This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/322B47F9A75A9A97A2B7C6BE0D763E02059272A6BCB223A76BCCD34A3506FF5D/0/3136382e3132312e33362e302f32322d3234203d3e203532343635.roa
File:                     3136382e3132312e33362e302f32322d3234203d3e203532343635.roa (raw, json)
Hash identifier:          fs9KR6VvxI+QmdxdFJQVjjEYkgaoi7NuqciwlLdH0fM=
Subject key identifier:   30:67:F1:78:C8:01:70:D0:D2:E2:A7:5D:E4:95:30:BE:11:ED:76:DF
Certificate issuer:       /CN=C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7
Certificate serial:       19012EBE23924CA0DA1DEBEF6DFFF4DC48C50E48
Authority key identifier: C8:0C:94:C3:F5:A1:61:40:1A:8E:A6:1F:1F:A9:2C:95:BE:2B:04:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/322B47F9A75A9A97A2B7C6BE0D763E02059272A6BCB223A76BCCD34A3506FF5D/0/3136382e3132312e33362e302f32322d3234203d3e203532343635.roa
Signing time:             Tue 06 Jan 2026 19:37:34 +0000
ROA not before:           Tue 06 Jan 2026 19:32:34 +0000
ROA not after:            Tue 05 Jan 2027 19:37:34 +0000
asID:                     52465
IP address blocks:        168.121.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/322B47F9A75A9A97A2B7C6BE0D763E02059272A6BCB223A76BCCD34A3506FF5D/0/C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/322B47F9A75A9A97A2B7C6BE0D763E02059272A6BCB223A76BCCD34A3506FF5D/0/C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:01:2e:be:23:92:4c:a0:da:1d:eb:ef:6d:ff:f4:dc:48:c5:0e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7
        Validity
            Not Before: Jan  6 19:32:34 2026 GMT
            Not After : Jan  5 19:37:34 2027 GMT
        Subject: CN=3067F178C80170D0D2E2A75DE49530BE11ED76DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f0:03:a9:14:69:47:c6:0a:3a:5a:ff:f5:1a:
                    7b:0f:e2:cc:8b:53:44:29:f4:1b:7b:94:b1:04:4f:
                    e3:19:4f:c3:dd:cb:7d:e4:ee:21:34:24:f3:d9:6f:
                    41:b3:10:87:8b:b1:0a:e2:13:86:40:ba:ea:2b:1c:
                    98:11:e4:dd:28:45:d2:e5:72:5e:01:d6:98:9f:54:
                    86:42:61:38:4f:11:08:c6:0e:95:df:ff:59:f5:8e:
                    f9:a9:8d:d0:0c:8b:74:a3:c7:7e:a3:89:40:3b:c8:
                    7f:20:ad:e1:aa:04:d0:f5:67:56:ec:be:7f:67:a5:
                    a4:d5:bb:ff:f7:cf:6f:1e:17:15:b0:07:55:53:cd:
                    85:2f:f4:7d:e4:c5:6c:6f:e1:1a:87:4d:e1:9a:2f:
                    1e:99:3f:bd:41:fa:1b:ac:ba:e9:63:fd:f9:52:3c:
                    97:4a:e6:a9:92:6c:da:97:97:4b:10:79:e2:3d:90:
                    63:89:b1:ac:42:ce:b6:e1:f6:02:5f:c4:9a:ca:e6:
                    f7:dd:54:5b:16:80:de:16:8d:f1:37:1a:44:34:61:
                    6a:8d:09:86:15:0d:ac:35:e7:23:d7:f6:50:ba:9f:
                    59:0b:ee:03:f7:62:a5:b7:e9:da:96:e9:cb:9d:9d:
                    8a:83:44:ea:cc:eb:de:4e:91:66:b8:3f:60:7c:2d:
                    f2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:67:F1:78:C8:01:70:D0:D2:E2:A7:5D:E4:95:30:BE:11:ED:76:DF
            X509v3 Authority Key Identifier:
                keyid:C8:0C:94:C3:F5:A1:61:40:1A:8E:A6:1F:1F:A9:2C:95:BE:2B:04:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/322B47F9A75A9A97A2B7C6BE0D763E02059272A6BCB223A76BCCD34A3506FF5D/0/C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/322B47F9A75A9A97A2B7C6BE0D763E02059272A6BCB223A76BCCD34A3506FF5D/0/3136382e3132312e33362e302f32322d3234203d3e203532343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:42:df:70:e4:24:2a:b2:c2:70:b3:5a:ef:c4:02:05:e6:88:
         a4:4c:78:99:07:ea:c2:6c:80:12:0f:d0:62:f5:0d:b1:c1:ef:
         b6:5f:7a:94:19:f9:0c:81:8d:57:79:e5:60:82:c3:e3:15:73:
         3c:90:08:2c:93:99:4e:df:84:33:46:e6:7d:39:ce:a2:f6:ae:
         b9:56:3e:4f:e4:26:2d:0c:16:6d:10:9c:c6:30:29:4e:34:3d:
         4a:b2:d9:0b:56:f4:fa:7c:ae:76:8b:6a:85:b7:e4:6b:2c:9d:
         f2:fa:28:59:87:06:f0:12:ee:97:d6:0c:9e:93:7a:1a:94:a7:
         de:75:6d:51:3c:b0:4e:f8:da:06:4c:3c:c9:86:ab:b4:64:e0:
         d1:3e:e1:47:44:81:a5:d5:24:db:84:10:19:29:26:95:a4:f5:
         14:1f:6f:aa:a2:5e:16:6e:cc:ea:eb:1f:46:00:86:46:be:dc:
         1c:86:81:3d:9a:24:15:c0:14:ea:41:f9:dd:bb:47:8e:84:d7:
         00:97:48:e3:8b:b4:cd:c6:f6:53:9f:50:de:ff:82:ee:5f:dc:
         9f:2f:a1:6b:4a:b0:e4:6c:68:30:fb:0b:0d:48:4d:f4:15:b1:
         8b:3f:98:7b:33:c9:e5:30:a4:03:2f:61:5f:f5:a1:6a:72:71:
         78:c3:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:11 2026 by rpki-client