This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37322e302f32332d3233203d3e203532343933.roa
File:                     3136382e39302e37322e302f32332d3233203d3e203532343933.roa (raw, json)
Hash identifier:          Yxn8f+uk8Lvep0pi1U3q4LKpw76s7qKuOCcfqL4IVX8=
Subject key identifier:   3D:68:F5:E1:40:9D:91:05:CE:73:5C:8C:E4:FB:A0:33:0D:05:75:E3
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       148CEC1710E9842D4BF0A536F9DAF99D040E4259
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37322e302f32332d3233203d3e203532343933.roa
Signing time:             Tue 06 Jan 2026 19:10:24 +0000
ROA not before:           Tue 06 Jan 2026 19:05:24 +0000
ROA not after:            Tue 05 Jan 2027 19:10:24 +0000
asID:                     52493
IP address blocks:        168.90.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 16:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8c:ec:17:10:e9:84:2d:4b:f0:a5:36:f9:da:f9:9d:04:0e:42:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Jan  6 19:05:24 2026 GMT
            Not After : Jan  5 19:10:24 2027 GMT
        Subject: CN=3D68F5E1409D9105CE735C8CE4FBA0330D0575E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:85:d8:b8:ba:88:3b:1d:57:d1:28:00:af:7d:
                    64:eb:16:c7:39:b4:51:4a:66:c1:17:a7:f6:0f:9a:
                    d1:5e:eb:2a:6d:3f:aa:17:6b:ca:e0:9e:7e:57:04:
                    3a:86:46:c4:77:3a:c8:61:ee:a1:70:f0:6c:0d:11:
                    8a:19:28:bf:6c:e6:e8:24:8d:b0:7e:c1:c9:15:9c:
                    5c:52:77:bd:90:9f:45:7d:30:f7:bf:eb:88:66:cb:
                    00:92:6e:9c:6a:ff:e4:ad:94:cd:d2:98:1a:89:2a:
                    8e:98:41:33:80:cd:0d:d3:39:f8:6a:94:be:9d:0f:
                    d2:11:a5:e5:94:a8:cb:25:07:75:c3:c1:b7:4f:a1:
                    b6:17:0e:f0:80:38:c7:45:61:af:87:9e:b0:d5:17:
                    d7:a5:26:97:ac:88:e5:a8:19:3b:aa:a2:4d:29:fb:
                    48:03:e9:87:52:8a:8f:9c:f3:b2:92:54:79:db:17:
                    06:f5:82:1c:74:72:96:73:28:fa:9a:ba:79:c1:55:
                    6a:f1:9b:43:4e:b9:26:98:77:79:fe:ca:76:04:37:
                    57:11:05:95:e8:17:7a:2e:a4:31:ca:48:8e:a4:b3:
                    23:bf:d7:ba:44:f2:f2:70:40:c9:7d:c9:d1:c0:bf:
                    02:f3:52:b8:31:6b:26:d8:fb:69:11:24:9a:8a:71:
                    3d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:68:F5:E1:40:9D:91:05:CE:73:5C:8C:E4:FB:A0:33:0D:05:75:E3
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37322e302f32332d3233203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:c7:2b:23:ca:c9:05:7c:0c:3d:ad:40:ca:32:14:11:57:28:
         47:5a:67:a1:0b:fe:b2:3b:5a:2f:d2:e1:b5:79:d2:63:d4:a5:
         7f:8c:cd:c7:a2:67:e7:da:69:e2:e7:34:6e:cf:b4:98:ea:dc:
         3c:bd:0f:7e:12:12:d5:c5:7a:ad:67:0c:1c:21:3a:28:b4:11:
         71:09:39:0c:34:27:d4:19:28:11:14:37:c4:a5:96:8a:91:c9:
         8c:7c:be:b7:30:dc:3c:bd:5b:5b:86:27:98:03:03:aa:99:83:
         3b:fd:36:37:7d:77:4e:53:61:0a:05:53:8e:f6:ba:53:b1:11:
         e1:14:df:5e:eb:96:21:19:ba:c1:78:53:73:8b:45:47:ad:06:
         43:fb:5b:10:ef:ba:3b:6d:f2:88:23:cb:1b:89:5d:d3:a2:01:
         c5:d0:dc:db:9b:05:07:60:03:e4:9a:b5:38:d1:a4:e3:f8:1f:
         b3:18:1e:f1:80:91:7e:f5:1b:cb:e3:f9:96:7e:ac:d4:c4:ce:
         4e:23:83:82:03:01:45:91:0c:7c:40:ed:37:af:69:78:a1:63:
         16:02:ed:2e:80:79:47:a3:04:98:e0:5f:5f:aa:05:2b:62:08:
         44:1d:88:e8:6c:74:6c:08:2b:48:7b:e3:17:29:bf:58:20:fc:
         51:ea:ec:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:22 2026 by rpki-client