This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e35362e302f32332d3234203d3e20323632313636.roa
File:                     3136382e3233342e35362e302f32332d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          dKP7gGLwCGHrf0zVrVdtvcBmYXbcC4vpZ3XIlGQRobU=
Subject key identifier:   9A:4E:BD:91:1E:83:46:0B:D6:25:13:2D:D4:CF:F2:6D:AB:96:38:C1
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       7D184A8B953FEF7EF955977EBF552F0245B293A2
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e35362e302f32332d3234203d3e20323632313636.roa
Signing time:             Tue 06 Jan 2026 18:58:01 +0000
ROA not before:           Tue 06 Jan 2026 18:53:01 +0000
ROA not after:            Tue 05 Jan 2027 18:58:01 +0000
asID:                     262166
IP address blocks:        168.234.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:18:4a:8b:95:3f:ef:7e:f9:55:97:7e:bf:55:2f:02:45:b2:93:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Jan  6 18:53:01 2026 GMT
            Not After : Jan  5 18:58:01 2027 GMT
        Subject: CN=9A4EBD911E83460BD625132DD4CFF26DAB9638C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:df:79:f0:ed:6b:66:eb:61:ee:90:51:6b:8b:
                    6d:d5:5d:10:22:5a:e0:6f:78:58:5f:13:7b:5d:d5:
                    e0:4d:4c:be:07:6a:63:de:1c:dd:d8:7e:f3:89:d4:
                    52:6a:ce:3c:ef:d6:4b:ce:01:50:33:50:68:bc:c3:
                    1f:59:07:ac:23:19:84:cd:ec:52:6c:60:10:78:6b:
                    17:76:ee:75:8e:3d:27:f2:a9:cf:97:64:be:1c:78:
                    e4:e3:b8:5b:33:fb:fc:59:66:1b:c2:d2:1f:a2:bf:
                    ce:96:c6:ce:89:25:20:8d:dc:b2:00:d4:50:bf:be:
                    37:f8:3c:f0:18:b1:39:df:d4:c2:70:4b:4f:3b:9f:
                    03:b3:3a:47:09:d9:f1:ea:07:56:95:99:e8:3c:24:
                    06:c7:45:ab:2f:2e:da:1a:98:00:14:4a:6f:35:06:
                    2c:22:2e:7b:81:f8:fe:71:98:87:82:8a:4f:be:46:
                    da:b4:45:1f:d1:56:4b:ab:da:41:34:a6:2e:7f:6d:
                    17:8f:4e:3b:02:3e:89:f5:b6:a9:22:d7:25:fd:c8:
                    f2:dc:3a:17:90:b2:c0:41:81:9c:1c:18:84:51:54:
                    1a:bb:7f:48:f7:a1:01:73:a6:a4:1d:08:fc:f7:4b:
                    d3:af:4e:38:f7:2b:83:fe:ad:2f:a7:c8:0c:61:91:
                    d4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4E:BD:91:1E:83:46:0B:D6:25:13:2D:D4:CF:F2:6D:AB:96:38:C1
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e35362e302f32332d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:94:50:97:48:c7:d1:79:80:59:27:16:70:63:00:11:3a:3d:
         b5:59:0d:24:3a:83:7a:a3:c2:03:5f:5f:d2:76:b3:15:01:18:
         c5:e8:d5:b2:b1:83:e0:ff:f9:a2:e6:4a:8b:b3:16:ec:6c:02:
         46:89:af:f5:7b:0d:eb:a3:3d:16:cf:59:c0:a1:46:c3:1e:2a:
         1d:1d:17:a7:2d:d7:4a:9c:fd:18:99:70:58:c4:a4:89:f6:f4:
         25:a6:9e:5b:e9:ef:eb:87:d0:77:3d:ff:63:71:22:c1:06:59:
         5f:67:6a:8e:46:54:98:78:28:7c:8e:cf:0f:a2:9e:65:31:84:
         34:d1:e4:86:c9:4f:a4:3a:62:c9:1e:d3:52:df:b9:56:50:8c:
         cb:60:e8:f3:54:15:5f:a2:e7:56:cf:ca:f4:4f:40:83:23:b0:
         1e:7c:8b:44:80:86:a2:e6:3e:c7:ff:54:73:14:57:63:0d:1c:
         e8:ea:05:1b:0e:c8:d2:7d:f7:3d:7b:f6:64:2a:90:17:1c:3e:
         52:0d:39:d8:ac:9f:f5:f6:ad:b1:f5:e2:d6:2b:d7:09:0b:cb:
         25:50:cd:e5:0f:a5:fb:1e:95:a2:4b:94:6d:af:8c:78:b7:5a:
         59:e8:90:5b:e4:3e:b8:79:b5:ae:9a:3e:d7:19:ad:5d:d8:83:
         e8:6c:80:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:50:26 2026 by rpki-client