This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3137372e3233342e3133362e302f32312d3231203d3e20323633383231.roa
File:                     3137372e3233342e3133362e302f32312d3231203d3e20323633383231.roa (raw, json)
Hash identifier:          1yblk2+8wfptJyCjweQyu4IDKPyNSRt6NIYZ5CkRCoQ=
Subject key identifier:   B1:26:9C:B1:FB:3F:C6:9B:97:99:42:34:E9:E6:3D:21:5F:0D:2C:70
Certificate issuer:       /CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Certificate serial:       38397EE70D14F61F6AB4BD9B71F5F9B1C20E4B83
Authority key identifier: 13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3137372e3233342e3133362e302f32312d3231203d3e20323633383231.roa
Signing time:             Tue 06 Jan 2026 19:33:10 +0000
ROA not before:           Tue 06 Jan 2026 19:28:10 +0000
ROA not after:            Tue 05 Jan 2027 19:33:10 +0000
asID:                     263821
IP address blocks:        177.234.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:39:7e:e7:0d:14:f6:1f:6a:b4:bd:9b:71:f5:f9:b1:c2:0e:4b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
        Validity
            Not Before: Jan  6 19:28:10 2026 GMT
            Not After : Jan  5 19:33:10 2027 GMT
        Subject: CN=B1269CB1FB3FC69B97994234E9E63D215F0D2C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e4:04:63:41:19:28:7b:b5:cb:b6:6e:2c:40:
                    ad:88:7b:27:99:69:d1:ae:95:2a:f6:e4:ce:0e:ca:
                    f2:71:04:f1:eb:6c:36:d8:f7:a7:bc:7e:47:4f:3f:
                    41:a3:66:c2:79:90:89:d5:9b:53:cc:00:7f:fc:43:
                    ba:a0:f4:9b:78:3c:f8:94:3f:63:4f:0c:e0:5d:ee:
                    01:c4:72:ca:ee:ca:4a:f5:99:69:99:83:68:db:c3:
                    ad:2b:55:ca:63:3f:88:1b:85:ec:da:06:cd:dd:92:
                    07:13:5a:ed:2e:6b:2c:ba:66:5a:43:7c:3e:9a:fe:
                    18:6c:f9:a5:14:cb:fe:d9:98:7d:7e:79:40:de:49:
                    76:8c:28:5f:bb:79:36:df:a2:9e:3b:ab:73:ca:b2:
                    3a:88:d2:fa:fe:15:7a:84:3d:7a:0b:88:79:eb:f7:
                    6e:f3:52:af:9a:11:b6:9f:9f:ae:f9:43:31:f5:0d:
                    cd:dc:4c:c7:dc:c5:1b:bb:62:67:d5:43:0d:87:9c:
                    b8:b6:a3:89:92:21:8f:91:cf:db:84:75:04:c4:19:
                    03:88:a2:87:f3:f4:79:39:be:93:10:ea:30:ae:b0:
                    6f:31:f6:80:79:19:51:9a:aa:6a:2d:24:57:a9:a9:
                    0b:83:b7:e3:3c:a3:cd:6a:6d:17:06:7e:57:1a:4f:
                    ad:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:26:9C:B1:FB:3F:C6:9B:97:99:42:34:E9:E6:3D:21:5F:0D:2C:70
            X509v3 Authority Key Identifier:
                keyid:13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3137372e3233342e3133362e302f32312d3231203d3e20323633383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:a1:e5:d9:f1:da:5f:35:2d:d3:01:fc:bb:bc:b2:bc:e1:56:
         80:40:12:67:06:9f:48:fd:f1:31:86:1e:33:e5:ab:28:23:69:
         ef:d7:48:31:55:88:4a:d4:b8:28:0d:e0:84:63:40:09:b6:e7:
         c5:aa:84:7c:2a:d6:60:30:5e:fd:99:20:8a:ae:9f:b0:38:d8:
         34:e7:6c:84:93:99:f6:b5:92:7b:4f:ab:6d:ae:eb:29:2a:a8:
         bb:1f:a1:5c:38:b3:48:b0:5a:94:fc:0b:fc:b6:00:8b:47:63:
         b1:56:af:53:10:96:fc:56:76:88:f9:30:86:1f:33:08:e2:5b:
         a1:0e:b9:2e:cb:cd:72:b9:1c:dc:63:f8:d9:14:30:2c:e4:50:
         7c:6d:5b:66:a1:6e:59:e2:90:99:5a:51:f8:ac:43:0f:1b:0b:
         c4:12:8b:c9:90:35:12:34:07:70:3a:df:cc:f9:2c:3c:92:c0:
         3a:ce:c0:c7:72:e5:86:c3:f9:0b:33:d0:4f:65:f9:64:2b:bc:
         a9:48:8b:be:08:8b:d5:9a:0d:9c:45:ca:39:7d:13:4f:8f:0d:
         44:f2:45:4e:61:fa:bc:c1:3e:d2:4f:18:65:4f:0d:88:0e:c6:
         3f:48:ed:f7:a9:73:cd:f6:97:23:aa:d0:05:d8:a5:ea:c7:18:
         f3:49:df:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:00 2026 by rpki-client