This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3230322e302f32332d3233203d3e203634313132.roa
File:                     3136382e3233312e3230322e302f32332d3233203d3e203634313132.roa (raw, json)
Hash identifier:          Rz9+cGF/y72LK0gpkKWuEVWIgq+Ia1sEn0BRMi90K/0=
Subject key identifier:   A1:6C:B5:CF:4C:AA:E1:EC:6A:63:CF:96:D4:F8:66:2E:4E:B8:B9:62
Certificate issuer:       /CN=2EEA5CACCAFE22736FD46CB2A532C287D9472855
Certificate serial:       2B622289792FFE0D1E25C1FA1388AA8F7962E6F7
Authority key identifier: 2E:EA:5C:AC:CA:FE:22:73:6F:D4:6C:B2:A5:32:C2:87:D9:47:28:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3230322e302f32332d3233203d3e203634313132.roa
Signing time:             Mon 29 Dec 2025 18:15:00 +0000
ROA not before:           Mon 29 Dec 2025 18:10:00 +0000
ROA not after:            Mon 28 Dec 2026 18:15:00 +0000
asID:                     64112
IP address blocks:        168.231.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.crl
                          rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:62:22:89:79:2f:fe:0d:1e:25:c1:fa:13:88:aa:8f:79:62:e6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EEA5CACCAFE22736FD46CB2A532C287D9472855
        Validity
            Not Before: Dec 29 18:10:00 2025 GMT
            Not After : Dec 28 18:15:00 2026 GMT
        Subject: CN=A16CB5CF4CAAE1EC6A63CF96D4F8662E4EB8B962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:ba:bc:de:55:c8:24:e2:05:88:19:97:b7:
                    64:67:ce:37:4c:58:2a:6a:29:08:ee:f3:4c:34:74:
                    d3:05:a5:86:ca:a9:28:d3:3b:4a:6e:e3:0b:b2:42:
                    8f:de:75:56:d9:ce:0f:6e:7c:8c:4a:12:fb:f2:1f:
                    ad:64:50:f5:2f:21:e4:a1:42:a3:ff:94:20:e2:f0:
                    20:47:11:47:54:48:1b:45:fb:45:c4:e7:d1:4e:69:
                    b5:71:40:24:18:a5:48:b2:19:cd:c7:aa:a3:0c:c4:
                    42:69:c5:f6:46:cf:cb:41:50:63:d5:4e:7e:a9:8f:
                    9f:2e:dc:dd:fd:62:e1:70:eb:2f:97:1a:4e:19:33:
                    43:8a:eb:a2:a4:96:2f:f4:50:0d:89:aa:d4:2c:a6:
                    60:8b:df:a4:52:2e:d9:0d:fa:ad:e2:3c:08:bb:9d:
                    46:38:76:cc:9c:fe:09:5c:06:82:6c:73:32:7c:8e:
                    78:d5:01:d0:0f:bb:cc:80:da:4c:ba:e0:e4:00:4c:
                    46:5c:54:f5:32:d0:15:e7:9d:3e:28:fe:46:ba:71:
                    96:7d:44:50:9b:ab:f6:15:d1:ac:a5:fe:fd:5a:5a:
                    c6:23:10:33:f0:44:ef:48:62:11:b8:c3:d7:23:f9:
                    90:ae:2d:70:cc:a3:c7:41:70:fb:41:cb:93:e0:e6:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6C:B5:CF:4C:AA:E1:EC:6A:63:CF:96:D4:F8:66:2E:4E:B8:B9:62
            X509v3 Authority Key Identifier:
                keyid:2E:EA:5C:AC:CA:FE:22:73:6F:D4:6C:B2:A5:32:C2:87:D9:47:28:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3230322e302f32332d3233203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.231.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:47:eb:05:5d:a3:c6:a3:b3:9b:9b:ca:7f:27:77:26:12:ff:
         7a:f5:2e:2e:7b:e6:1a:3c:61:25:d8:b0:83:9c:65:38:2c:09:
         00:ee:44:38:2f:27:d0:35:8e:b7:28:69:14:8c:1e:6a:aa:60:
         91:df:78:04:53:1d:50:86:a8:b2:e2:08:06:7e:ed:0f:a2:22:
         94:14:b1:ea:a9:bb:be:01:5d:6f:f2:6e:1e:c5:4b:04:e3:69:
         b2:22:df:be:a8:c6:52:70:51:3c:33:65:38:f6:99:30:16:51:
         b9:32:9d:7a:bf:35:a3:d1:eb:d7:0b:8b:f7:3f:41:bc:e4:a6:
         a9:95:cb:35:a5:d8:de:63:74:ed:35:b1:f2:70:76:e7:78:ce:
         ee:92:36:4b:6b:29:47:6f:c0:01:27:d3:2d:84:6f:6c:98:44:
         92:0e:76:ad:2e:61:25:2a:c3:eb:01:11:64:20:58:8f:97:43:
         9e:03:61:4d:3a:f6:45:26:5e:53:c8:75:c2:c8:7a:60:ea:31:
         61:4c:45:73:ef:e6:25:35:f5:ec:65:c6:57:39:c4:8f:2c:08:
         f8:50:cd:db:17:ba:d7:4c:a9:9c:1c:69:ab:5a:5a:76:89:1f:
         0e:8c:76:db:dd:c1:9a:86:08:f4:4b:fc:b6:48:96:10:df:2d:
         d4:44:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:47:44 2026 by rpki-client