This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3136312e302e36382e302f32322d3232203d3e20323633383231.roa
File:                     3136312e302e36382e302f32322d3232203d3e20323633383231.roa (raw, json)
Hash identifier:          +wj1ad2CUdRMMfGSSIOlugQqeQpzFXTBWkLfv999Jag=
Subject key identifier:   57:54:B1:D4:76:73:30:FE:D3:4B:D8:8E:B0:1B:95:5B:BF:CA:69:D3
Certificate issuer:       /CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Certificate serial:       0586F6F71EB0595E25C5184C95CDFB177CC469BE
Authority key identifier: 13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3136312e302e36382e302f32322d3232203d3e20323633383231.roa
Signing time:             Tue 06 Jan 2026 19:33:12 +0000
ROA not before:           Tue 06 Jan 2026 19:28:12 +0000
ROA not after:            Tue 05 Jan 2027 19:33:12 +0000
asID:                     263821
IP address blocks:        161.0.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:86:f6:f7:1e:b0:59:5e:25:c5:18:4c:95:cd:fb:17:7c:c4:69:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
        Validity
            Not Before: Jan  6 19:28:12 2026 GMT
            Not After : Jan  5 19:33:12 2027 GMT
        Subject: CN=5754B1D4767330FED34BD88EB01B955BBFCA69D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:64:8a:a4:8b:66:ab:ea:ac:4c:c0:ca:29:
                    09:20:e2:bc:17:32:bc:d1:f0:4d:85:78:0e:24:b8:
                    98:1b:2d:54:62:f4:ff:35:8a:64:f9:ff:a2:99:db:
                    6a:e0:b1:e5:45:ec:67:8b:6f:36:7d:8b:97:f2:71:
                    25:cd:5f:d4:b6:a4:6d:cb:32:21:37:85:28:27:90:
                    2c:ff:2b:21:93:3f:16:06:70:63:04:8a:0c:a0:f9:
                    d2:57:b8:0f:88:10:1b:96:34:cd:4f:78:9a:26:02:
                    64:c4:0f:8b:34:81:2b:e0:2b:0f:88:6f:6b:78:df:
                    b8:00:c0:f0:16:35:a0:1f:6d:5c:24:33:75:b0:a9:
                    a5:33:f5:ca:c5:57:ec:e8:af:c6:3a:34:8b:73:7e:
                    a2:74:f6:c5:23:d7:13:61:80:44:c8:53:9b:bd:d8:
                    eb:56:c6:1a:f0:2b:39:af:c8:c9:12:32:5e:8e:fb:
                    78:d4:eb:dc:4b:c7:19:aa:21:0c:de:09:2d:35:4f:
                    bc:57:bc:f9:de:57:5b:d7:da:c6:2b:8b:08:5e:70:
                    ff:27:b8:5d:f9:60:44:c8:bc:97:89:1e:12:16:1d:
                    d1:a6:f9:74:eb:f8:f2:65:0c:d4:c6:9b:39:75:c2:
                    ef:c6:39:43:2b:dc:5e:d0:eb:90:51:7a:ab:34:ee:
                    67:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:54:B1:D4:76:73:30:FE:D3:4B:D8:8E:B0:1B:95:5B:BF:CA:69:D3
            X509v3 Authority Key Identifier:
                keyid:13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3136312e302e36382e302f32322d3232203d3e20323633383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:48:23:85:c2:ee:57:de:63:74:0f:72:95:1b:ea:2b:e8:6d:
         b7:10:ee:dd:fc:b0:ac:9f:ea:26:7a:bd:e9:78:88:8c:09:69:
         a2:e8:dc:55:5a:0c:2a:49:51:62:53:7d:b3:13:5e:06:e2:66:
         57:c3:13:10:e9:de:ec:b0:ef:95:2f:de:6f:6b:6c:89:c4:55:
         8c:c0:ed:77:4a:42:7f:86:c9:b4:af:02:da:a0:8d:78:17:d6:
         c3:7f:7d:d9:5b:53:36:e1:62:7f:2a:8a:d2:e4:13:34:39:a0:
         72:59:b4:ad:98:19:68:7d:c1:c5:13:9b:77:cc:ee:46:5e:18:
         62:15:28:61:50:9d:41:6b:a1:33:04:f9:e5:5d:7b:e4:e0:da:
         5b:6a:fe:63:0b:c8:a9:22:60:5f:55:51:18:d6:e6:ed:0a:c5:
         a5:4c:7e:b4:d2:6b:4c:1d:eb:b0:b5:c5:f9:cd:a9:d8:25:90:
         a2:d1:04:25:63:a6:b7:f7:e9:d6:5a:47:b2:2f:af:76:7a:4a:
         52:af:9a:14:fa:98:a8:3c:5f:14:7c:ad:e1:55:bf:92:d0:2b:
         65:c0:d8:f4:ac:99:1a:56:98:b9:3d:92:ed:ed:36:65:48:b6:
         38:c8:f4:bd:59:01:ff:53:b7:52:4b:1e:0d:c8:4a:c4:b4:4c:
         1a:5e:42:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:58 2026 by rpki-client