This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/3136382e3139352e3138362e302f32332d3234203d3e20323634373631.roa
File:                     3136382e3139352e3138362e302f32332d3234203d3e20323634373631.roa (raw, json)
Hash identifier:          DHD+dQlkTOV1G9H/OvTyFZtTjytTEpFnnEiPECUoOIo=
Subject key identifier:   33:60:7F:1C:B5:C9:8B:08:40:95:4D:FC:C2:4A:EF:56:54:8A:73:3F
Certificate issuer:       /CN=76ED1487236321BE3ADB764A2ADE56DE8EB91D48
Certificate serial:       15B8C8B1486028DC7261B5979411865E986FDDC1
Authority key identifier: 76:ED:14:87:23:63:21:BE:3A:DB:76:4A:2A:DE:56:DE:8E:B9:1D:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/3136382e3139352e3138362e302f32332d3234203d3e20323634373631.roa
Signing time:             Tue 06 Jan 2026 19:47:46 +0000
ROA not before:           Tue 06 Jan 2026 19:42:46 +0000
ROA not after:            Tue 05 Jan 2027 19:47:46 +0000
asID:                     264761
IP address blocks:        168.195.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b8:c8:b1:48:60:28:dc:72:61:b5:97:94:11:86:5e:98:6f:dd:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ED1487236321BE3ADB764A2ADE56DE8EB91D48
        Validity
            Not Before: Jan  6 19:42:46 2026 GMT
            Not After : Jan  5 19:47:46 2027 GMT
        Subject: CN=33607F1CB5C98B0840954DFCC24AEF56548A733F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:68:2e:03:af:b5:b7:6f:e1:04:c2:90:33:
                    56:aa:f2:93:90:db:aa:d6:86:0c:29:a6:97:79:1c:
                    68:f2:24:2b:6e:a1:4c:f3:4f:9d:a6:08:5c:27:42:
                    5e:6c:d7:0c:70:7b:ae:e0:b7:08:a8:19:6e:fd:55:
                    36:41:b1:e7:31:f2:a2:05:f3:9d:da:35:14:6f:b8:
                    44:65:25:b8:1b:ed:d2:31:f2:bc:e3:cf:85:5f:52:
                    a7:86:09:9e:9e:89:72:47:1c:d8:2f:0d:b4:db:11:
                    35:1e:c6:a7:a0:89:b5:c6:f5:91:76:92:b0:8c:c2:
                    54:93:06:f1:1d:3c:c6:bf:88:9e:45:7f:23:1a:cf:
                    de:45:49:23:47:ad:dc:17:39:9a:be:b9:ee:55:3f:
                    9b:fc:b3:4f:16:76:b7:0c:83:02:4e:2f:26:7e:dc:
                    eb:1b:1a:86:ce:75:fc:00:84:b7:84:de:b8:8f:71:
                    24:00:1f:52:59:af:7c:17:0b:a2:63:14:27:72:15:
                    2c:99:7a:38:db:94:b7:59:19:d0:a6:dd:a1:38:d6:
                    a2:12:14:e4:4f:be:97:bb:a1:43:17:25:ac:1f:15:
                    c2:74:0a:28:b8:7e:9a:c7:be:3e:58:4a:c5:e4:06:
                    17:d9:73:21:f9:11:bd:81:99:f3:3a:b0:88:de:4a:
                    b5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:60:7F:1C:B5:C9:8B:08:40:95:4D:FC:C2:4A:EF:56:54:8A:73:3F
            X509v3 Authority Key Identifier:
                keyid:76:ED:14:87:23:63:21:BE:3A:DB:76:4A:2A:DE:56:DE:8E:B9:1D:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ED1487236321BE3ADB764A2ADE56DE8EB91D48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28814650B74090E589468FE4EC142C9DEB755DF0F513353E597BF686E05AC9FA/0/3136382e3139352e3138362e302f32332d3234203d3e20323634373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:7c:65:91:c6:7e:09:40:32:80:98:5b:96:a3:e2:af:3a:b1:
