This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44B42A6E76A0FA6E5C6B32A40E4650F45997D445CBE32D80F19D47E8F4060500/0/3136382e3139362e39362e302f32322d3234203d3e20323733303736.roa
File:                     3136382e3139362e39362e302f32322d3234203d3e20323733303736.roa (raw, json)
Hash identifier:          9qDHT417R1XvgXGhZL270kqSY8T1W6uvTJou/maes/o=
Subject key identifier:   8A:FB:37:9B:A8:82:73:AF:77:AC:CA:8A:BE:3A:BC:64:7D:3C:B0:BE
Certificate issuer:       /CN=EFDD44A2C82FE99A65FB11ADF256599AFD91056F
Certificate serial:       76F4F095249699D0F1603DA23DFFB92FE8B665
Authority key identifier: EF:DD:44:A2:C8:2F:E9:9A:65:FB:11:AD:F2:56:59:9A:FD:91:05:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFDD44A2C82FE99A65FB11ADF256599AFD91056F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44B42A6E76A0FA6E5C6B32A40E4650F45997D445CBE32D80F19D47E8F4060500/0/3136382e3139362e39362e302f32322d3234203d3e20323733303736.roa
Signing time:             Tue 06 Jan 2026 20:55:15 +0000
ROA not before:           Tue 06 Jan 2026 20:50:15 +0000
ROA not after:            Tue 05 Jan 2027 20:55:15 +0000
asID:                     273076
IP address blocks:        168.196.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/44B42A6E76A0FA6E5C6B32A40E4650F45997D445CBE32D80F19D47E8F4060500/0/EFDD44A2C82FE99A65FB11ADF256599AFD91056F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/44B42A6E76A0FA6E5C6B32A40E4650F45997D445CBE32D80F19D47E8F4060500/0/EFDD44A2C82FE99A65FB11ADF256599AFD91056F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFDD44A2C82FE99A65FB11ADF256599AFD91056F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f4:f0:95:24:96:99:d0:f1:60:3d:a2:3d:ff:b9:2f:e8:b6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFDD44A2C82FE99A65FB11ADF256599AFD91056F
        Validity
            Not Before: Jan  6 20:50:15 2026 GMT
            Not After : Jan  5 20:55:15 2027 GMT
        Subject: CN=8AFB379BA88273AF77ACCA8ABE3ABC647D3CB0BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:a4:b5:45:4b:ed:da:1e:9d:2c:a1:ba:fb:
                    c5:f8:8d:e9:44:b8:bd:13:79:1d:7a:8e:46:95:a7:
                    89:d1:69:97:a2:c4:3a:e9:da:70:8a:1e:76:c9:7a:
                    e8:44:3d:b1:65:6b:39:88:6b:9a:fa:33:8b:02:0c:
                    b5:de:19:c4:1d:a5:7a:bf:c0:6a:9b:47:b5:5c:67:
                    71:f3:88:b6:18:48:13:7c:a4:95:a0:c1:18:24:64:
                    99:3f:34:06:46:1f:d6:2a:0e:1c:96:8a:8c:32:81:
                    99:f4:8e:47:a3:a2:7f:da:cb:6b:59:27:d3:33:72:
                    c7:56:42:02:5f:d8:40:f3:58:e8:73:16:43:ed:e7:
                    67:de:ce:55:8b:e3:72:12:5e:03:b2:8c:26:ba:64:
                    01:d6:08:ae:01:ea:7e:0d:3e:fe:32:df:27:15:f0:
                    1c:5d:7b:80:18:c4:73:7b:30:40:4a:0f:fe:8a:83:
                    3a:6e:5b:10:65:9c:eb:94:ed:9b:11:4b:22:d4:17:
                    76:71:c3:bc:a6:a1:e3:9d:4c:dc:68:cb:92:9f:9d:
                    c5:0d:7e:4f:b6:0c:56:d2:68:e0:a1:dc:d1:41:88:
                    69:96:ac:f1:6b:41:b5:14:79:bf:66:19:f2:8d:c7:
                    20:57:a3:60:31:bc:08:17:ee:0d:ba:69:10:f1:2e:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FB:37:9B:A8:82:73:AF:77:AC:CA:8A:BE:3A:BC:64:7D:3C:B0:BE
            X509v3 Authority Key Identifier:
                keyid:EF:DD:44:A2:C8:2F:E9:9A:65:FB:11:AD:F2:56:59:9A:FD:91:05:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44B42A6E76A0FA6E5C6B32A40E4650F45997D445CBE32D80F19D47E8F4060500/0/EFDD44A2C82FE99A65FB11ADF256599AFD91056F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFDD44A2C82FE99A65FB11ADF256599AFD91056F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44B42A6E76A0FA6E5C6B32A40E4650F45997D445CBE32D80F19D47E8F4060500/0/3136382e3139362e39362e302f32322d3234203d3e20323733303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:f0:5b:19:76:c4:5e:6f:bf:22:1b:8c:9e:07:10:d1:2a:a1:
         99:90:ea:f1:46:03:c4:ca:45:46:8d:c3:a8:27:28:f3:cd:52:
         a3:b2:ad:a9:1b:46:ff:f3:7a:98:c9:57:52:c8:d4:79:ff:38:
         f1:26:14:ee:f0:54:e3:69:77:2e:7d:f2:32:13:ed:d0:0a:25:
         61:c2:ac:dc:3b:05:cb:47:a1:de:33:98:a3:2c:0c:2c:f7:e5:
         f9:9a:5c:9e:e4:04:e6:f2:02:71:72:48:83:5b:f0:c9:11:c7:
         2a:0f:ae:89:ad:47:d1:4a:e4:c3:52:a2:83:aa:71:b7:9c:21:
         cd:b3:d4:f3:01:13:18:cc:7b:41:5e:f6:cf:39:1d:a9:2b:e9:
         e9:3e:2d:be:76:04:74:eb:2d:f9:be:52:14:14:f2:54:e9:38:
         d2:05:60:c9:73:91:57:81:d1:b4:54:98:bb:35:45:ed:7d:42:
         d1:7f:69:87:18:2a:f1:22:e4:68:25:89:9b:ba:f2:e1:7b:04:
         93:a7:4a:31:04:94:43:20:a3:fb:63:00:a9:2e:73:1c:12:c1:
         f0:0a:f2:43:da:fd:aa:82:02:79:68:9d:45:5a:f8:b6:e7:c9:
         18:76:52:50:87:06:31:25:09:53:c6:d4:54:ee:57:e9:93:49:
         70:9d:92:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:31:04 2026 by rpki-client