This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e302e302f31362d3234203d3e2033353531.roa
File:                     3136382e37372e302e302f31362d3234203d3e2033353531.roa (raw, json)
Hash identifier:          s/yCoAllEHMaN8BnNtJcFO7el2K5U8stmbVXcBvEgKY=
Subject key identifier:   A7:14:77:46:CB:3C:18:FB:CF:09:61:86:DC:B3:29:D7:3A:36:FF:8A
Certificate issuer:       /CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
Certificate serial:       68036D3A6278D01D3087586D303AEA8C44270A27
Authority key identifier: 69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e302e302f31362d3234203d3e2033353531.roa
Signing time:             Tue 06 Jan 2026 19:45:42 +0000
ROA not before:           Tue 06 Jan 2026 19:40:42 +0000
ROA not after:            Tue 05 Jan 2027 19:45:42 +0000
asID:                     3551
IP address blocks:        168.77.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:03:6d:3a:62:78:d0:1d:30:87:58:6d:30:3a:ea:8c:44:27:0a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
        Validity
            Not Before: Jan  6 19:40:42 2026 GMT
            Not After : Jan  5 19:45:42 2027 GMT
        Subject: CN=A7147746CB3C18FBCF096186DCB329D73A36FF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:a0:29:8a:6f:63:a3:f3:d6:bc:f3:5e:7b:
                    df:a2:db:44:b0:73:91:35:3e:5b:b3:6c:d9:05:39:
                    36:e3:ff:cc:6f:eb:94:a9:55:9b:a0:86:bd:e0:3e:
                    f2:b7:ba:cb:4a:90:1c:b1:c6:04:01:ce:50:be:fc:
                    56:83:8a:8f:57:31:f2:0a:1d:46:a8:1b:d2:70:db:
                    b5:b0:00:4d:58:49:7b:f3:58:4e:14:48:d2:e5:61:
                    b9:7a:27:be:a7:ec:41:c8:eb:c4:65:15:4a:63:30:
                    a4:f4:6e:68:39:64:93:97:e1:56:53:df:6c:0b:b6:
                    3c:2a:41:b2:a1:4e:35:cc:a2:63:47:c8:96:73:77:
                    cd:05:b1:b5:e6:c0:35:72:70:32:d5:97:d0:ef:73:
                    4a:31:d6:e1:5e:a4:e1:5a:00:fd:e0:45:d0:00:f9:
                    13:e9:ab:cc:45:f9:6c:82:33:2b:0d:20:a1:15:3b:
                    fc:3e:e5:1f:a4:cd:00:5a:e5:aa:35:eb:51:b2:9b:
                    0e:02:1b:64:19:33:71:1b:51:2a:d6:a1:5e:8a:29:
                    e6:75:ff:57:e0:73:b2:b2:c9:f7:46:94:4e:23:7e:
                    d5:05:09:8d:7b:b0:41:08:91:d3:1d:d1:9d:3f:19:
                    57:1a:66:14:0e:7d:38:f2:d8:14:20:3f:b0:ec:a2:
                    7d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:14:77:46:CB:3C:18:FB:CF:09:61:86:DC:B3:29:D7:3A:36:FF:8A
            X509v3 Authority Key Identifier:
                keyid:69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e302e302f31362d3234203d3e2033353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.77.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a2:1c:7d:af:78:23:01:a7:d6:ee:3e:ab:6d:9a:e3:40:14:d8:
