This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e3230392e302f32342d3234203d3e203131353536.roa
File:                     3136382e37372e3230392e302f32342d3234203d3e203131353536.roa (raw, json)
Hash identifier:          7oPsPXyd/7aWzxxx5DKBKYdiHu8H69dJSNOBNpANemU=
Subject key identifier:   CE:34:9E:C0:B4:25:5B:E2:F0:53:29:2D:94:0C:F7:34:84:44:A4:6B
Certificate issuer:       /CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
Certificate serial:       573488943C3440AF9A6C654C9CAEAF67F932D3B7
Authority key identifier: 69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e3230392e302f32342d3234203d3e203131353536.roa
Signing time:             Tue 06 Jan 2026 19:45:42 +0000
ROA not before:           Tue 06 Jan 2026 19:40:42 +0000
ROA not after:            Tue 05 Jan 2027 19:45:42 +0000
asID:                     11556
IP address blocks:        168.77.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:34:88:94:3c:34:40:af:9a:6c:65:4c:9c:ae:af:67:f9:32:d3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
        Validity
            Not Before: Jan  6 19:40:42 2026 GMT
            Not After : Jan  5 19:45:42 2027 GMT
        Subject: CN=CE349EC0B4255BE2F053292D940CF7348444A46B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a1:c6:51:54:e6:3e:3b:8e:5b:ae:15:a8:26:
                    c5:eb:87:b2:e4:b8:60:d4:4b:06:05:b6:9a:25:1c:
                    05:2b:57:97:7e:cb:9a:61:1e:a6:8d:1e:b4:71:5e:
                    96:bc:e6:a5:f6:11:7b:8d:cc:09:70:14:e1:ba:f0:
                    0f:d4:3f:dc:fd:f4:76:39:31:3f:de:ad:da:1f:9d:
                    75:9d:14:9f:a0:64:8d:14:bf:8a:6f:1a:1c:df:ad:
                    bd:ce:72:e6:5b:8f:28:9c:7d:3c:8d:0c:ba:44:1f:
                    07:19:06:00:5b:35:35:12:4d:ee:e3:f6:d5:33:09:
                    ec:1a:dd:2c:03:e7:8c:92:9d:4b:a5:8d:b3:84:5d:
                    10:0e:f9:e7:ed:d7:99:e5:9c:44:35:a0:fe:6c:70:
                    4d:81:48:dc:f2:a7:81:28:cd:83:cc:d9:d9:61:50:
                    27:7f:11:0e:dc:1d:f8:b1:43:89:c0:3e:ba:0f:16:
                    db:1f:d5:f7:39:cf:69:2f:ff:44:f9:06:29:cf:e6:
                    8d:0f:0a:f4:b7:71:8a:3f:fa:75:b0:37:af:9a:97:
                    41:22:79:96:c4:bb:b5:30:58:c8:46:50:f7:d9:eb:
                    ea:f9:80:84:e3:6c:42:e2:f5:fc:d8:70:63:b1:e9:
                    88:d2:e7:9b:ea:7f:f9:01:34:96:39:25:6d:2e:91:
                    44:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:34:9E:C0:B4:25:5B:E2:F0:53:29:2D:94:0C:F7:34:84:44:A4:6B
            X509v3 Authority Key Identifier:
                keyid:69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e3230392e302f32342d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.77.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:23:23:ee:d6:02:54:2c:2e:2c:c3:94:0f:a3:5f:e9:4c:03:
