This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3136342e3136332e3138342e302f32332d3234203d3e20323731383134.roa
File:                     3136342e3136332e3138342e302f32332d3234203d3e20323731383134.roa (raw, json)
Hash identifier:          t3qOCLDveogez6SnYUkpGLeYaToAfS5RiMJQ0hvHJ3A=
Subject key identifier:   44:F9:E5:8A:E5:A4:86:C4:94:77:67:2B:F5:0B:0C:57:DD:B6:1D:73
Certificate issuer:       /CN=E8415F203EB930F191C0398A880C11B310EE5884
Certificate serial:       20F7F8CBED5BD8AD7E7300441E1FF088B6536524
Authority key identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3136342e3136332e3138342e302f32332d3234203d3e20323731383134.roa
Signing time:             Fri 09 Jan 2026 08:50:00 +0000
ROA not before:           Fri 09 Jan 2026 08:45:00 +0000
ROA not after:            Fri 08 Jan 2027 08:50:00 +0000
asID:                     271814
IP address blocks:        164.163.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f7:f8:cb:ed:5b:d8:ad:7e:73:00:44:1e:1f:f0:88:b6:53:65:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8415F203EB930F191C0398A880C11B310EE5884
        Validity
            Not Before: Jan  9 08:45:00 2026 GMT
            Not After : Jan  8 08:50:00 2027 GMT
        Subject: CN=44F9E58AE5A486C49477672BF50B0C57DDB61D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:7d:c3:6e:eb:83:12:1c:38:81:68:42:55:
                    d0:a2:60:b2:b0:c6:02:c4:31:f2:9d:ff:97:d4:ca:
                    7e:eb:96:f5:a2:9a:60:ed:a3:2a:87:db:c2:b1:d0:
                    39:d0:dd:ce:a0:63:14:ff:19:4d:93:6e:ae:80:fe:
                    25:de:d4:2d:ae:c3:8b:7e:77:79:10:07:d7:63:2e:
                    d6:ec:00:32:af:5d:da:e4:be:d4:32:22:69:96:b5:
                    4c:1a:05:39:5b:fb:20:07:e8:46:1c:af:fe:af:9b:
                    69:d1:c8:0e:44:cf:b1:e4:16:02:90:54:d1:dd:bc:
                    6f:f2:94:9e:1f:80:b9:4c:db:47:00:6f:a7:55:32:
                    9d:44:40:41:d1:98:43:79:d3:2d:9a:c2:89:73:dc:
                    d3:0d:2f:98:67:c6:22:4b:8d:85:35:8c:cb:ab:06:
                    48:cf:ff:59:66:df:c8:58:cb:e7:7b:b8:88:c1:2f:
                    47:a2:e3:95:d7:35:67:f6:8d:8f:d0:be:a1:34:5d:
                    99:c1:0a:b0:13:fc:11:60:34:2a:13:5c:70:0a:ee:
                    64:b8:e9:41:d6:18:b2:6c:a3:2e:1f:37:2d:4c:01:
                    48:8e:d4:45:0f:90:fe:a0:81:19:2a:14:69:05:fd:
                    5d:a7:b4:aa:ef:23:11:e8:fb:f4:9d:09:5a:28:ee:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F9:E5:8A:E5:A4:86:C4:94:77:67:2B:F5:0B:0C:57:DD:B6:1D:73
            X509v3 Authority Key Identifier:
                keyid:E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3136342e3136332e3138342e302f32332d3234203d3e20323731383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:bc:82:72:3d:da:57:cb:56:25:55:8f:02:d3:6f:dd:7f:3e:
         c5:55:8a:2a:6d:02:7c:47:d7:0c:1b:10:0a:08:13:06:92:ac:
         79:d6:d4:37:47:c2:ea:ef:c9:84:27:fd:b3:4a:4e:db:3f:ba:
         d7:5c:aa:25:f8:f7:9a:f5:23:c0:de:4b:b2:e3:15:f1:85:d3:
         a0:52:4e:91:2d:49:a1:90:2a:2a:76:60:1b:8b:fd:cb:d9:1a:
         b8:64:cd:3c:ba:4a:c5:0d:83:3c:e1:d2:8d:28:78:c7:80:a8:
         4a:ff:f0:61:7c:d1:3f:a9:46:f4:67:ae:90:ae:32:24:50:14:
         85:c2:47:19:b7:94:86:a2:d0:05:7c:0e:53:e9:e2:02:29:db:
         81:10:13:10:bd:a1:ad:71:7a:16:ef:fc:08:3d:48:97:94:ad:
         65:58:b8:04:73:2b:45:b1:00:43:3c:10:9e:fd:2c:6d:eb:2e:
         88:09:55:24:8c:32:2b:a6:c8:dd:4c:e2:a5:cb:a3:9f:3e:2e:
         6d:98:7c:91:40:ca:5f:92:bf:01:a3:3f:61:17:27:49:b2:23:
         6d:0e:4d:15:4b:c0:c7:b9:f8:5d:66:1d:fe:8f:ca:87:18:bc:
         33:2a:9a:b6:bd:aa:10:16:03:95:65:5e:5a:be:fa:17:73:78:
         bc:16:5a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:21 2026 by rpki-client