This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e302e302f31382d3138203d3e203634313132.roa
File:                     3136382e3233312e302e302f31382d3138203d3e203634313132.roa (raw, json)
Hash identifier:          O8AeHt4EscjKpE4bn8C32gzN12dgRCDJHufsFtn8feU=
Subject key identifier:   24:90:98:95:F1:96:C4:24:7F:9A:2D:53:DA:37:D3:50:D5:46:24:BA
Certificate issuer:       /CN=2EEA5CACCAFE22736FD46CB2A532C287D9472855
Certificate serial:       064BE6E67E7168099DCC8B9F86205FB11A57144E
Authority key identifier: 2E:EA:5C:AC:CA:FE:22:73:6F:D4:6C:B2:A5:32:C2:87:D9:47:28:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e302e302f31382d3138203d3e203634313132.roa
Signing time:             Mon 29 Dec 2025 18:15:01 +0000
ROA not before:           Mon 29 Dec 2025 18:10:01 +0000
ROA not after:            Mon 28 Dec 2026 18:15:01 +0000
asID:                     64112
IP address blocks:        168.231.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.crl
                          rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4b:e6:e6:7e:71:68:09:9d:cc:8b:9f:86:20:5f:b1:1a:57:14:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EEA5CACCAFE22736FD46CB2A532C287D9472855
        Validity
            Not Before: Dec 29 18:10:01 2025 GMT
            Not After : Dec 28 18:15:01 2026 GMT
        Subject: CN=24909895F196C4247F9A2D53DA37D350D54624BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:b2:d4:23:53:1e:eb:dd:6c:f7:73:db:79:
                    78:ef:f7:9d:d2:af:72:71:1f:7d:d4:0f:12:ca:2e:
                    4e:2c:2d:f5:07:83:fa:3a:60:84:16:d8:4e:70:da:
                    75:20:2d:b5:b8:90:5c:e0:bb:18:0e:66:46:96:ad:
                    9c:d1:65:d7:a4:54:60:49:87:1b:a2:12:a5:cf:cf:
                    56:0b:24:12:d7:18:28:44:c7:22:7a:36:96:20:55:
                    0d:a7:56:6f:e9:32:a3:78:ea:d9:fe:1e:c5:49:cf:
                    1d:f4:48:aa:55:2f:fc:47:2f:29:2e:c2:93:49:4f:
                    01:75:9a:76:56:73:82:5a:b0:44:e6:42:c8:77:03:
                    8c:0d:c8:b4:37:22:6f:27:db:9d:76:5a:99:13:8c:
                    19:35:f7:99:1e:cc:9f:0f:95:f9:df:4c:12:85:d2:
                    16:ba:1e:44:14:c9:33:00:a2:01:98:ec:7d:63:87:
                    64:f8:f2:83:db:de:5d:40:2b:40:c9:30:79:39:8d:
                    e8:5b:ee:53:95:35:71:59:a0:2e:36:4c:27:26:dc:
                    27:9b:c0:9e:4e:c2:1a:a6:df:e1:93:18:ef:7c:2e:
                    bc:b6:ea:f5:fe:db:9a:fc:e9:9a:62:d6:9d:c9:18:
                    f9:e4:94:ce:e4:33:73:e9:01:0a:2d:ab:5c:cc:a5:
                    df:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:90:98:95:F1:96:C4:24:7F:9A:2D:53:DA:37:D3:50:D5:46:24:BA
            X509v3 Authority Key Identifier:
                keyid:2E:EA:5C:AC:CA:FE:22:73:6F:D4:6C:B2:A5:32:C2:87:D9:47:28:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e302e302f31382d3138203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.231.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         78:3a:9d:a8:df:aa:e3:86:cc:39:3d:cc:55:21:43:a3:c4:6f:
         2d:2b:1b:a6:7d:4d:8c:76:9b:cf:53:ca:25:51:9e:72:54:7b:
         e6:ed:dc:3a:22:30:44:be:84:f5:80:57:ea:bc:a6:81:f2:c4:
         17:51:61:11:19:50:f2:1b:82:ac:31:f7:da:40:05:20:b0:de:
         e4:40:0b:2e:92:92:18:75:da:d6:27:1e:ee:3d:21:75:0b:07:
         f3:8a:26:cd:94:53:00:f9:9e:97:5e:d9:08:3d:72:17:d3:12:
         c6:bf:ee:c4:88:cd:61:af:7f:76:3f:be:f1:39:5b:2d:c6:f4:
         e7:70:28:5c:28:c1:a9:53:45:61:24:e8:56:a5:da:a7:6d:bd:
         c7:f8:61:26:16:ea:8b:26:cc:2c:c8:56:69:db:5c:51:f0:2c:
         22:7a:96:f5:7b:53:bb:28:5c:79:87:a0:08:b3:31:4f:53:be:
         92:1e:e0:98:c9:86:aa:ed:55:e8:b7:99:71:c9:ce:8c:a3:68:
         06:8d:fa:29:df:42:e3:d2:60:39:99:a6:af:62:98:f2:e4:cf:
         d4:41:b6:28:50:de:0d:92:38:07:db:f4:c1:aa:15:9c:80:40:
         00:80:4f:b1:29:15:9e:11:c8:46:c5:3d:21:87:7f:c9:35:4b:
         99:23:86:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:47:46 2026 by rpki-client