026 by rpki-client