This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/3136382e3233322e39362e302f32322d3234203d3e203532333837.roa
File:                     3136382e3233322e39362e302f32322d3234203d3e203532333837.roa (raw, json)
Hash identifier:          kkW7WdtoKHiQUqcg6GwC2RkUYvy7NOmBV+lFaqskyXE=
Subject key identifier:   F7:BE:CC:31:35:DE:4C:15:F5:3C:97:41:B4:48:AE:EE:10:1A:55:2B
Certificate issuer:       /CN=159503B8FACEE08EF85A04D3D6C0322CCD9E2F81
Certificate serial:       205273CDFEB4426F8E183418701C23F1360A10C7
Authority key identifier: 15:95:03:B8:FA:CE:E0:8E:F8:5A:04:D3:D6:C0:32:2C:CD:9E:2F:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/3136382e3233322e39362e302f32322d3234203d3e203532333837.roa
Signing time:             Tue 06 Jan 2026 19:25:02 +0000
ROA not before:           Tue 06 Jan 2026 19:20:02 +0000
ROA not after:            Tue 05 Jan 2027 19:25:02 +0000
asID:                     52387
IP address blocks:        168.232.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:52:73:cd:fe:b4:42:6f:8e:18:34:18:70:1c:23:f1:36:0a:10:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159503B8FACEE08EF85A04D3D6C0322CCD9E2F81
        Validity
            Not Before: Jan  6 19:20:02 2026 GMT
            Not After : Jan  5 19:25:02 2027 GMT
        Subject: CN=F7BECC3135DE4C15F53C9741B448AEEE101A552B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:6d:11:b7:22:f0:80:55:46:39:64:02:70:
                    de:d0:b4:a3:9b:91:13:62:e6:6d:10:39:c9:78:77:
                    a6:76:5c:eb:98:b8:f6:16:01:dc:a2:46:0e:49:d0:
                    8d:dc:70:20:0f:7a:bf:ee:35:ff:30:a7:67:a1:63:
                    1f:f2:59:e6:3b:3c:00:ac:10:29:67:c6:4b:b5:fb:
                    9d:3d:48:d0:aa:00:02:0b:51:06:24:12:6b:1d:7c:
                    a8:54:88:b0:8a:79:8c:6b:bb:c3:5b:19:ff:bd:d9:
                    a2:db:8b:85:3e:9c:5c:61:98:d8:3f:8c:5c:f4:a4:
                    81:65:cb:6d:75:08:aa:77:1e:ae:59:a9:6c:c8:82:
                    a3:75:2f:5b:e1:a9:e8:aa:2d:a0:70:f5:21:ae:bf:
                    82:0e:bb:61:d4:61:db:8c:7f:ef:8b:e2:91:89:a9:
                    8f:c7:94:6e:52:f0:d1:7f:32:d8:de:49:e2:94:20:
                    df:5b:7b:2a:10:e9:c1:35:8d:4a:8b:97:5e:37:8e:
                    6a:be:fb:52:be:09:be:45:26:f2:95:d7:c6:ba:3d:
                    2d:07:50:10:51:da:d5:a4:32:4f:a1:6b:50:84:2c:
                    4d:40:7b:92:b1:24:20:66:23:3e:f7:2e:72:a2:3a:
                    4c:ec:12:0e:ff:86:08:4a:da:24:ca:cd:b8:5e:0d:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BE:CC:31:35:DE:4C:15:F5:3C:97:41:B4:48:AE:EE:10:1A:55:2B
            X509v3 Authority Key Identifier:
                keyid:15:95:03:B8:FA:CE:E0:8E:F8:5A:04:D3:D6:C0:32:2C:CD:9E:2F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/3136382e3233322e39362e302f32322d3234203d3e203532333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:19:10:d7:4a:87:88:b4:07:82:e4:3d:d9:7c:4b:75:10:
         8e:b8:d6:b9:d3:c7:be:98:8c:58:a0:44:cf:6e:7e:50:62:bf:
         06:4f:c4:d4:e2:b4:d3:a5:59:24:fb:df:59:6f:af:7d:89:c5:
         39:9f:fa:cf:f2:ae:16:c7:fa:02:b8:de:8d:05:aa:aa:48:fc:
         e3:b8:63:30:c9:e2:0c:f9:55:95:af:8d:e2:c0:7e:b9:a8:d7:
         96:76:da:21:de:ea:05:57:15:4e:44:53:0f:b3:d7:3b:b9:db:
         d4:b3:dc:b6:7e:3c:a9:4b:05:74:b5:4d:b7:a2:2e:03:cd:38:
         f1:a2:a3:71:28:9d:04:46:c9:c0:74:64:45:46:3f:d6:8c:65:
         3a:dd:3c:02:c7:83:3f:05:ed:40:1d:25:3d:71:23:84:b2:84:
         e2:a5:82:c0:34:66:fb:af:1e:35:0c:a1:fb:42:a5:3f:a4:0d:
         46:9a:34:99:7f:c9:75:70:09:37:fd:0f:21:8e:8b:4d:42:29:
         6b:e9:70:cb:55:c5:2b:01:e9:e6:dd:bb:b6:c2:ff:46:c9:c4:
         83:a8:cb:bc:c5:02:c3:f5:99:d0:59:8c:c6:25:80:d5:5e:ef:
         ba:83:a2:9b:99:68:4d:f6:cf:a4:25:6d:fa:13:71:2f:4f:cf:
         53:82:ef:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:16 2026 by rpki-client