This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3136382e3139352e37362e302f32322d3232203d3e203532343439.roa
File:                     3136382e3139352e37362e302f32322d3232203d3e203532343439.roa (raw, json)
Hash identifier:          ecP/raKYrPgCdoXsQUlBpidPIH4TQdzl+ey5sXYf92I=
Subject key identifier:   3C:1C:31:A0:FC:B2:8F:A1:D2:CA:0E:68:C3:34:13:74:E5:37:9A:BD
Certificate issuer:       /CN=A6092CA6DF0448374137DE890AB584D961C1028E
Certificate serial:       0C81D60A24DF70ACA7198E39261FD64A32E3D01E
Authority key identifier: A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3136382e3139352e37362e302f32322d3232203d3e203532343439.roa
Signing time:             Tue 06 Jan 2026 19:28:17 +0000
ROA not before:           Tue 06 Jan 2026 19:23:17 +0000
ROA not after:            Tue 05 Jan 2027 19:28:17 +0000
asID:                     52449
IP address blocks:        168.195.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:81:d6:0a:24:df:70:ac:a7:19:8e:39:26:1f:d6:4a:32:e3:d0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6092CA6DF0448374137DE890AB584D961C1028E
        Validity
            Not Before: Jan  6 19:23:17 2026 GMT
            Not After : Jan  5 19:28:17 2027 GMT
        Subject: CN=3C1C31A0FCB28FA1D2CA0E68C3341374E5379ABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:14:b4:b8:fc:bf:cf:67:54:f2:48:30:43:5f:
                    6c:35:c1:a8:62:75:a3:6e:dc:8a:5d:80:7f:4f:d0:
                    94:f4:69:24:d9:b2:18:4a:05:b4:50:44:7b:be:95:
                    5a:54:c3:f8:b3:cd:6b:6c:0e:e5:5c:a9:6b:71:eb:
                    84:94:7f:31:43:19:35:ed:b7:0e:90:44:1c:05:ed:
                    c8:4a:e6:48:8a:e2:60:8f:55:d8:5c:ab:f2:f3:2d:
                    e6:cd:19:2c:4d:7b:68:a5:83:fb:90:14:0a:c0:25:
                    dc:e5:be:5f:40:f3:a1:13:01:9e:21:84:7c:9d:17:
                    b1:d1:c4:c8:21:35:d0:3b:e6:6c:8b:30:05:9b:ee:
                    97:ed:fd:85:8e:ad:7f:08:40:9b:2d:93:af:30:25:
                    c8:3e:de:34:a7:88:33:00:5a:c9:9f:3d:f8:97:55:
                    11:e1:47:3a:23:55:bb:6d:05:d6:fb:15:a9:4b:4a:
                    e6:88:ba:86:91:a3:77:2d:35:01:db:14:29:82:2d:
                    f0:b6:3e:09:ee:1d:e3:c2:62:87:cd:8c:01:20:51:
                    78:bc:b9:62:5e:46:12:8f:dd:3b:13:17:e7:3d:43:
                    97:df:54:cc:11:b8:af:af:1a:80:d0:28:ea:df:cd:
                    fb:9a:a0:e1:23:94:24:87:0c:a0:3b:d6:86:fd:75:
                    2a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1C:31:A0:FC:B2:8F:A1:D2:CA:0E:68:C3:34:13:74:E5:37:9A:BD
            X509v3 Authority Key Identifier:
                keyid:A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3136382e3139352e37362e302f32322d3232203d3e203532343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:2a:19:ac:fd:b1:5d:3a:77:c9:fc:42:c5:8c:10:84:94:d4:
         bf:d1:cc:db:d0:b6:5c:47:53:b3:50:79:77:f1:71:f3:0b:4a:
         2a:49:2b:56:c5:b4:58:46:38:90:c1:ff:9d:94:17:e3:7c:47:
         4e:91:4b:3c:22:d6:12:03:ea:fd:fd:f0:83:a0:b0:4a:3c:9d:
         e8:aa:6a:eb:ec:fd:91:f0:21:2e:dc:e4:40:1c:e0:9f:57:61:
         97:3d:04:af:ed:be:77:83:2a:c8:dd:4d:57:56:4a:97:68:a7:
         e8:d1:5a:bd:98:16:7f:34:a7:f0:0d:cd:99:b7:2d:74:7f:0c:
         b0:c7:e8:d1:40:60:5e:b3:9e:f3:2f:3a:dc:d9:5b:24:63:58:
         2f:04:09:32:0a:6f:63:31:e2:02:c6:00:da:d8:95:7d:61:95:
         61:94:ae:fc:44:68:db:0e:a9:07:89:f2:2c:c7:2d:0f:e0:db:
         22:39:4f:9f:3c:48:c2:b1:0e:a1:e8:34:26:5d:ae:c6:bd:f0:
         9f:3e:13:04:7a:76:af:27:98:ea:e4:10:75:80:d9:3a:9a:ee:
         32:41:4d:55:78:9d:62:40:83:ee:ab:a2:3b:c5:5f:c9:a3:42:
         83:a8:49:95:1f:a0:3e:aa:86:45:d1:a0:f3:be:76:b0:02:6a:
         10:ac:52:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:36 2026 by rpki-client