This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/3136382e3139362e3134302e302f32322d3234203d3e20323634373638.roa
File:                     3136382e3139362e3134302e302f32322d3234203d3e20323634373638.roa (raw, json)
Hash identifier:          abq8N+mceXnazzTsJUyWqmTuFwYUIw8wg7aYVfkcMik=
Subject key identifier:   27:CB:8D:F7:ED:75:F2:91:D7:7C:0F:D5:C9:62:5B:4E:77:82:69:83
Certificate issuer:       /CN=6F2B68C44C2A31541210D894254226DCF2A63FD5
Certificate serial:       0228C96DC95628BE70E186652707F97D7C90A6A1
Authority key identifier: 6F:2B:68:C4:4C:2A:31:54:12:10:D8:94:25:42:26:DC:F2:A6:3F:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/3136382e3139362e3134302e302f32322d3234203d3e20323634373638.roa
Signing time:             Tue 06 Jan 2026 19:01:26 +0000
ROA not before:           Tue 06 Jan 2026 18:56:26 +0000
ROA not after:            Tue 05 Jan 2027 19:01:26 +0000
asID:                     264768
IP address blocks:        168.196.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:28:c9:6d:c9:56:28:be:70:e1:86:65:27:07:f9:7d:7c:90:a6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F2B68C44C2A31541210D894254226DCF2A63FD5
        Validity
            Not Before: Jan  6 18:56:26 2026 GMT
            Not After : Jan  5 19:01:26 2027 GMT
        Subject: CN=27CB8DF7ED75F291D77C0FD5C9625B4E77826983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f2:3b:bd:b0:38:5a:ff:58:fc:40:a1:cb:31:
                    ee:61:8e:27:87:12:a9:f6:66:43:c2:7c:20:ec:ba:
                    61:8c:7c:b1:83:97:06:41:88:e9:74:0b:85:a1:7a:
                    d7:42:e5:09:0d:38:13:ab:04:a7:49:13:54:9e:c9:
                    db:4e:55:e5:74:4d:56:e8:4d:30:d0:d8:83:92:59:
                    2b:97:33:4e:93:93:f7:cd:5b:df:49:f3:d0:9e:5a:
                    25:a6:2b:20:25:08:76:d1:34:fc:ea:4f:b2:20:91:
                    1f:03:a9:a8:e8:46:68:72:f4:97:92:45:17:04:f1:
                    09:d0:d7:c2:31:6f:ae:b5:75:18:7d:e5:47:ed:af:
                    d6:71:ff:da:57:77:b1:6b:48:cd:f4:15:df:d3:fe:
                    66:5b:35:6c:cd:c1:51:8a:28:67:0e:bd:75:7f:cd:
                    7e:03:b2:0d:4d:68:c5:bb:e5:bd:6a:b2:a4:22:50:
                    c3:31:8d:69:4b:60:f3:a3:27:9d:09:1e:58:6c:c8:
                    27:1e:57:1d:e5:5f:8e:ed:ee:65:0e:0c:ad:b1:a1:
                    78:ad:14:81:1a:d3:77:39:1e:92:17:41:54:87:f0:
                    cd:f0:fb:76:81:b5:19:ce:d4:6f:71:d9:a9:1b:98:
                    7d:91:d4:78:98:e1:4b:e6:8e:ae:45:7a:f0:a8:96:
                    00:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CB:8D:F7:ED:75:F2:91:D7:7C:0F:D5:C9:62:5B:4E:77:82:69:83
            X509v3 Authority Key Identifier:
                keyid:6F:2B:68:C4:4C:2A:31:54:12:10:D8:94:25:42:26:DC:F2:A6:3F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/3136382e3139362e3134302e302f32322d3234203d3e20323634373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:f8:f2:48:56:34:ab:53:19:ba:bb:68:94:71:bc:79:73:27:
         82:e0:2a:be:ad:92:52:c1:52:a9:a4:4c:34:29:a1:39:a0:fe:
         8f:3a:0c:84:54:ca:1f:46:23:32:15:8a:d6:af:2f:79:3f:55:
         f5:1d:b1:40:65:b3:70:34:7d:d4:ab:d4:fe:2e:2c:6f:2d:81:
         40:a2:c2:cc:cd:9c:ab:e9:ed:c2:8a:9b:c9:38:85:07:f0:56:
         6d:3c:3b:13:f3:f4:3a:38:48:89:dd:1a:58:cf:a0:97:c4:30:
         a7:2e:3d:45:0d:64:a2:3c:8f:b7:41:85:48:db:71:49:07:82:
         70:9f:37:18:45:0a:93:16:f0:7f:22:92:a1:ae:93:79:94:1c:
         20:a3:b5:7c:2c:db:ae:2d:18:1b:df:76:cd:ba:6f:b0:68:15:
         42:b0:18:99:3c:66:c8:c0:b9:c4:a5:52:50:ed:1e:52:2b:4a:
         95:e5:9a:ab:ca:d9:98:42:1f:85:d2:c3:8e:3f:be:53:59:6b:
         23:f5:2a:0d:43:5e:19:5e:14:f7:19:06:e3:51:2e:b3:9c:87:
         4f:7c:7a:43:8d:04:90:63:ef:2e:d6:e7:7a:48:b2:1b:46:5e:
         57:24:a8:22:eb:79:09:71:63:75:46:23:aa:a6:69:a4:02:6a:
         85:d3:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:33 2026 by rpki-client