This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/3136382e3232372e39362e302f32332d3234203d3e20323634363835.roa
File:                     3136382e3232372e39362e302f32332d3234203d3e20323634363835.roa (raw, json)
Hash identifier:          lq6YV9bPI3W/qe8+r7mC7Y/PLeMw+wQZcykSk3GO6wI=
Subject key identifier:   44:50:0E:6A:DA:E0:A5:F8:11:C9:FE:37:C3:90:44:14:D6:4A:A2:0F
Certificate issuer:       /CN=9E957DE90D33B8FE187AF8743E44EAE92B9B7504
Certificate serial:       64DFC041AD4E9D38DBBDBF0EFF5034DEF90D78C5
Authority key identifier: 9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/3136382e3232372e39362e302f32332d3234203d3e20323634363835.roa
Signing time:             Tue 06 Jan 2026 19:19:11 +0000
ROA not before:           Tue 06 Jan 2026 19:14:11 +0000
ROA not after:            Tue 05 Jan 2027 19:19:11 +0000
asID:                     264685
IP address blocks:        168.227.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 08:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:df:c0:41:ad:4e:9d:38:db:bd:bf:0e:ff:50:34:de:f9:0d:78:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E957DE90D33B8FE187AF8743E44EAE92B9B7504
        Validity
            Not Before: Jan  6 19:14:11 2026 GMT
            Not After : Jan  5 19:19:11 2027 GMT
        Subject: CN=44500E6ADAE0A5F811C9FE37C3904414D64AA20F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fb:4c:72:0c:c1:b4:90:e4:3c:ae:bd:01:7c:
                    16:49:78:57:c3:55:d3:80:51:7e:15:9b:bf:f6:05:
                    8c:64:83:69:5f:00:7d:21:93:55:87:a8:d1:1c:53:
                    21:85:4c:2a:5e:d3:47:05:be:33:ef:b1:b8:1c:e2:
                    b0:bc:92:42:b7:eb:9b:09:00:b6:f5:66:48:24:9e:
                    87:9d:42:67:15:22:f5:5d:d0:09:5a:3a:1b:99:72:
                    0e:65:ad:96:78:5b:73:5e:6a:12:cc:c5:fb:e9:ee:
                    f5:0f:e6:bb:3d:1d:84:3a:e8:a5:1b:eb:79:09:0d:
                    5d:03:3d:77:d8:8e:70:6b:39:ae:61:ee:00:33:30:
                    13:f0:1f:9d:24:a2:73:99:5e:47:d4:2e:5b:e9:f5:
                    d8:bd:37:55:2f:d1:5f:0c:b0:9c:94:39:87:58:42:
                    b2:8f:6c:8a:8d:b2:9d:7b:c0:e2:3d:b1:36:f3:1c:
                    97:72:27:88:7f:f6:6b:ae:9a:c6:d0:c9:87:d8:d9:
                    9f:70:f6:8a:40:19:d9:eb:f1:e6:88:63:67:e4:32:
                    75:69:8d:c8:fc:73:5a:df:17:3c:04:3e:b6:45:1e:
                    f9:15:c0:6d:b0:7d:f7:ba:d3:85:58:ec:57:35:0c:
                    df:ff:6e:1c:12:5e:37:18:30:8b:21:b6:43:c1:77:
                    4d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:50:0E:6A:DA:E0:A5:F8:11:C9:FE:37:C3:90:44:14:D6:4A:A2:0F
            X509v3 Authority Key Identifier:
                keyid:9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/3136382e3232372e39362e302f32332d3234203d3e20323634363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:8c:9c:e1:ba:02:0a:58:4f:c7:48:cd:8d:61:7c:cc:ca:
         e2:9e:87:da:72:0a:b5:73:73:b6:f9:51:bd:6c:94:ff:86:d1:
         57:7b:5a:50:a6:70:d8:66:77:3f:17:d1:56:be:d1:a4:57:e4:
         3e:cd:d1:1f:1e:b6:8f:d3:aa:af:ae:bf:53:57:4b:5b:36:dc:
         a3:a3:0f:6d:05:45:6b:c7:5e:87:a9:6f:d5:11:94:66:f9:99:
         41:85:bb:7f:e4:d3:e5:99:65:81:88:93:14:4c:7d:c0:82:93:
         de:23:07:f9:50:ff:f3:5b:1b:7a:bc:8f:6b:c9:cc:be:13:d9:
         f5:51:ca:93:ae:47:82:98:5b:f7:51:5b:09:aa:15:4c:6c:ee:
         8a:56:44:0e:7f:cb:d4:70:52:40:0c:e5:4a:a8:74:a3:fb:09:
         c5:d8:c3:6e:b6:cf:f6:a2:8c:f2:1a:fd:ff:c7:01:cb:f5:82:
         da:e4:c4:e9:57:1b:08:bf:0c:4e:ee:78:6f:ba:9d:4a:9e:08:
         20:f1:19:2a:41:03:9b:af:ca:0f:ab:a6:19:46:44:2f:f5:44:
         f0:87:bf:25:49:f5:ca:87:e5:d1:b6:be:d8:ff:cd:1f:cf:6f:
         17:d2:bd:6f:0d:c0:a4:d4:34:11:38:e5:44:e3:68:39:ba:fb:
         a4:c1:04:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 01:13:14 2026 by rpki-client