This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36322e302f32342d3234203d3e203238343039.roa
File:                     3136382e3132312e36322e302f32342d3234203d3e203238343039.roa (raw, json)
Hash identifier:          UEAF6tBMiQK7zEW7TggS9o0OOykAwbm651KEaxtEnpQ=
Subject key identifier:   2E:D4:8E:83:47:3B:1D:21:AE:B0:20:07:4B:99:5E:4E:94:E7:A2:2F
Certificate issuer:       /CN=913C600205F778BCEADE53F31FD3D65A46D53467
Certificate serial:       10BC01C2105DA2941EAAAC8F7ABFACB1E2118F29
Authority key identifier: 91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36322e302f32342d3234203d3e203238343039.roa
Signing time:             Tue 06 Jan 2026 19:26:11 +0000
ROA not before:           Tue 06 Jan 2026 19:21:11 +0000
ROA not after:            Tue 05 Jan 2027 19:26:11 +0000
asID:                     28409
IP address blocks:        168.121.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bc:01:c2:10:5d:a2:94:1e:aa:ac:8f:7a:bf:ac:b1:e2:11:8f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913C600205F778BCEADE53F31FD3D65A46D53467
        Validity
            Not Before: Jan  6 19:21:11 2026 GMT
            Not After : Jan  5 19:26:11 2027 GMT
        Subject: CN=2ED48E83473B1D21AEB020074B995E4E94E7A22F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:48:b1:a9:e3:3e:48:7e:02:84:43:b9:bf:
                    09:a6:dc:cc:42:71:fe:6d:d7:fa:63:82:5e:4a:ae:
                    77:cb:fa:a9:10:23:8e:46:07:4d:4c:a5:41:f9:cc:
                    66:75:31:7c:a6:07:55:b3:e1:8e:e5:d1:5f:fa:b2:
                    8d:5b:bb:9a:14:18:aa:31:89:d5:49:23:08:26:29:
                    db:8c:b2:32:f3:4a:a6:36:93:8b:ba:d5:94:19:87:
                    f3:92:31:c7:b3:cd:76:b7:e3:a3:d2:73:5f:bc:07:
                    5e:32:4a:41:84:dc:d4:2a:ae:f8:21:a7:b1:9e:5b:
                    b1:33:e3:e7:dc:ee:ed:52:6a:7c:da:45:17:23:52:
                    68:5d:45:8b:07:7c:8a:4a:e5:4c:67:7b:91:cd:37:
                    71:6f:79:a1:ed:1f:f5:61:06:3b:3c:3e:e7:12:a4:
                    68:ce:c7:f6:fa:f4:2d:6e:c1:f5:43:f9:0b:6f:16:
                    e6:63:47:fb:59:7f:83:cc:35:f3:61:2a:9b:b3:2c:
                    1f:19:16:0b:0f:50:75:bb:7a:b1:a8:66:fd:be:82:
                    42:98:42:60:98:ee:61:91:21:38:b1:14:85:0c:9a:
                    2c:b3:49:32:a4:fb:84:81:be:e6:86:27:6f:19:5e:
                    03:2a:5e:3e:b2:cb:28:de:ca:e9:ab:da:55:8b:6a:
                    c1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D4:8E:83:47:3B:1D:21:AE:B0:20:07:4B:99:5E:4E:94:E7:A2:2F
            X509v3 Authority Key Identifier:
                keyid:91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36322e302f32342d3234203d3e203238343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:e6:ac:c9:03:2d:5e:f9:99:8c:f3:15:de:b1:1d:ab:b3:91:
