This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32342d3234203d3e20323636363838.roa
File:                     3136382e3139372e3138382e302f32342d3234203d3e20323636363838.roa (raw, json)
Hash identifier:          mhYXQdFAJKWpE6qt/vGzgK3kHM7CG6IiDu+miMjHWX8=
Subject key identifier:   D8:79:C3:EC:18:8E:09:66:6D:9B:5D:1A:41:79:26:84:74:BA:3F:9E
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       39330A7ADF6D52B35B1040F964E431F52E905E93
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32342d3234203d3e20323636363838.roa
Signing time:             Tue 06 Jan 2026 19:08:28 +0000
ROA not before:           Tue 06 Jan 2026 19:03:28 +0000
ROA not after:            Tue 05 Jan 2027 19:08:28 +0000
asID:                     266688
IP address blocks:        168.197.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 19:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:33:0a:7a:df:6d:52:b3:5b:10:40:f9:64:e4:31:f5:2e:90:5e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Jan  6 19:03:28 2026 GMT
            Not After : Jan  5 19:08:28 2027 GMT
        Subject: CN=D879C3EC188E09666D9B5D1A4179268474BA3F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ef:9e:1f:d7:31:34:ea:b0:83:3d:26:9c:ff:
                    7c:6a:ff:52:1f:5c:f9:7b:02:fe:84:a3:6b:d1:f6:
                    c8:bc:66:ef:b0:c8:fb:31:2d:64:66:95:de:d8:87:
                    d1:e4:22:72:b4:60:49:fc:49:45:8b:94:59:90:a8:
                    26:f2:9a:e3:74:51:a7:45:13:7b:3a:24:ca:ae:ec:
                    6d:ec:fd:44:c9:17:de:02:67:45:c5:03:ca:e8:25:
                    6f:73:32:43:71:70:f0:48:3f:ee:ae:19:16:c9:da:
                    c1:2f:9e:b2:15:1f:48:58:28:46:36:4d:6d:09:1e:
                    17:9d:d4:77:7e:6f:e8:43:a8:fd:fb:09:f3:65:42:
                    a8:53:f2:e7:8d:5c:94:df:6d:16:5c:40:d8:a8:79:
                    c7:ff:f1:da:a3:05:f9:ce:d8:a2:df:0b:c8:0b:9d:
                    04:47:c2:35:56:85:27:b9:31:9c:f8:30:fc:33:3d:
                    d3:87:80:44:08:b9:59:92:25:b3:ba:43:d2:d8:35:
                    3e:45:9e:aa:1d:9b:cc:75:f0:c4:04:af:1b:3c:7b:
                    54:81:4c:fd:77:de:a0:7a:20:24:16:82:56:ee:76:
                    65:9f:82:f6:6c:85:b4:15:b1:1b:27:03:58:40:a1:
                    62:78:ac:fb:88:e4:02:57:d6:09:51:37:ed:57:5a:
                    de:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:79:C3:EC:18:8E:09:66:6D:9B:5D:1A:41:79:26:84:74:BA:3F:9E
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32342d3234203d3e20323636363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:4f:0e:30:ed:e4:b3:b5:6b:6a:cf:b5:e9:9c:d4:fc:e8:cf:
         f4:f9:4f:79:11:f5:f4:80:e4:9e:1e:e5:75:86:c3:a8:2e:9c:
         a1:7f:b3:88:ce:19:fc:6b:a9:cc:6a:e9:64:2e:cd:85:8c:05:
         60:e9:20:56:d9:14:19:ee:ec:6c:07:a0:52:b8:6c:3c:61:e5:
         c0:b7:ac:e2:67:1d:2f:0a:60:84:cd:89:6b:bc:48:9b:f8:68:
         5b:af:13:e3:fd:40:1b:08:5a:fb:b6:51:23:7f:5a:ab:0c:52:
         6b:bf:3f:df:22:da:41:00:11:8b:0c:e9:01:63:02:d7:8f:d5:
         5b:26:28:b9:56:a0:39:65:39:a2:55:8b:90:dc:63:c4:99:86:
         2d:c3:f4:d2:1e:46:f4:7c:92:ba:1c:4f:53:e3:78:6b:fe:1c:
         39:1b:5b:56:b7:b0:3f:ad:e8:86:c7:40:72:79:38:e7:1e:28:
         52:00:ab:40:1d:8c:72:53:12:d7:5f:28:a9:9d:c4:7d:12:1a:
         21:f9:8d:56:26:53:02:94:39:87:27:b6:b7:57:9b:ec:c9:7b:
         6b:0f:35:57:7d:83:20:97:7e:61:b7:0e:b8:97:0f:65:ee:9a:
         f0:41:a2:83:dd:9f:18:1d:61:c2:a4:f1:68:57:52:4d:3e:42:
         a6:59:96:3c
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUOTMKet9tUrNbEED5ZOQx9S6QXpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNjAxMDYxOTAzMjhaFw0yNzAxMDUxOTA4MjhaMDMxMTAvBgNV
BAMTKEQ4NzlDM0VDMTg4RTA5NjY2RDlCNUQxQTQxNzkyNjg0NzRCQTNGOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe754f1zE06rCDPSac/3xq/1If
XPl7Av6Eo2vR9si8Zu+wyPsxLWRmld7Yh9HkInK0YEn8SUWLlFmQqCbymuN0UadF
E3s6JMqu7G3s/UTJF94CZ0XFA8roJW9zMkNxcPBIP+6uGRbJ2sEvnrIVH0hYKEY2
TW0JHhed1Hd+b+hDqP37CfNlQqhT8ueNXJTfbRZcQNioecf/8dqjBfnO2KLfC8gL
nQRHwjVWhSe5MZz4MPwzPdOHgEQIuVmSJbO6Q9LYNT5Fnqodm8x18MQErxs8e1SB
TP133qB6ICQWglbudmWfgvZshbQVsRsnA1hAoWJ4rPuI5AJX1glRN+1XWt6HAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU2HnD7BiOCWZtm10aQXkmhHS6P54wHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMxMzYzODJlMzEzOTM3MmUzMTM4Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzNjM4Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo
xbwwDQYJKoZIhvcNAQELBQADggEBAGRPDjDt5LO1a2rPtemc1Pzoz/T5T3kR9fSA
5J4e5XWGw6gunKF/s4jOGfxrqcxq6WQuzYWMBWDpIFbZFBnu7GwHoFK4bDxh5cC3
rOJnHS8KYITNiWu8SJv4aFuvE+P9QBsIWvu2USN/WqsMUmu/P98i2kEAEYsM6QFj
AteP1VsmKLlWoDllOaJVi5DcY8SZhi3D9NIeRvR8krocT1PjeGv+HDkbW1a3sD+t
6IbHQHJ5OOceKFIAq0AdjHJTEtdfKKmdxH0SGiH5jVYmUwKUOYcntrdXm+zJe2sP
NVd9gyCXfmG3DriXD2XumvBBooPdnxgdYcKk8WhXUk0+QqZZljw=
-----END CERTIFICATE-----
Generated at Wed Jan 21 12:23:07 2026 by rpki-client