This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3137312e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e3137312e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          M3jVuIMn0SWV1/mE/uBT3ECIgsi7F0tuRvlGGkv9WTk=
Subject key identifier:   2B:52:EC:AD:CF:A1:24:CE:A2:69:48:DE:61:90:8C:CD:3D:A1:0D:50
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       7D013713B279AF0EB5701701AD7FE5E6456430BD
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3137312e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 06 Jan 2026 18:58:12 +0000
ROA not before:           Tue 06 Jan 2026 18:53:12 +0000
ROA not after:            Tue 05 Jan 2027 18:58:12 +0000
asID:                     262166
IP address blocks:        168.234.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:01:37:13:b2:79:af:0e:b5:70:17:01:ad:7f:e5:e6:45:64:30:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Jan  6 18:53:12 2026 GMT
            Not After : Jan  5 18:58:12 2027 GMT
        Subject: CN=2B52ECADCFA124CEA26948DE61908CCD3DA10D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:32:1b:be:19:ff:c7:76:5b:3f:fa:bc:16:
                    98:41:5b:bf:22:92:09:7d:98:97:dc:85:65:42:5c:
                    a1:03:79:aa:63:fe:b8:37:6f:2e:57:ed:e8:16:c5:
                    0c:8c:87:ec:a5:14:5d:f7:00:f9:91:17:5d:d7:e9:
                    ff:6e:9c:81:04:93:65:60:1a:50:ff:da:f8:99:de:
                    2a:8d:69:ae:d4:0d:0e:da:29:4c:c3:9a:24:ec:99:
                    a6:0d:d4:cc:86:52:55:27:79:6b:7d:4b:28:d2:3b:
                    35:f8:91:fc:0e:bf:c5:15:67:30:40:51:21:08:80:
                    e7:17:61:0e:05:20:ca:d5:dd:bc:d0:e3:a3:0c:f7:
                    f0:d3:bd:56:c4:a7:26:f4:d4:9f:1a:4a:47:71:25:
                    d2:cd:d1:1c:7f:2b:86:aa:de:d5:23:7a:d3:68:25:
                    94:c5:a4:a5:a5:b5:87:84:ef:b9:94:6f:62:78:69:
                    6b:7c:42:5b:a3:b6:62:72:85:8c:1b:36:a2:71:4c:
                    5c:b8:f6:9b:18:f4:35:99:2f:f1:13:71:b4:9b:6c:
                    94:a4:30:d6:39:4a:c5:25:d2:eb:27:80:d4:9b:1c:
                    4b:1b:91:9b:8e:e0:b3:e6:d8:4b:6c:c7:90:20:47:
                    ac:93:77:f9:44:34:6f:75:91:08:92:71:69:2f:79:
                    cf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:52:EC:AD:CF:A1:24:CE:A2:69:48:DE:61:90:8C:CD:3D:A1:0D:50
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3137312e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:ca:2c:06:c8:5c:3d:62:39:a8:fb:f2:1a:ec:9d:2b:3e:f5:
         36:c5:f9:07:53:17:94:88:f9:b8:2e:1c:b5:cc:82:80:c4:c0:
         26:57:7f:fc:ff:b7:d3:c2:1a:95:bb:46:5e:a3:cd:ef:fd:16:
         b1:ae:fa:a4:91:fc:67:b2:8a:2e:0c:c0:f9:6d:56:6d:c9:14:
         72:62:29:6d:5c:5c:b8:50:4c:93:6a:54:e8:7d:4b:64:d3:2b:
         b6:80:b0:47:66:d7:bf:5a:2f:64:40:44:ec:19:7c:91:63:52:
         38:4a:8d:a3:68:03:fb:6b:49:61:13:98:f4:a3:1b:3b:14:c8:
         df:c5:05:2b:c9:2d:c2:7b:82:ea:8c:00:58:2e:81:ee:15:14:
         30:75:b8:59:26:39:09:2d:75:75:7c:d7:a6:39:4b:91:d2:76:
         82:4b:bb:31:b9:7e:12:8b:b3:aa:8b:20:f1:41:1f:d3:f9:49:
         3d:3c:10:fa:67:0a:4e:59:15:c3:5a:03:da:66:ab:08:cc:f5:
         5a:8f:e2:55:8b:f0:0a:d8:c1:dd:47:4b:79:37:9b:1e:4f:67:
         72:72:c4:5c:d3:fc:4a:d8:02:50:08:29:60:bd:a5:d0:cf:e0:
         79:c4:a6:34:ac:03:0b:4e:e2:b8:05:7f:34:91:85:08:b6:06:
         4a:4f:01:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:50:44 2026 by rpki-client