This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32322d3234203d3e20323634373838.roa
File:                     3136382e3139372e3138382e302f32322d3234203d3e20323634373838.roa (raw, json)
Hash identifier:          LZK8c9cYQaZ9HTEPYZ7238EzcoFlLTNzUMlXNZAuBVM=
Subject key identifier:   D3:5E:8D:D5:8A:BA:A4:A3:98:70:5C:20:E3:03:DC:11:DF:61:7F:1B
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       7A0B63CCF913CBB0B7FC400EC01E77ADD4825FF0
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32322d3234203d3e20323634373838.roa
Signing time:             Tue 06 Jan 2026 19:08:29 +0000
ROA not before:           Tue 06 Jan 2026 19:03:29 +0000
ROA not after:            Tue 05 Jan 2027 19:08:29 +0000
asID:                     264788
IP address blocks:        168.197.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 19:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:0b:63:cc:f9:13:cb:b0:b7:fc:40:0e:c0:1e:77:ad:d4:82:5f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Jan  6 19:03:29 2026 GMT
            Not After : Jan  5 19:08:29 2027 GMT
        Subject: CN=D35E8DD58ABAA4A398705C20E303DC11DF617F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:83:8c:0b:10:cd:52:c4:45:ae:d2:f6:b9:
                    2d:b4:79:3e:fa:f3:72:27:65:2e:f1:c0:fb:f4:1e:
                    6d:aa:8d:2b:1b:27:01:1b:03:b4:5b:66:23:23:01:
                    22:42:a2:7b:9f:83:7d:cb:5d:22:5c:e5:9e:43:2a:
                    96:d3:44:2d:e1:ca:84:28:c1:5c:38:10:a9:2c:6c:
                    cc:22:55:25:f3:94:03:c6:ea:5d:e0:25:33:29:82:
                    e4:b9:70:ff:30:25:4c:fb:98:77:54:24:1e:20:96:
                    6a:82:0b:e8:87:bc:fa:67:2f:52:29:32:f3:e0:d4:
                    72:d9:4b:b5:20:36:b2:cc:6b:aa:c9:59:0a:c3:c5:
                    45:c5:dd:f3:b9:c7:31:5d:18:46:0e:a4:51:70:04:
                    cd:be:2a:38:3d:d2:bd:c6:5e:65:c8:d7:b1:25:1a:
                    7b:aa:d0:b0:46:2b:71:48:25:00:8d:ef:7a:a9:7f:
                    cb:ea:21:f7:d5:bf:3c:c7:36:97:42:75:3b:35:f8:
                    97:59:0f:16:b9:0c:bc:ff:f7:44:0e:7b:d4:22:77:
                    ea:25:00:05:d4:02:75:b3:24:21:2f:f1:8f:c3:e6:
                    40:a0:10:75:7d:56:11:81:db:7a:4c:9a:67:72:54:
                    37:26:d7:03:85:7d:03:e4:0d:00:de:df:c6:98:72:
                    90:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5E:8D:D5:8A:BA:A4:A3:98:70:5C:20:E3:03:DC:11:DF:61:7F:1B
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32322d3234203d3e20323634373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:93:8b:e1:ef:0e:0c:8d:2d:c4:f4:c9:5d:32:bb:d2:8d:eb:
         4d:98:c5:40:d9:e6:7a:02:a1:18:33:08:34:ac:c2:16:8d:0d:
         b2:9e:18:f0:05:11:75:5a:33:10:6e:79:86:ce:d5:2f:f4:be:
         e2:cf:32:3b:93:ba:47:7b:ec:be:b6:f3:41:e9:2b:e7:dc:33:
         51:00:8c:d7:4e:b0:d5:d7:58:f0:2f:fd:8b:fe:b7:d6:4b:0c:
         d3:a7:c6:16:14:b1:58:f5:cc:b0:85:c8:19:ff:31:d7:9b:09:
         15:6a:4b:1e:46:74:69:1e:e1:f0:17:b3:73:9d:2b:cf:c4:3c:
         12:cc:96:88:44:ed:96:7c:7d:23:76:84:31:93:3c:25:0e:4f:
         8f:f4:4a:d6:0d:84:69:4b:90:3a:d8:4a:0d:1c:a9:4d:4c:68:
         13:d3:ed:95:8f:04:d3:6f:24:ff:50:bd:c5:5d:96:ca:36:ba:
         8b:16:df:a3:3d:30:4d:a4:be:66:9c:00:9a:f7:a0:c3:52:97:
         bc:59:8d:02:19:6c:c0:5e:6d:9c:3b:f5:50:9b:ac:18:1a:66:
         f1:d5:62:d5:02:15:d8:4c:e3:6e:d6:89:2e:da:13:c1:aa:6f:
         12:7e:2c:c3:7a:53:b1:ac:a5:92:df:d1:10:dd:d3:d8:e5:5c:
         9d:3c:7a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:23:07 2026 by rpki-client