This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e36382e302f32332d3234203d3e20323634363638.roa
File:                     3135372e3130302e36382e302f32332d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          nRhxsXZkBsuFgaJy8eKu4BFeqEfjr+W3P/1BlSCgJc8=
Subject key identifier:   95:C8:E6:E5:63:0F:C8:92:92:CB:FF:BB:82:EC:99:B7:8B:68:21:EC
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       1D48F9AD10FBCE570B123CAC5D164024F512C672
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e36382e302f32332d3234203d3e20323634363638.roa
Signing time:             Tue 06 Jan 2026 20:58:40 +0000
ROA not before:           Tue 06 Jan 2026 20:53:40 +0000
ROA not after:            Tue 05 Jan 2027 20:58:40 +0000
asID:                     264668
IP address blocks:        157.100.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:48:f9:ad:10:fb:ce:57:0b:12:3c:ac:5d:16:40:24:f5:12:c6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Jan  6 20:53:40 2026 GMT
            Not After : Jan  5 20:58:40 2027 GMT
        Subject: CN=95C8E6E5630FC89292CBFFBB82EC99B78B6821EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:69:52:33:c9:b8:6c:28:20:4e:b8:cc:54:07:
                    4b:44:b6:71:35:75:7b:d0:db:ee:93:21:1d:2e:e0:
                    1e:e5:08:c2:a7:c3:c5:79:62:91:45:12:bc:b5:84:
                    e7:21:cc:1d:37:2e:2a:c8:23:c5:ca:9d:15:22:b4:
                    ef:46:d9:d2:21:b3:a8:6a:d2:ed:5c:f9:26:4a:5d:
                    c6:fe:df:09:45:fc:e5:42:b4:d9:db:30:ee:ca:56:
                    60:e2:d7:26:71:8f:c0:be:74:2b:84:05:9c:c8:64:
                    92:97:49:ec:3a:93:4d:97:66:7a:9f:28:2e:90:48:
                    77:64:28:49:80:c8:d1:82:c0:47:b1:c9:77:ed:8a:
                    dc:5b:5c:fd:c9:cd:2e:92:7b:a9:46:8d:40:52:97:
                    f2:53:20:4d:cd:bb:53:b6:4a:fc:df:0a:0b:6d:6f:
                    45:9e:46:ae:20:18:73:d4:35:af:4b:9a:73:96:23:
                    3f:c8:fc:7b:b9:2a:82:e4:54:28:a4:f8:54:a8:62:
                    dc:27:27:04:6b:17:1c:87:4c:f1:de:a6:0d:2d:ea:
                    8a:b8:86:a5:8f:b1:92:e9:a7:cd:03:59:21:e5:6b:
                    42:0e:4c:20:0c:a0:7e:51:07:ff:f5:fc:c5:b2:10:
                    7e:46:7f:6f:0b:af:08:8c:b8:73:a2:2b:46:d0:73:
                    39:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C8:E6:E5:63:0F:C8:92:92:CB:FF:BB:82:EC:99:B7:8B:68:21:EC
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e36382e302f32332d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:af:ed:0a:01:31:17:b1:23:ae:e0:e1:f1:6c:12:2f:f8:aa:
         87:6d:86:69:44:4d:11:78:f7:d4:c3:18:19:89:18:c4:69:79:
         b3:eb:a7:94:3b:18:aa:37:d4:88:fe:a1:5d:de:68:84:8f:ac:
         fc:9d:b4:75:e4:d0:bd:0f:9a:eb:71:10:78:4f:56:04:43:68:
         e5:ee:fa:57:af:e1:77:aa:1b:cd:13:a6:c9:75:e6:b0:70:5c:
         91:aa:58:1c:ff:7b:8b:bb:c9:37:69:25:55:33:77:8d:48:f7:
         1d:3f:d0:40:be:d0:1c:e2:bc:c3:64:74:94:1d:53:f5:41:9f:
         b9:e6:0e:45:62:b6:85:13:4b:69:2a:0e:7c:6e:c0:f0:58:9b:
         8c:ba:d2:99:df:87:0a:61:02:b1:34:12:8f:a0:d3:49:d0:ec:
         94:6f:8a:03:01:0c:8c:02:60:38:c1:9f:dc:75:cc:71:4c:20:
         7f:f5:62:ca:96:a9:20:e8:e5:70:b2:b1:9d:47:ae:1e:5f:ed:
         b2:dc:d8:ca:58:ef:80:83:ce:ea:7f:7a:a5:85:49:98:d2:26:
         b1:14:2f:6e:66:0e:0b:4a:48:5d:e7:68:36:42:8e:6d:fd:7e:
         4f:ab:6a:42:0b:57:7c:13:36:14:28:02:76:34:d3:66:b1:fc:
         e7:1e:cd:bb
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHUj5rRD7zlcLEjysXRZAJPUSxnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc1NzA1MTFENkNGNTFFM0FCQUZCMkY3NTZGRTE3RjUy
OTFEODY0ODAeFw0yNjAxMDYyMDUzNDBaFw0yNzAxMDUyMDU4NDBaMDMxMTAvBgNV
BAMTKDk1QzhFNkU1NjMwRkM4OTI5MkNCRkZCQjgyRUM5OUI3OEI2ODIxRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbaVIzybhsKCBOuMxUB0tEtnE1
dXvQ2+6TIR0u4B7lCMKnw8V5YpFFEry1hOchzB03LirII8XKnRUitO9G2dIhs6hq
0u1c+SZKXcb+3wlF/OVCtNnbMO7KVmDi1yZxj8C+dCuEBZzIZJKXSew6k02XZnqf
KC6QSHdkKEmAyNGCwEexyXftitxbXP3JzS6Se6lGjUBSl/JTIE3Nu1O2SvzfCgtt
b0WeRq4gGHPUNa9LmnOWIz/I/Hu5KoLkVCik+FSoYtwnJwRrFxyHTPHepg0t6oq4
hqWPsZLpp80DWSHla0IOTCAMoH5RB//1/MWyEH5Gf28LrwiMuHOiK0bQczk5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlcjm5WMPyJKSy/+7guyZt4toIewwHwYDVR0j
BBgwFoAUd1cFEdbPUeOrr7L3Vv4X9SkdhkgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODM4NjlERjlENkE4Q0Q2Njg2RjExQzJBMTA0MEY3RkU4
QUI2ODZBQjI2N0QyODcxQkU5NzI5MUIzOThGMUNBLzAvNzc1NzA1MTFENkNGNTFF
M0FCQUZCMkY3NTZGRTE3RjUyOTFEODY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NzU3MDUxMUQ2Q0Y1MUUzQUJB
RkIyRjc1NkZFMTdGNTI5MUQ4NjQ4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTgzODY5REY5RDZBOENENjY4NkYxMUMyQTEwNDBGN0ZFOEFCNjg2QUIy
NjdEMjg3MUJFOTcyOTFCMzk4RjFDQS8wLzMxMzUzNzJlMzEzMDMwMmUzNjM4MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnWRE
MA0GCSqGSIb3DQEBCwUAA4IBAQCkr+0KATEXsSOu4OHxbBIv+KqHbYZpRE0RePfU
wxgZiRjEaXmz66eUOxiqN9SI/qFd3miEj6z8nbR15NC9D5rrcRB4T1YEQ2jl7vpX
r+F3qhvNE6bJdeawcFyRqlgc/3uLu8k3aSVVM3eNSPcdP9BAvtAc4rzDZHSUHVP1
QZ+55g5FYraFE0tpKg58bsDwWJuMutKZ34cKYQKxNBKPoNNJ0OyUb4oDAQyMAmA4
wZ/cdcxxTCB/9WLKlqkg6OVwsrGdR64eX+2y3NjKWO+Ag87qf3qlhUmY0iaxFC9u
Zg4LSkhd52g2Qo5t/X5Pq2pCC1d8EzYUKAJ2NNNmsfznHs27
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:06:50 2026 by rpki-client