This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3136382e3132312e3138342e302f32322d3234203d3e203238303030.roa
File:                     3136382e3132312e3138342e302f32322d3234203d3e203238303030.roa (raw, json)
Hash identifier:          IiMb5CvPJGU/xZy/9ehb/HHcWtdJxRS9gtUxdCLbFHc=
Subject key identifier:   C7:EC:2F:62:F8:F3:1B:B7:A3:F4:11:C7:18:EA:9E:C6:7A:2A:2E:0A
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       779E8C1E6FFBF900D8CD3C8457AA7D2B11569E7D
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3136382e3132312e3138342e302f32322d3234203d3e203238303030.roa
Signing time:             Tue 06 Jan 2026 19:15:30 +0000
ROA not before:           Tue 06 Jan 2026 19:10:30 +0000
ROA not after:            Tue 05 Jan 2027 19:15:30 +0000
asID:                     28000
IP address blocks:        168.121.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9e:8c:1e:6f:fb:f9:00:d8:cd:3c:84:57:aa:7d:2b:11:56:9e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Jan  6 19:10:30 2026 GMT
            Not After : Jan  5 19:15:30 2027 GMT
        Subject: CN=C7EC2F62F8F31BB7A3F411C718EA9EC67A2A2E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:32:6c:29:42:57:61:0a:18:36:9c:39:6b:47:
                    9b:10:09:51:31:af:e1:4b:d5:d1:d8:58:fa:52:ef:
                    ba:93:7c:87:e0:cb:fa:6d:9b:41:93:c3:8d:9d:a8:
                    27:bc:2a:97:c8:a0:83:ad:17:0d:f1:42:94:2d:36:
                    5d:e9:9f:48:3c:11:2e:d5:88:43:8f:42:67:c1:b7:
                    c4:80:a8:b0:ae:d2:09:1e:d7:27:6d:87:66:d6:b6:
                    dd:a2:dd:9a:22:b4:74:6a:6e:d8:e3:10:a5:5d:f4:
                    6f:ce:e7:06:60:1e:90:f8:92:fa:c9:b6:30:bb:55:
                    fc:75:15:de:07:62:75:9d:19:9f:03:2a:e2:33:06:
                    91:b7:90:bc:85:9b:37:bd:f0:ec:ef:68:34:87:68:
                    3a:d8:07:2e:1a:eb:30:39:e2:2c:31:ff:d1:bc:cc:
                    66:21:c4:88:d3:e1:3c:d9:98:7e:9a:7a:3a:92:8e:
                    0a:2c:8d:03:c6:d1:25:02:b0:c3:8e:e0:e3:98:fb:
                    32:ef:08:21:16:75:ba:c0:78:58:d1:91:82:b8:8b:
                    c0:4d:7c:97:2f:90:fb:82:9c:3a:60:f3:89:f3:a1:
                    91:ef:03:22:0b:d3:e4:63:51:97:ab:da:54:f1:c4:
                    1e:d7:da:ea:12:e2:cb:ae:3c:1c:c2:db:7b:de:1f:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EC:2F:62:F8:F3:1B:B7:A3:F4:11:C7:18:EA:9E:C6:7A:2A:2E:0A
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3136382e3132312e3138342e302f32322d3234203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:83:41:62:49:24:03:c4:3f:01:d4:44:4a:ce:df:d7:e2:d1:
         67:e5:05:86:ff:5e:09:d3:12:59:f9:49:01:9c:23:72:b2:48:
         af:2f:c9:f8:7b:5a:10:d7:dd:04:ea:42:c3:03:61:35:8a:8e:
         53:e5:8a:83:bf:b0:a8:4b:36:97:a5:d8:34:52:97:ce:4e:aa:
         9a:00:ea:88:35:09:eb:0f:15:7c:0b:97:1e:cb:95:ea:57:d6:
         58:5b:1d:e2:58:81:ab:40:52:2a:97:4a:96:a8:85:b5:21:e7:
         2f:62:19:61:0f:4d:ec:7b:c9:72:d4:43:b4:1e:f1:0b:53:40:
         04:28:c6:9f:4b:5c:f0:7d:54:66:3e:e0:4a:41:26:bd:df:d9:
         7a:16:89:11:bc:d7:28:a0:5f:5a:64:87:4e:fa:6d:c0:0a:0d:
         07:4c:8c:da:eb:3e:10:90:c9:2c:44:17:02:c3:60:14:d4:5e:
         de:0b:a8:1c:5c:ea:60:8f:80:27:68:3e:18:58:91:65:8a:c8:
         66:96:24:50:17:dc:dc:55:2b:a0:f0:98:53:3a:bb:8e:db:97:
         2a:21:d2:a5:7c:d3:fd:5d:85:2e:ac:bb:26:e3:71:c8:26:51:
         5c:5e:7b:8d:95:80:6c:3a:08:73:1d:22:5d:7b:d9:3f:17:ee:
         4a:97:11:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:47:35 2026 by rpki-client