         6a:74:ab:7e:90:75:e9:e2:67:04:28:d2:b2:c1:82:40:67:49:
         51:8a:8b:3e:a9:3d:41:bc:fd:19:f5:ec:69:b5:29:d1:64:c1:
         86:c9:ba:8d:f7:27:1a:2e:4f:19:5d:d5:fb:1c:12:64:53:ca:
         32:3d:e9:e4:f7:a9:4c:94:0d:45:3f:62:cd:d0:cf:8f:bd:f8:
         9b:93:bd:d7:9b:87:94:7a:22:33:86:97:8e:cc:2e:f8:9f:c4:
         08:f5:e4:82:52:dd:84:97:c3:8b:5a:c1:75:63:09:5c:62:b1:
         81:e9:04:22:96:2b:6d:48:23:89:49:ce:60:b5:0e:7e:a9:d2:
         9a:85:ab:70:62:d5:17:94:da:4b:ba:39:3d:56:f6:f8:71:04:
         a9:56:48:d8:23:98:b0:df:fd:a3:b1:9e:50:51:11:26:fb:81:
         7b:e9:42:8c:20:97:fe:61:e6:9e:c5:e8:e1:97:31:cb:eb:28:
         fe:f6:54:97:e7:62:db:c0:28:96:84:89:37:84:41:16:a7:18:
         de:a4:0f:8f:f6:f6:b7:6a:2f:d3:4a:21:68:bb:7f:22:3e:59:
         41:3c:dd:32:c9:6d:3c:eb:23:31:b8:ba:ae:66:7e:17:47:eb:
         da:f5:99:ee
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUaANtOmJ40B0wh1htMDrqjEQnCicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkyOEJGNjIzQjgyMThFQkFERDVBREJEMDc5NTQ4Q0E5
NDVCOTBCRTAeFw0yNjAxMDYxOTQwNDJaFw0yNzAxMDUxOTQ1NDJaMDMxMTAvBgNV
BAMTKEE3MTQ3NzQ2Q0IzQzE4RkJDRjA5NjE4NkRDQjMyOUQ3M0EzNkZGOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8waApim9jo/PWvPNee9+i20Sw
c5E1PluzbNkFOTbj/8xv65SpVZughr3gPvK3ustKkByxxgQBzlC+/FaDio9XMfIK
HUaoG9Jw27WwAE1YSXvzWE4USNLlYbl6J76n7EHI68RlFUpjMKT0bmg5ZJOX4VZT
32wLtjwqQbKhTjXMomNHyJZzd80FsbXmwDVycDLVl9Dvc0ox1uFepOFaAP3gRdAA
+RPpq8xF+WyCMysNIKEVO/w+5R+kzQBa5ao161Gymw4CG2QZM3EbUSrWoV6KKeZ1
/1fgc7KyyfdGlE4jftUFCY17sEEIkdMd0Z0/GVcaZhQOfTjy2BQgP7Dson1nAgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQUpxR3Rss8GPvPCWGG3LMp1zo2/4owHwYDVR0j
BBgwFoAUaSi/YjuCGOut1a29B5VIypRbkL4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80N0UxNEYzMEYwRDAwMzIxMERDMzgwRUQ3RjY5NUNGRUY4
RjUxQUNCMjNGMTg3NTAyMzcyMDU3MjVCNzM5MjE5LzAvNjkyOEJGNjIzQjgyMThF
QkFERDVBREJEMDc5NTQ4Q0E5NDVCOTBCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OTI4QkY2MjNCODIxOEVCQURE
NUFEQkQwNzk1NDhDQTk0NUI5MEJFLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDdFMTRGMzBGMEQwMDMyMTBEQzM4MEVEN0Y2OTVDRkVGOEY1MUFDQjIz
RjE4NzUwMjM3MjA1NzI1QjczOTIxOS8wLzMxMzYzODJlMzczNzJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzMzM1MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAKhNMA0GCSqGSIb3
DQEBCwUAA4IBAQCiHH2veCMBp9buPqttmuNAFNhqdKt+kHXp4mcEKNKywYJAZ0lR
ios+qT1BvP0Z9exptSnRZMGGybqN9ycaLk8ZXdX7HBJkU8oyPenk96lMlA1FP2LN
0M+Pvfibk73Xm4eUeiIzhpeOzC74n8QI9eSCUt2El8OLWsF1YwlcYrGB6QQilitt
SCOJSc5gtQ5+qdKahatwYtUXlNpLujk9Vvb4cQSpVkjYI5iw3/2jsZ5QUREm+4F7
6UKMIJf+YeaexejhlzHL6yj+9lSX52LbwCiWhIk3hEEWpxjepA+P9va3ai/TSiFo
u38iPllBPN0yyW086yMxuLquZn4XR+va9Znu
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:23 2026 by rpki-client