This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39382e302f32332d3234203d3e203532343233.roa
File:                     3136382e3139372e39382e302f32332d3234203d3e203532343233.roa (raw, json)
Hash identifier:          wRTwYTh6OylYvZePKSi9ExtItE/nNvbJS+UY4Lr5cws=
Subject key identifier:   2E:66:58:35:DE:18:69:43:9D:BF:64:6E:23:22:22:CD:A4:4E:66:34
Certificate issuer:       /CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
Certificate serial:       2BC14DE70BC7D0A7C07222EDF4003402954BA0CE
Authority key identifier: 04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39382e302f32332d3234203d3e203532343233.roa
Signing time:             Tue 06 Jan 2026 19:46:34 +0000
ROA not before:           Tue 06 Jan 2026 19:41:34 +0000
ROA not after:            Tue 05 Jan 2027 19:46:34 +0000
asID:                     52423
IP address blocks:        168.197.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 23:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c1:4d:e7:0b:c7:d0:a7:c0:72:22:ed:f4:00:34:02:95:4b:a0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
        Validity
            Not Before: Jan  6 19:41:34 2026 GMT
            Not After : Jan  5 19:46:34 2027 GMT
        Subject: CN=2E665835DE1869439DBF646E232222CDA44E6634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9f:9e:ac:9e:af:3c:53:da:62:6c:84:8d:8a:
                    fe:f8:55:3e:74:04:d1:3c:60:11:ab:b8:72:28:e2:
                    b3:8c:1f:39:e7:bb:62:59:96:4b:7c:3e:99:d1:0c:
                    00:d8:79:b1:cf:ef:ce:75:e6:16:75:f8:fb:3d:38:
                    8d:ff:a7:68:ab:52:b1:72:f7:47:71:53:80:95:1b:
                    06:19:5c:e3:d4:ae:fb:8f:01:28:ec:19:34:3d:d1:
                    f2:bb:38:c4:89:51:eb:5d:30:79:ea:68:1c:e5:a9:
                    9c:59:d7:df:53:71:2e:e3:92:4a:d2:09:a4:5a:27:
                    60:6c:8f:0d:9c:ff:05:e8:8c:eb:8b:d9:2e:3b:8e:
                    7a:38:d6:4d:23:4e:d7:ca:60:e1:a5:76:97:37:47:
                    1d:8e:4e:c7:92:a6:d9:c4:1a:35:2e:ab:a4:fd:04:
                    21:87:7d:7d:59:ac:8b:ea:6c:11:55:f5:57:6f:f8:
                    4c:f3:64:3f:1a:a5:ae:ea:66:1b:f6:7c:78:a5:38:
                    25:29:3a:c7:38:63:82:78:d2:78:c3:f3:49:9e:b6:
                    67:4d:69:e8:f7:e1:ee:2a:4e:c7:2e:6f:39:82:58:
                    d2:34:d0:ce:92:8c:49:6c:b3:e7:bc:0b:22:59:4a:
                    1b:74:aa:ef:51:3e:da:3b:12:73:79:14:2d:d4:a8:
                    3a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:66:58:35:DE:18:69:43:9D:BF:64:6E:23:22:22:CD:A4:4E:66:34
            X509v3 Authority Key Identifier:
                keyid:04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39382e302f32332d3234203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:92:62:64:bf:4b:17:46:81:b9:13:83:df:09:a1:ff:89:9e:
         a9:e7:ac:d1:20:c7:48:15:91:32:a3:1c:aa:3d:7e:68:2a:43:
         d3:5b:a8:76:07:5e:d3:63:dc:86:e2:27:68:96:49:de:c9:9e:
         73:82:0e:a9:f6:dc:8b:71:d0:4a:18:28:a7:aa:fc:bc:6c:cf:
         3a:c9:e3:9d:7c:af:23:9a:49:35:75:b9:fc:66:69:de:91:ee:
         25:79:92:e9:44:1c:a7:e7:d1:cb:92:11:ae:3d:6f:2f:14:19:
         aa:08:16:a3:7d:c5:18:52:ac:e8:db:6a:a4:f3:90:8f:af:09:
         af:8b:d6:35:95:65:53:71:f9:33:36:f1:95:e2:4e:21:73:7a:
         6d:e1:b9:d4:4a:fb:d1:bf:6d:d6:2b:aa:93:2e:c0:cc:32:f7:
         43:26:a9:62:9b:23:55:54:6a:b7:bb:17:b0:7c:8c:b3:e6:00:
         69:bb:2f:2d:fe:16:f9:39:78:9f:16:94:1e:90:54:20:3e:19:
         6f:f1:cd:ac:76:4a:17:8b:a4:8a:14:09:b4:8c:26:29:99:30:
         33:9a:0d:8c:bf:fb:12:2b:51:e4:bb:b7:ca:14:77:f3:4b:e3:
         e0:92:01:37:f1:9e:1f:78:d3:20:11:ee:98:a3:8e:0d:b0:7b:
         74:9e:62:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:42:31 2026 by rpki-client