This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132342e302f32342d3234203d3e20323632313931.roa
File:                     3136382e3232382e3132342e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          +cp9NqUBux7YqnkCsuk6NsweLoBtH+Q0OVqrD8W2TTA=
Subject key identifier:   86:9D:75:C3:8B:5F:87:12:AB:42:0E:C5:A9:51:AB:90:23:A1:6D:1F
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       5F8DCC4BB1C7C4DBF228E9E9884C11FDEE6C8C05
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132342e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 20:55:35 +0000
ROA not before:           Tue 06 Jan 2026 20:50:35 +0000
ROA not after:            Tue 05 Jan 2027 20:55:35 +0000
asID:                     262191
IP address blocks:        168.228.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8d:cc:4b:b1:c7:c4:db:f2:28:e9:e9:88:4c:11:fd:ee:6c:8c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Jan  6 20:50:35 2026 GMT
            Not After : Jan  5 20:55:35 2027 GMT
        Subject: CN=869D75C38B5F8712AB420EC5A951AB9023A16D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a2:19:09:1e:eb:ff:1d:89:9e:10:3c:cb:34:
                    bf:24:21:fc:98:68:a2:5d:52:c9:3b:23:96:74:b9:
                    04:ce:c1:e2:b6:09:1d:26:a9:f2:27:84:e9:0b:7a:
                    89:25:38:ab:ec:82:3e:59:c4:77:57:e5:fd:87:a6:
                    32:1a:71:7d:5a:19:0e:2a:f6:69:fb:cb:dc:6f:14:
                    86:cb:b3:8b:5f:d3:b7:6e:e6:9d:14:2b:23:a6:4b:
                    4b:b0:60:08:c9:e0:90:02:3d:c9:fb:b3:58:73:56:
                    ed:52:4f:a8:e4:cb:c6:f7:2c:6d:77:89:ab:b0:28:
                    36:86:db:0c:ec:2a:1b:83:62:4e:49:b1:25:ed:35:
                    68:7b:58:53:da:6f:c3:0d:75:6c:b5:20:b3:3a:d1:
                    be:df:0d:cb:67:cc:aa:a4:d7:37:30:a7:d1:74:3d:
                    c9:4c:b4:07:70:fa:cc:1c:d5:34:a8:ab:dc:95:1d:
                    89:b2:af:77:e8:47:cc:04:46:c6:40:96:f1:2f:45:
                    e2:2a:a1:46:52:fd:8c:30:da:b7:dc:4d:aa:d0:a6:
                    ad:7e:c3:41:24:be:25:bd:2e:5c:3a:fb:fa:96:66:
                    a0:20:a6:8d:bd:1a:e4:b8:85:1b:23:02:1f:5a:5b:
                    b3:96:6a:83:94:e3:1d:9e:a5:b0:a9:fd:42:c0:e6:
                    00:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9D:75:C3:8B:5F:87:12:AB:42:0E:C5:A9:51:AB:90:23:A1:6D:1F
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136382e3232382e3132342e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:49:73:37:80:71:8e:3b:db:08:58:71:95:58:a2:53:6f:60:
         27:ea:58:cc:96:ce:e8:97:11:12:d2:d5:21:44:96:aa:a3:ae:
         84:ab:0d:21:e0:e0:c1:eb:c7:cd:1a:f7:33:dc:eb:2d:4c:54:
         8b:13:bd:4f:49:d5:60:22:eb:5e:5e:eb:39:79:63:5e:12:16:
         8b:7d:85:dd:00:4f:34:bb:f1:98:31:3a:24:80:13:9c:5a:d0:
         fc:4d:e5:fa:48:a7:ca:7c:fa:be:52:1c:83:4f:01:dc:a1:99:
         d7:6e:f1:79:96:64:7d:4d:23:c9:95:60:ee:34:c1:f5:0b:32:
         ec:df:d2:d8:98:3d:4f:cd:f4:17:10:c4:62:6a:10:55:ca:af:
         48:57:ad:b2:7e:5f:c5:1a:97:a3:0c:fe:a8:d6:f3:9e:31:a4:
         41:48:91:83:8a:2e:39:00:df:2c:7a:2d:2a:07:01:06:3b:8f:
         dd:a4:02:00:75:73:33:a2:b5:76:b2:93:94:e5:78:46:f0:c9:
         29:32:ea:68:e1:2d:01:5b:16:c3:02:1a:40:02:11:0a:25:af:
         86:77:73:db:ff:29:ab:d7:04:7e:5c:72:a9:d3:8f:67:ee:34:
         09:49:a3:9e:6f:6c:21:0c:e3:ce:66:8a:0b:e2:c5:37:16:f2:
         9a:48:82:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:15 2026 by rpki-client