This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e3230342e302f32322d3234203d3e203233343134.roa
File:                     3136382e37372e3230342e302f32322d3234203d3e203233343134.roa (raw, json)
Hash identifier:          oSDXrixsFY1RuKuARxTgY67phtwhS+NP7aaz0qFeknw=
Subject key identifier:   74:F1:4E:99:C2:33:98:F9:00:7F:30:F3:40:22:76:F8:39:64:A7:BF
Certificate issuer:       /CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
Certificate serial:       015DD11E44B1BE10802D3D0F9900CCECC3756304
Authority key identifier: 69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e3230342e302f32322d3234203d3e203233343134.roa
Signing time:             Tue 06 Jan 2026 19:45:43 +0000
ROA not before:           Tue 06 Jan 2026 19:40:43 +0000
ROA not after:            Tue 05 Jan 2027 19:45:43 +0000
asID:                     23414
IP address blocks:        168.77.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5d:d1:1e:44:b1:be:10:80:2d:3d:0f:99:00:cc:ec:c3:75:63:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
        Validity
            Not Before: Jan  6 19:40:43 2026 GMT
            Not After : Jan  5 19:45:43 2027 GMT
        Subject: CN=74F14E99C23398F9007F30F3402276F83964A7BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:71:fc:34:b8:fe:59:3e:bc:9f:b7:76:55:
                    03:82:97:12:01:b3:b7:ec:9c:45:4b:70:33:09:98:
                    72:3f:e9:a9:09:0d:30:59:25:9c:0b:04:06:e6:1f:
                    41:c8:56:9f:13:39:98:12:37:8c:56:5a:e7:bb:68:
                    d2:7b:51:a7:44:c3:08:7b:c8:17:47:c8:41:02:a0:
                    02:31:de:bc:50:a9:a3:64:25:77:b8:9a:f3:26:e6:
                    56:34:22:7e:b3:33:f9:19:60:72:17:f8:f8:83:0c:
                    b9:41:f7:7b:4d:d0:12:56:89:da:a7:23:cc:71:fa:
                    e1:89:de:a6:31:90:a8:67:67:2d:45:2e:41:c4:60:
                    5e:e8:28:73:10:00:ba:4a:0e:f4:0b:e8:48:b4:1f:
                    bc:13:69:cd:2d:cb:f1:7a:8d:f0:40:a7:4c:66:eb:
                    44:97:c8:6e:36:4e:f1:e6:af:06:2d:15:85:12:bd:
                    ef:e5:e4:6d:50:4a:ca:2b:d0:90:6b:05:3e:8d:0c:
                    ce:94:56:3d:d5:c2:7d:80:b8:46:da:91:3c:39:64:
                    47:77:26:2f:dd:f1:b9:81:fe:a6:48:34:90:af:a3:
                    56:89:31:de:8f:77:0a:50:0d:06:5c:d1:21:07:f4:
                    1f:8d:70:59:5e:a2:91:ac:4d:01:95:cb:99:43:49:
                    54:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F1:4E:99:C2:33:98:F9:00:7F:30:F3:40:22:76:F8:39:64:A7:BF
            X509v3 Authority Key Identifier:
                keyid:69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e3230342e302f32322d3234203d3e203233343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.77.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:4e:c3:97:b3:e5:19:2e:51:ce:95:c3:33:f7:e0:5b:ba:06:
         39:af:e0:5e:a1:f1:2b:d6:3c:38:83:b9:7b:ef:c1:be:44:d2:
         34:49:c3:dd:69:7c:91:a2:21:4d:06:f7:76:2d:8a:54:4d:3f:
         9b:9d:4a:0a:49:4d:d1:59:a2:a9:11:a5:f6:f0:1a:3f:62:d6:
         0c:15:2d:a9:25:dc:cb:68:41:23:2a:7d:c9:e5:91:b1:07:40:
         c4:d7:c9:bd:52:70:53:45:c4:fe:bc:97:18:b7:27:39:93:73:
         78:ab:54:85:1b:fe:88:9e:07:82:d1:95:3f:c9:08:8b:09:05:
         cc:c8:c2:06:e2:55:30:9e:a2:d6:f3:c8:2c:ea:95:75:40:c8:
         74:b7:a7:d6:a1:ce:3e:a6:7a:05:4a:1e:ca:d1:9b:d3:c3:75:
         81:12:34:72:be:ef:a6:93:59:d1:dd:07:00:f1:52:20:f1:73:
         c6:ba:66:86:7a:00:7a:b0:26:84:61:c8:da:32:39:b9:f3:8c:
         db:36:ca:59:0a:58:5f:b3:d9:fc:91:4c:32:c4:0c:d1:4a:d3:
         82:a8:58:ef:0c:c3:ee:3e:d7:71:a5:9a:e6:64:7b:bb:89:d6:
         1f:be:3c:19:29:d9:db:2e:0e:7d:01:0b:75:f3:17:80:ed:19:
         c4:b7:6c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:20 2026 by rpki-client