         84:2e:94:fc:d3:10:b3:fd:5b:b1:5b:4e:ab:c4:54:2d:f7:68:
         b2:ef:49:cc:36:b8:9f:94:57:bb:47:c6:1b:2d:0a:d3:d0:f6:
         8b:14:76:cf:a8:a5:5b:3d:24:58:a3:eb:25:fb:a0:62:0b:c8:
         62:e7:e7:93:6d:42:69:8a:66:7d:d4:2d:27:59:76:f4:cd:e6:
         65:cd:92:e1:48:c8:6a:ef:86:d6:8a:fa:87:65:06:24:bd:b8:
         31:10:30:94:b2:fb:f5:2c:dc:9a:50:6d:9e:c9:50:3c:2e:09:
         5c:56:59:c2:cb:3d:9d:0b:da:35:b3:cc:32:9a:0b:8e:97:47:
         0d:78:0f:e8:db:f8:1c:14:19:08:df:2b:7c:75:62:ad:21:24:
         98:52:3f:e8:ec:a1:b5:d5:90:95:91:8c:9d:83:66:89:a7:4c:
         c1:43:a1:b3:b6:18:04:ed:bb:6a:24:c0:1c:a3:69:3a:78:da:
         d4:71:30:fa:a4:66:bf:f2:89:e7:f8:9f:f8:12:e7:eb:25:d0:
         1a:fc:1d:76:42:e8:18:ad:fd:76:29:db:1a:3d:df:10:1a:2c:
         08:1c:4c:e3:e2:5d:b7:4c:ec:81:72:d5:db:89:5b:12:97:7b:
         92:4a:8c:06
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVzSIlDw0QK+abGVMnK6vZ/ky07cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkyOEJGNjIzQjgyMThFQkFERDVBREJEMDc5NTQ4Q0E5
NDVCOTBCRTAeFw0yNjAxMDYxOTQwNDJaFw0yNzAxMDUxOTQ1NDJaMDMxMTAvBgNV
BAMTKENFMzQ5RUMwQjQyNTVCRTJGMDUzMjkyRDk0MENGNzM0ODQ0NEE0NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBocZRVOY+O45brhWoJsXrh7Lk
uGDUSwYFtpolHAUrV5d+y5phHqaNHrRxXpa85qX2EXuNzAlwFOG68A/UP9z99HY5
MT/erdofnXWdFJ+gZI0Uv4pvGhzfrb3OcuZbjyicfTyNDLpEHwcZBgBbNTUSTe7j
9tUzCewa3SwD54ySnUuljbOEXRAO+eft15nlnEQ1oP5scE2BSNzyp4EozYPM2dlh
UCd/EQ7cHfixQ4nAProPFtsf1fc5z2kv/0T5BinP5o0PCvS3cYo/+nWwN6+al0Ei
eZbEu7UwWMhGUPfZ6+r5gITjbELi9fzYcGOx6YjS55vqf/kBNJY5JW0ukUQLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUzjSewLQlW+LwUyktlAz3NIREpGswHwYDVR0j
BBgwFoAUaSi/YjuCGOut1a29B5VIypRbkL4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80N0UxNEYzMEYwRDAwMzIxMERDMzgwRUQ3RjY5NUNGRUY4
RjUxQUNCMjNGMTg3NTAyMzcyMDU3MjVCNzM5MjE5LzAvNjkyOEJGNjIzQjgyMThF
QkFERDVBREJEMDc5NTQ4Q0E5NDVCOTBCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OTI4QkY2MjNCODIxOEVCQURE
NUFEQkQwNzk1NDhDQTk0NUI5MEJFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDdFMTRGMzBGMEQwMDMyMTBEQzM4MEVEN0Y2OTVDRkVGOEY1MUFDQjIz
RjE4NzUwMjM3MjA1NzI1QjczOTIxOS8wLzMxMzYzODJlMzczNzJlMzIzMDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMTM1MzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKhN0TAN
BgkqhkiG9w0BAQsFAAOCAQEAWSMj7tYCVCwuLMOUD6Nf6UwDhC6U/NMQs/1bsVtO
q8RULfdosu9JzDa4n5RXu0fGGy0K09D2ixR2z6ilWz0kWKPrJfugYgvIYufnk21C
aYpmfdQtJ1l29M3mZc2S4UjIau+G1or6h2UGJL24MRAwlLL79SzcmlBtnslQPC4J
XFZZwss9nQvaNbPMMpoLjpdHDXgP6Nv4HBQZCN8rfHVirSEkmFI/6OyhtdWQlZGM
nYNmiadMwUOhs7YYBO27aiTAHKNpOnja1HEw+qRmv/KJ5/if+BLn6yXQGvwddkLo
GK39dinbGj3fEBosCBxM4+Jdt0zsgXLV24lbEpd7kkqMBg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:46 2026 by rpki-client