         2a:2c:02:96:35:2c:f2:69:9f:ab:c4:72:67:f7:b0:c4:fb:58:
         92:b5:10:c1:e9:a8:65:4c:84:d8:f2:d5:f3:9e:bf:52:9f:83:
         be:44:c7:bf:e2:5e:dd:83:a0:75:24:74:db:ec:a8:f6:03:e3:
         d8:80:0b:b1:82:5e:8a:5d:53:25:78:76:28:c8:af:a9:6f:e7:
         39:b2:ba:fd:d0:3d:95:92:3f:36:45:d7:7c:e0:40:f1:ba:26:
         ab:f7:c5:97:a3:58:b1:47:21:f7:76:24:50:f9:06:7f:7a:ea:
         89:16:11:ab:75:29:74:a5:20:34:4c:d3:c2:8e:68:53:02:1c:
         15:cd:bd:fa:7f:bb:5a:25:81:25:b4:f1:34:b7:39:db:f9:ae:
         e5:de:e9:99:f3:f7:94:42:a6:9f:21:bb:12:7c:4e:27:98:b5:
         a0:af:29:9f:dd:c2:0b:19:a4:a4:89:ce:3e:b5:23:90:4c:03:
         62:9d:1c:1c:15:13:f6:2b:5c:d1:4a:34:60:f7:6e:37:0f:00:
         82:74:40:02:77:0e:e8:f7:2b:b0:43:4e:a1:bf:8a:fa:aa:20:
         75:23:df:4c:e9:37:02:75:da:e7:30:a5:2f:46:69:61:76:16:
         d6:39:37:e8
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUFbjIsUhgKNxyYbWXlBGGXphv3cEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZFRDE0ODcyMzYzMjFCRTNBREI3NjRBMkFERTU2REU4
RUI5MUQ0ODAeFw0yNjAxMDYxOTQyNDZaFw0yNzAxMDUxOTQ3NDZaMDMxMTAvBgNV
BAMTKDMzNjA3RjFDQjVDOThCMDg0MDk1NERGQ0MyNEFFRjU2NTQ4QTczM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpy2guA6+1t2/hBMKQM1aq8pOQ
26rWhgwpppd5HGjyJCtuoUzzT52mCFwnQl5s1wxwe67gtwioGW79VTZBsecx8qIF
853aNRRvuERlJbgb7dIx8rzjz4VfUqeGCZ6eiXJHHNgvDbTbETUexqegibXG9ZF2
krCMwlSTBvEdPMa/iJ5FfyMaz95FSSNHrdwXOZq+ue5VP5v8s08WdrcMgwJOLyZ+
3OsbGobOdfwAhLeE3riPcSQAH1JZr3wXC6JjFCdyFSyZejjblLdZGdCm3aE41qIS
FORPvpe7oUMXJawfFcJ0Cii4fprHvj5YSsXkBhfZcyH5Eb2BmfM6sIjeSrXbAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUM2B/HLXJiwhAlU38wkrvVlSKcz8wHwYDVR0j
BBgwFoAUdu0UhyNjIb4623ZKKt5W3o65HUgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yODgxNDY1MEI3NDA5MEU1ODk0NjhGRTRFQzE0MkM5REVC
NzU1REYwRjUxMzM1M0U1OTdCRjY4NkUwNUFDOUZBLzAvNzZFRDE0ODcyMzYzMjFC
RTNBREI3NjRBMkFERTU2REU4RUI5MUQ0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NkVEMTQ4NzIzNjMyMUJFM0FE
Qjc2NEEyQURFNTZERThFQjkxRDQ4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjg4MTQ2NTBCNzQwOTBFNTg5NDY4RkU0RUMxNDJDOURFQjc1NURGMEY1
MTMzNTNFNTk3QkY2ODZFMDVBQzlGQS8wLzMxMzYzODJlMzEzOTM1MmUzMTM4MzYy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzQzNzM2MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGo
w7owDQYJKoZIhvcNAQELBQADggEBAHt8ZZHGfglAMoCYW5aj4q86sSosApY1LPJp
n6vEcmf3sMT7WJK1EMHpqGVMhNjy1fOev1Kfg75Ex7/iXt2DoHUkdNvsqPYD49iA
C7GCXopdUyV4dijIr6lv5zmyuv3QPZWSPzZF13zgQPG6Jqv3xZejWLFHIfd2JFD5
Bn966okWEat1KXSlIDRM08KOaFMCHBXNvfp/u1olgSW08TS3Odv5ruXe6Znz95RC
pp8huxJ8TieYtaCvKZ/dwgsZpKSJzj61I5BMA2KdHBwVE/YrXNFKNGD3bjcPAIJ0
QAJ3Duj3K7BDTqG/ivqqIHUj30zpNwJ12ucwpS9GaWF2FtY5N+g=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:01 2026 by rpki-client