This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3136382e3233322e3130382e302f32322d3232203d3e20323634373530.roa
File:                     3136382e3233322e3130382e302f32322d3232203d3e20323634373530.roa (raw, json)
Hash identifier:          Tu67NbYA5s8yiawNcVb73zmdGMx53JhckCLLAFGa0XQ=
Subject key identifier:   CC:1F:F9:9C:9A:86:62:82:5B:D2:07:4E:48:43:11:1F:B4:CA:2C:88
Certificate issuer:       /CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463
Certificate serial:       4EFC7AD32289126E9563A038F287291C32400F40
Authority key identifier: 0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3136382e3233322e3130382e302f32322d3232203d3e20323634373530.roa
Signing time:             Tue 06 Jan 2026 19:06:48 +0000
ROA not before:           Tue 06 Jan 2026 19:01:48 +0000
ROA not after:            Tue 05 Jan 2027 19:06:48 +0000
asID:                     264750
IP address blocks:        168.232.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fc:7a:d3:22:89:12:6e:95:63:a0:38:f2:87:29:1c:32:40:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463
        Validity
            Not Before: Jan  6 19:01:48 2026 GMT
            Not After : Jan  5 19:06:48 2027 GMT
        Subject: CN=CC1FF99C9A8662825BD2074E4843111FB4CA2C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:75:00:0e:49:2b:f2:1f:7b:c5:de:53:52:8e:
                    fe:74:b4:bb:b0:04:d1:b1:84:69:18:26:8d:3b:bd:
                    e3:2e:1f:41:ed:f4:7a:14:d5:63:e8:4c:dd:1a:74:
                    25:5b:a2:84:94:b7:aa:5b:b9:3f:2d:50:28:e7:3d:
                    62:fd:e4:0c:99:ea:51:ec:95:88:0c:c7:ba:da:ac:
                    b7:6e:67:0d:83:c2:51:89:34:2b:21:30:c3:de:49:
                    df:54:dc:3f:ae:a2:b0:bf:7c:70:f5:9c:27:00:cc:
                    d3:9e:97:c5:53:cf:72:1a:63:68:82:7b:50:04:e7:
                    fd:01:f5:d0:eb:94:c4:52:5d:b6:78:2d:0b:71:9f:
                    59:40:ba:3a:ba:77:60:cf:ff:5b:e7:31:53:8e:99:
                    4e:32:43:b3:35:01:c1:3f:ba:b5:45:f4:c5:2a:1a:
                    bd:35:81:ff:eb:86:f7:da:c0:04:db:f6:52:87:b1:
                    da:ab:ba:1b:c6:3f:c8:fd:80:76:a2:12:47:3e:c5:
                    21:9e:94:b3:8f:f6:35:55:86:81:0c:26:ef:cd:e8:
                    8e:91:bf:92:56:b5:e0:44:ec:9b:a5:ad:92:14:48:
                    27:90:26:85:b9:63:2f:60:e1:31:84:0b:f8:d0:aa:
                    0a:f8:7f:59:6a:c8:20:6a:b4:8a:8e:30:4f:d5:f5:
                    95:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1F:F9:9C:9A:86:62:82:5B:D2:07:4E:48:43:11:1F:B4:CA:2C:88
            X509v3 Authority Key Identifier:
                keyid:0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3136382e3233322e3130382e302f32322d3232203d3e20323634373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:89:df:56:64:fd:24:3b:e7:eb:8d:8c:7d:1b:04:a6:27:57:
         25:68:3c:d2:16:82:b1:54:d2:6b:ce:98:c2:30:42:ae:b8:e1:
         a4:0c:73:2a:f2:41:bb:0d:47:bc:de:fe:25:a8:50:4d:81:17:
         5c:56:0a:c8:58:60:34:45:16:12:8e:c9:79:be:25:11:af:da:
         4a:98:e9:0d:1b:3c:c5:9e:f4:2a:9e:5f:c2:8d:30:2b:91:7d:
         4f:b3:a0:ba:43:79:5b:71:ea:f1:23:9a:4e:23:bc:eb:0f:db:
         f1:32:1b:41:b9:ad:51:4c:15:31:7f:1f:7f:c1:38:39:89:5e:
         86:ec:5d:79:ab:2b:a6:ee:d0:06:3b:12:cf:bc:f2:1d:af:53:
         ce:18:38:e2:32:8d:48:05:62:e4:3b:93:46:ca:5b:56:5e:44:
         a9:d3:77:9b:23:68:e3:6f:d3:e3:27:94:87:b3:ce:0b:b0:ba:
         37:ba:6e:89:58:70:7b:1f:ac:8a:03:fc:99:39:66:97:f4:cb:
         5c:c5:d8:9d:fa:69:d9:58:cd:cb:63:65:98:91:4c:34:c5:7e:
         8b:d2:fd:e4:45:13:3a:ed:ab:50:ea:44:84:62:25:cc:36:ce:
         ef:95:2d:ef:3f:6c:45:87:e8:75:8f:53:52:bd:3f:2c:d7:72:
         aa:0b:bc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:38:44 2026 by rpki-client