         2f:fe:5b:b7:cd:70:33:bd:32:57:2f:fb:aa:ea:7e:82:f3:5b:
         fa:7d:22:40:1f:b4:59:04:86:fc:be:0e:62:60:80:4f:fd:5f:
         b1:f5:08:be:5e:84:f7:b0:3b:e5:6d:7d:a6:a4:db:40:c4:89:
         b6:56:a1:83:ce:14:84:d9:85:81:c8:58:15:69:25:a9:77:ff:
         e5:c2:ff:4f:40:25:2e:17:51:ca:7e:20:f9:d9:b1:b9:c5:0b:
         3e:59:b9:25:34:d6:20:af:a0:2c:9b:53:b9:85:60:1c:a9:3c:
         b0:a8:7e:15:0f:1d:44:31:55:d2:42:37:b7:f5:52:0d:d5:b9:
         42:35:42:df:ff:cc:22:f3:05:16:9a:c3:bd:02:d8:6b:62:39:
         1e:4c:b2:a2:72:d6:5b:27:e4:36:89:e7:12:6b:77:de:95:65:
         66:7d:d1:fd:ef:51:27:6c:18:1c:2e:47:54:7f:df:78:24:0b:
         69:fe:1b:db:37:fd:93:1d:fc:e6:2a:b3:f4:4b:16:6b:00:35:
         7d:1b:08:a7:18:ab:73:87:a3:d7:34:71:07:cf:c7:8e:24:00:
         c1:d2:9c:ac:80:52:c3:b0:67:7f:eb:d4:9c:63:1f:6d:26:14:
         cb:c2:9f:18
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUELwBwhBdopQeqqyPer+sseIRjykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTEzQzYwMDIwNUY3NzhCQ0VBREU1M0YzMUZEM0Q2NUE0
NkQ1MzQ2NzAeFw0yNjAxMDYxOTIxMTFaFw0yNzAxMDUxOTI2MTFaMDMxMTAvBgNV
BAMTKDJFRDQ4RTgzNDczQjFEMjFBRUIwMjAwNzRCOTk1RTRFOTRFN0EyMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0UkixqeM+SH4ChEO5vwmm3MxC
cf5t1/pjgl5KrnfL+qkQI45GB01MpUH5zGZ1MXymB1Wz4Y7l0V/6so1bu5oUGKox
idVJIwgmKduMsjLzSqY2k4u61ZQZh/OSMcezzXa346PSc1+8B14ySkGE3NQqrvgh
p7GeW7Ez4+fc7u1SanzaRRcjUmhdRYsHfIpK5Uxne5HNN3FveaHtH/VhBjs8PucS
pGjOx/b69C1uwfVD+QtvFuZjR/tZf4PMNfNhKpuzLB8ZFgsPUHW7erGoZv2+gkKY
QmCY7mGRITixFIUMmiyzSTKk+4SBvuaGJ28ZXgMqXj6yyyjeyumr2lWLasGpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQULtSOg0c7HSGusCAHS5leTpTnoi8wHwYDVR0j
BBgwFoAUkTxgAgX3eLzq3lPzH9PWWkbVNGcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMUVDQjExMEI5MTg2MEEwOTEzQ0YxNzBGNUNGQjcwOURF
OThERjdEMDM5MUI4RjNERUM1NTMxRjY0MzM3Njc1LzAvOTEzQzYwMDIwNUY3NzhC
Q0VBREU1M0YzMUZEM0Q2NUE0NkQ1MzQ2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MTNDNjAwMjA1Rjc3OEJDRUFE
RTUzRjMxRkQzRDY1QTQ2RDUzNDY3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTFFQ0IxMTBCOTE4NjBBMDkxM0NGMTcwRjVDRkI3MDlERTk4REY3RDAz
OTFCOEYzREVDNTUzMUY2NDMzNzY3NS8wLzMxMzYzODJlMzEzMjMxMmUzNjMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODM0MzAzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKh5PjAN
BgkqhkiG9w0BAQsFAAOCAQEAqOasyQMtXvmZjPMV3rEdq7ORL/5bt81wM70yVy/7
qup+gvNb+n0iQB+0WQSG/L4OYmCAT/1fsfUIvl6E97A75W19pqTbQMSJtlahg84U
hNmFgchYFWklqXf/5cL/T0AlLhdRyn4g+dmxucULPlm5JTTWIK+gLJtTuYVgHKk8
sKh+FQ8dRDFV0kI3t/VSDdW5QjVC3//MIvMFFprDvQLYa2I5HkyyonLWWyfkNonn
Emt33pVlZn3R/e9RJ2wYHC5HVH/feCQLaf4b2zf9kx385iqz9EsWawA1fRsIpxir
c4ej1zRxB8/HjiQAwdKcrIBSw7Bnf+vUnGMfbSYUy8KfGA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:28 2026 by rpki-client