This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37322e302f32342d3234203d3e203532343933.roa
File:                     3136382e39302e37322e302f32342d3234203d3e203532343933.roa (raw, json)
Hash identifier:          r6WIUzj0EUqDGj7Pyv4EbyWKEaQhFBJffQDxXNYFFw8=
Subject key identifier:   84:1A:F2:37:3C:4A:71:98:11:DF:DF:AE:00:83:1A:9C:4B:1D:C1:31
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       4D63744D71D01EA673A185D85E3B18A29F79FA09
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37322e302f32342d3234203d3e203532343933.roa
Signing time:             Tue 06 Jan 2026 19:10:24 +0000
ROA not before:           Tue 06 Jan 2026 19:05:24 +0000
ROA not after:            Tue 05 Jan 2027 19:10:24 +0000
asID:                     52493
IP address blocks:        168.90.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 16:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:63:74:4d:71:d0:1e:a6:73:a1:85:d8:5e:3b:18:a2:9f:79:fa:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Jan  6 19:05:24 2026 GMT
            Not After : Jan  5 19:10:24 2027 GMT
        Subject: CN=841AF2373C4A719811DFDFAE00831A9C4B1DC131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:6f:a4:68:dc:1d:74:2a:84:32:67:d8:17:
                    79:ac:74:57:7b:87:90:f1:5b:9f:8d:2e:ab:99:6f:
                    b0:cd:69:70:86:b1:a0:e9:b0:9b:36:20:ed:f6:bc:
                    72:3c:8b:33:85:fe:93:8a:45:3c:a5:0f:2a:10:39:
                    82:38:e8:5e:3a:35:4d:ba:46:03:5e:19:0e:28:96:
                    32:4a:d9:d0:d2:c3:45:55:a5:5b:c0:03:97:bd:24:
                    03:39:be:5f:22:e9:8a:d9:bb:b7:8a:d4:7b:30:86:
                    02:56:6a:29:6d:93:9a:82:b2:bd:a0:d8:92:1d:89:
                    2b:5a:ae:15:2b:fd:ed:c4:aa:2d:c6:ac:c2:86:32:
                    e5:94:82:f0:2d:48:86:e0:c7:9a:66:df:6f:04:14:
                    c2:83:3d:2e:d5:3a:8d:f4:f7:ba:fa:44:72:d4:45:
                    2a:64:24:98:28:48:8d:a9:3e:b4:13:a9:93:87:48:
                    8f:ac:8f:54:bb:6c:09:be:7e:50:59:34:44:be:9c:
                    f9:72:83:bf:3a:b7:65:bb:e1:73:ad:4a:b1:0a:3f:
                    84:b0:f7:98:f5:2d:fc:b2:e2:36:54:a9:be:80:4c:
                    f2:7f:b1:4f:8e:11:24:85:80:3a:3d:2e:ed:16:38:
                    37:50:a8:9a:01:68:e3:ca:70:34:a0:b4:9d:bc:bc:
                    12:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1A:F2:37:3C:4A:71:98:11:DF:DF:AE:00:83:1A:9C:4B:1D:C1:31
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37322e302f32342d3234203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:fb:ee:12:8c:5b:61:3e:62:08:a7:91:cc:52:bc:05:15:28:
         b1:65:95:bb:4f:e2:6a:7b:b0:55:9f:9c:7b:cc:43:2e:1a:4d:
         90:aa:f9:98:cb:0c:74:5b:32:1c:e2:3c:e4:70:48:58:f8:78:
         d6:e5:94:af:b3:12:a0:79:23:83:31:dc:f7:db:4d:16:7c:9e:
         be:ff:bb:a0:e0:a7:0c:0a:33:be:87:b7:72:f8:e7:fe:e8:c6:
         32:f9:94:ae:07:79:b6:65:a5:cc:73:41:00:0d:54:69:76:09:
         7d:61:96:77:84:1b:d0:06:89:ca:2b:06:21:be:e4:01:96:26:
         71:63:fc:aa:41:da:4a:0f:f9:a6:d0:43:1a:d6:ab:a5:a5:79:
         2b:ee:74:5a:f9:6a:d0:eb:4f:0d:37:19:6e:2a:d0:c0:d6:21:
         12:bd:40:8d:76:ad:8d:46:54:75:46:8e:30:99:37:89:58:ec:
         c1:1f:e1:b5:db:0a:aa:fa:2e:24:ef:7f:b9:17:43:c0:44:c3:
         87:3c:52:44:cf:39:2e:c2:6a:57:c0:4c:28:30:12:29:04:cf:
         88:97:f6:96:14:77:13:5a:d5:63:11:a6:c3:92:ee:db:9b:c9:
         43:24:d6:29:34:3f:40:57:d1:0f:2d:ac:9c:ce:76:66:99:67:
         93:26:fb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:54 2026 by rpki-client