This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232322e302f32332d3234203d3e20323632313636.roa
File:                     3136382e3233342e3232322e302f32332d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          Ft1+BxI90CE+ZppJQJBLFCbzLwDr21OXC2erwWH+MN4=
Subject key identifier:   C4:95:1A:AF:DF:35:EC:5C:68:F9:2A:02:B0:C1:3E:9F:2F:3E:C0:ED
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       1A5405B4F8F6D3A69C3ABB8815B0F3E337B0C913
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232322e302f32332d3234203d3e20323632313636.roa
Signing time:             Tue 06 Jan 2026 18:58:09 +0000
ROA not before:           Tue 06 Jan 2026 18:53:09 +0000
ROA not after:            Tue 05 Jan 2027 18:58:09 +0000
asID:                     262166
IP address blocks:        168.234.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:54:05:b4:f8:f6:d3:a6:9c:3a:bb:88:15:b0:f3:e3:37:b0:c9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Jan  6 18:53:09 2026 GMT
            Not After : Jan  5 18:58:09 2027 GMT
        Subject: CN=C4951AAFDF35EC5C68F92A02B0C13E9F2F3EC0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:df:a5:2d:fa:8c:25:6e:f2:e2:66:2c:6e:
                    16:2e:0d:e5:d2:d5:53:3a:f9:79:56:ae:bf:d1:e6:
                    18:ac:c7:11:49:cb:80:06:84:93:ae:78:6a:6c:d9:
                    1f:cd:cd:e5:0d:05:8c:9b:60:6a:95:95:41:78:4b:
                    be:78:1d:c2:c6:f8:25:31:6d:e5:e2:94:5b:d2:cc:
                    48:bb:7a:76:eb:d9:ba:f0:5a:82:a5:d6:00:80:63:
                    95:dc:79:d8:c8:62:51:56:fc:96:1f:36:05:32:ef:
                    e1:9c:52:ba:cd:f1:3b:06:75:8b:d0:38:6a:37:6b:
                    d1:c8:d3:1f:81:e1:07:17:ee:27:f4:42:e7:94:28:
                    28:1d:1a:be:69:4f:09:7f:fb:3f:02:b4:d4:a3:03:
                    2a:90:3f:30:81:29:aa:d2:14:f8:53:c9:e7:82:cc:
                    a9:95:b9:fb:e6:9f:e1:07:84:a1:d9:f1:d6:07:fa:
                    9d:66:f9:65:fb:80:41:02:13:81:dd:ce:39:b1:75:
                    71:83:60:02:77:fc:6f:ca:05:9e:e8:7a:54:22:96:
                    4f:e4:63:28:d2:da:a1:e5:56:5d:54:4e:27:ea:57:
                    7b:61:09:79:82:6d:8f:3a:b1:21:ae:7f:60:b8:a2:
                    51:b3:bc:45:39:de:3c:cb:2f:4d:6b:14:87:0d:26:
                    56:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:95:1A:AF:DF:35:EC:5C:68:F9:2A:02:B0:C1:3E:9F:2F:3E:C0:ED
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232322e302f32332d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:ee:00:00:11:81:be:fd:bb:e1:9d:af:c3:c1:11:61:96:82:
         fe:ee:54:78:43:08:e0:9f:41:5f:95:ef:69:d9:ae:ec:f7:76:
         e7:e0:ef:82:99:b5:a0:dd:84:91:8c:b8:c1:87:5e:9e:8d:38:
         a8:e8:57:31:fb:f1:d6:f2:16:72:7c:c5:01:7b:ce:e9:ea:2b:
         5c:70:2c:08:20:fc:8b:14:33:f3:f8:28:8d:0b:97:96:0a:7d:
         57:00:69:56:4e:4b:ec:31:f0:a7:0d:2c:0d:69:cf:0c:cd:10:
         f5:37:db:30:d0:ff:e2:68:0e:d9:f6:cc:75:b4:84:ac:6a:e2:
         16:d3:9e:2b:fb:4d:47:cd:5c:55:eb:20:8b:29:e7:99:d2:8c:
         aa:75:9a:ab:69:4c:65:c7:1e:8e:79:47:b4:11:b1:84:f3:d3:
         31:fb:7b:b9:96:06:6f:62:57:11:ae:7e:45:c3:c2:cd:15:0e:
         bb:9e:b7:3c:ac:21:ae:eb:37:06:53:34:6f:f0:85:c1:35:b5:
         80:ec:c1:23:23:ac:50:7a:ec:e5:e3:c1:01:85:9e:b0:6b:fa:
         05:85:bc:67:c1:cb:1e:7a:27:ca:31:ce:0e:1b:40:c3:e8:a5:
         cd:0a:91:f6:c1:6c:c5:2f:25:1d:99:90:99:71:ea:ff:62:76:
         bd:74:23:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:13:40 2026 by rpki-client