This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36322e302f32332d3234203d3e20323632313636.roa
File:                     3136382e3233342e36322e302f32332d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          1ye9dSwg47rpz7E0L4/OWNzLBSb2+7NMS6Wy6dQQ1uc=
Subject key identifier:   D2:14:33:93:2C:F7:AA:71:6E:E3:60:2A:5B:FB:8A:B8:E6:80:A5:14
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       6F0FAD7E5709BD76444F9436ED292739984F4D3C
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36322e302f32332d3234203d3e20323632313636.roa
Signing time:             Tue 18 Nov 2025 14:53:01 +0000
ROA not before:           Tue 18 Nov 2025 14:48:01 +0000
ROA not after:            Tue 17 Nov 2026 14:53:01 +0000
asID:                     262166
IP address blocks:        168.234.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 17:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:0f:ad:7e:57:09:bd:76:44:4f:94:36:ed:29:27:39:98:4f:4d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Nov 18 14:48:01 2025 GMT
            Not After : Nov 17 14:53:01 2026 GMT
        Subject: CN=D21433932CF7AA716EE3602A5BFB8AB8E680A514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:25:a6:77:f5:a1:5d:93:d3:c1:03:4c:ad:
                    27:bd:e6:f5:9d:91:a7:d4:0b:10:8c:1b:80:e7:17:
                    17:1a:df:c1:41:bc:7b:43:8d:20:ce:43:d9:6f:92:
                    ec:f3:d5:1f:88:fc:22:28:19:a7:5b:a1:36:e7:d8:
                    52:d7:51:c0:d8:93:78:5b:15:00:a2:3c:8e:d6:1d:
                    42:bb:a7:02:85:c1:93:a0:3d:64:a7:c6:51:d3:81:
                    d8:d4:a4:b7:2e:1f:eb:27:79:7f:40:6d:f5:e2:06:
                    ac:71:7a:16:de:a8:12:6c:a1:a8:3c:2d:1c:70:14:
                    70:8a:3d:39:98:5a:f7:6e:44:59:5a:7f:b1:f2:bc:
                    1a:a3:91:ba:e4:7d:ee:25:7a:08:dc:2f:ad:49:33:
                    0c:8b:79:67:e7:38:12:0f:3d:84:11:3c:b2:36:58:
                    4e:d2:b9:71:2f:89:6f:43:b6:dd:aa:cc:76:06:d0:
                    1d:b1:91:da:e8:6c:49:2d:64:65:b6:07:46:5b:fe:
                    0d:6b:c1:20:2c:2e:c1:51:a8:84:60:65:15:1d:02:
                    92:aa:75:04:53:76:27:db:76:a3:26:19:49:33:01:
                    ef:64:f8:58:b5:5a:cc:e5:96:fe:84:e9:ec:36:a8:
                    4e:81:62:91:1b:76:21:fd:81:8d:25:15:b5:56:74:
                    79:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:14:33:93:2C:F7:AA:71:6E:E3:60:2A:5B:FB:8A:B8:E6:80:A5:14
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36322e302f32332d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:91:58:58:00:eb:4b:8f:ab:b6:a8:a7:27:96:16:e5:2e:bb:
         9f:a4:01:48:b7:7e:af:93:3a:ae:8e:f6:34:e5:73:22:50:32:
         f7:7e:6e:a5:3b:46:8b:d3:9d:b1:3d:96:9d:58:18:f5:64:fe:
         00:ee:c4:8a:30:34:5c:9e:99:80:cc:65:80:84:e7:ff:37:fd:
         1e:f1:8e:eb:80:f6:46:1c:b9:08:22:b6:28:1d:f7:05:e3:64:
         80:75:ad:3f:07:e5:26:24:94:de:4b:eb:77:77:80:9e:9a:6d:
         02:dc:f5:a7:19:49:c9:a4:3b:dc:d4:dd:fa:fb:1b:74:11:84:
         72:8f:e0:50:be:52:5f:30:1b:f7:c1:29:75:ed:fd:ed:67:77:
         78:fb:a9:52:11:92:c3:b9:be:09:7a:d7:94:9c:fd:2a:9f:7e:
         34:b5:02:57:14:45:ab:ce:3d:9a:24:ed:b8:e1:68:5e:05:24:
         ec:a8:39:1f:9b:aa:b2:12:a0:d8:6e:6b:90:72:6b:b2:5d:de:
         8e:21:8c:36:fc:37:6c:57:a8:b3:fe:42:0d:48:f2:c7:7a:66:
         66:fb:6c:81:a4:28:59:bd:97:3b:9f:e7:4e:ab:0c:b7:98:1c:
         2d:8b:4c:c3:c7:7b:3b:f4:3f:4b:57:0d:58:ee:f3:db:c1:0c:
         00:b6:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 22:49:09 2025 by rpki-client