This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3138342e302f32322d3234203d3e20323632313636.roa
File:                     3136382e3233342e3138342e302f32322d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          TBA97OF6sBu/O42TZIppUuMqHJG8oGe+ePXbnv8j8Lg=
Subject key identifier:   82:C7:37:81:87:CB:17:FB:A8:71:10:95:24:CF:E4:9F:C8:A8:63:6C
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       432D5F024F5DF998DEA44F427A4247F501D107B1
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3138342e302f32322d3234203d3e20323632313636.roa
Signing time:             Tue 06 Jan 2026 18:58:07 +0000
ROA not before:           Tue 06 Jan 2026 18:53:07 +0000
ROA not after:            Tue 05 Jan 2027 18:58:07 +0000
asID:                     262166
IP address blocks:        168.234.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:2d:5f:02:4f:5d:f9:98:de:a4:4f:42:7a:42:47:f5:01:d1:07:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Jan  6 18:53:07 2026 GMT
            Not After : Jan  5 18:58:07 2027 GMT
        Subject: CN=82C7378187CB17FBA871109524CFE49FC8A8636C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:5b:1f:a4:a9:40:d0:d8:01:13:75:af:2a:
                    dc:09:ab:b2:0c:fc:0a:4f:95:8d:3b:d1:25:41:69:
                    e7:ad:0d:36:6a:58:b8:0f:8b:7a:ea:f1:30:75:ac:
                    47:9a:2b:ec:7b:69:65:a5:7c:21:2f:5f:3e:8a:0b:
                    f5:1a:73:7c:a8:73:0a:94:f7:16:38:93:55:b6:c2:
                    c3:89:55:20:22:86:b6:9c:7e:56:84:4b:ba:a8:4a:
                    f6:a5:d4:b2:b2:0b:35:87:97:ef:26:86:ad:df:69:
                    30:f9:8c:c0:00:0a:60:4e:f0:bd:cc:8e:35:41:3d:
                    14:96:5f:e7:61:1c:f3:2e:3d:50:78:80:c9:48:ac:
                    06:82:7f:28:38:48:5d:1b:ed:17:7e:27:64:3a:7e:
                    80:5e:fb:a3:f8:37:68:a1:12:fe:0e:d0:0c:a8:74:
                    2e:f5:ff:5a:90:2b:e6:b3:49:40:14:69:6f:bd:7c:
                    6a:d9:e3:68:9d:40:4d:6a:47:b5:29:60:32:c3:f5:
                    92:1d:60:45:b3:77:23:b0:a0:d3:88:67:42:cd:8e:
                    c0:f8:b3:f9:29:c9:f0:fc:63:bc:50:63:01:93:25:
                    9b:70:f1:21:5c:9e:5f:26:cb:52:ba:57:96:54:f0:
                    01:dd:4b:20:63:a3:2c:12:92:7d:9e:ba:29:93:5b:
                    95:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C7:37:81:87:CB:17:FB:A8:71:10:95:24:CF:E4:9F:C8:A8:63:6C
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3138342e302f32322d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:f5:b7:de:61:33:cd:6e:be:83:13:c8:a2:96:a5:ec:78:ba:
         a8:32:df:6d:a8:fa:7a:d5:13:82:8f:5f:83:17:ef:31:0c:aa:
         39:39:46:2c:66:77:7b:3e:3f:99:25:f0:20:59:ac:4a:29:3b:
         5b:5e:ea:25:03:e6:8a:15:54:5b:a6:b8:13:ec:7c:be:47:e2:
         85:59:e2:78:2b:7b:d6:cd:07:6a:b4:d6:41:3c:bf:5a:e1:c8:
         d7:00:f8:ad:df:79:18:3e:12:f8:e8:c0:09:1b:b6:ba:34:54:
         9e:99:65:b8:39:9c:d8:1c:41:5a:f0:8c:25:0d:a5:15:1b:0b:
         6b:8f:4a:c2:81:96:d4:e7:d1:2b:0b:2c:48:dd:8b:bb:5a:00:
         3f:1d:44:08:5a:b6:33:c2:07:bc:96:70:dc:a8:e2:31:0e:f6:
         90:c6:c1:8f:61:29:52:74:fd:94:71:91:a2:00:d0:24:c8:0a:
         05:b3:2a:fd:bd:9e:0f:e9:6b:d9:b7:7d:69:e9:b9:f3:2e:4d:
         ad:e4:2a:a3:aa:4e:41:ef:9e:67:b4:99:cf:ab:7f:3c:28:09:
         df:2a:dc:8c:02:c6:91:35:a5:60:32:f2:a6:5a:0c:14:6a:45:
         7d:1f:bb:1b:2d:c8:71:2d:7f:dd:23:59:85:61:b5:32:ec:82:
         63:fd:33:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:56:39 2026 by rpki-client