This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3136382e3230352e302e302f32322d3234203d3e203532333939.roa
File:                     3136382e3230352e302e302f32322d3234203d3e203532333939.roa (raw, json)
Hash identifier:          m8+rCEcH6tQg7rkPVVaYjfgVtt4zPUm1jSoPiBGLH84=
Subject key identifier:   DA:CE:8E:AE:FA:9F:2D:DD:BB:38:52:7F:46:0E:53:3D:A5:E1:2A:31
Certificate issuer:       /CN=F78F9E6F642B6485F25A9B2331897573DEED26F6
Certificate serial:       36770EE98C1303E66E43BAB3BFF624CF1BFCBE40
Authority key identifier: F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3136382e3230352e302e302f32322d3234203d3e203532333939.roa
Signing time:             Tue 06 Jan 2026 19:11:04 +0000
ROA not before:           Tue 06 Jan 2026 19:06:04 +0000
ROA not after:            Tue 05 Jan 2027 19:11:04 +0000
asID:                     52399
IP address blocks:        168.205.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:77:0e:e9:8c:13:03:e6:6e:43:ba:b3:bf:f6:24:cf:1b:fc:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78F9E6F642B6485F25A9B2331897573DEED26F6
        Validity
            Not Before: Jan  6 19:06:04 2026 GMT
            Not After : Jan  5 19:11:04 2027 GMT
        Subject: CN=DACE8EAEFA9F2DDDBB38527F460E533DA5E12A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0a:2e:48:c6:28:e8:a8:52:35:8e:dd:36:f0:
                    11:b5:29:64:47:06:01:e7:c6:3d:48:ac:1c:b3:7e:
                    42:a3:39:ec:b7:09:54:05:e3:75:80:c6:d2:7c:af:
                    4a:49:94:0c:0e:85:2d:63:f0:22:45:26:1e:a4:cb:
                    6a:9f:9a:fd:2b:44:95:9b:e6:11:9c:e8:ab:73:6f:
                    16:41:f7:66:3e:a8:9f:de:fa:0d:9c:57:0a:33:98:
                    9d:02:45:3f:17:60:3e:de:c3:e5:c8:ae:5b:3e:a9:
                    4d:95:00:11:f9:4c:43:69:1b:93:53:42:fc:a1:21:
                    1c:7d:b0:a8:0f:fc:69:b8:88:1e:a7:5e:27:d3:09:
                    1b:a0:97:29:e9:1e:ed:e9:0f:af:6d:a7:35:8a:f9:
                    33:b6:8f:fa:b0:87:95:60:8a:2c:2a:c7:f8:ec:a4:
                    cd:f4:d7:f6:50:3a:a2:07:6d:8e:d6:80:97:94:c3:
                    cb:7c:70:be:85:e3:f7:dd:91:a3:b9:11:ca:88:9e:
                    d9:a0:cb:a2:2f:af:04:67:93:c0:ee:29:f1:92:9c:
                    d9:10:6a:06:55:85:06:cc:e9:2e:f3:4e:38:31:af:
                    0f:a1:bb:6c:ee:16:13:24:a0:a5:65:47:9d:3f:1f:
                    9d:4e:34:c8:61:38:a5:ff:4d:97:e3:4d:d7:f9:7f:
                    5e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CE:8E:AE:FA:9F:2D:DD:BB:38:52:7F:46:0E:53:3D:A5:E1:2A:31
            X509v3 Authority Key Identifier:
                keyid:F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3136382e3230352e302e302f32322d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:dd:77:68:76:6e:f9:e6:2a:4f:f6:29:d5:c0:5b:ab:ec:3a:
         5c:33:d1:97:ca:25:5c:6c:a4:5f:75:6e:88:3c:c5:0c:3b:12:
         c2:c5:04:95:f5:85:f8:34:2d:51:9e:a6:42:7f:a5:07:66:75:
         0f:ff:97:5b:98:dc:ce:fe:2c:d1:3b:ec:7a:08:33:10:42:39:
         54:ce:5a:d5:f3:d7:ff:c4:86:75:d3:a0:67:ee:fb:c3:39:1f:
         29:a9:15:9b:2f:27:57:99:7c:4d:de:83:db:77:38:cf:76:2e:
         c8:2e:13:81:e1:09:3e:8b:5a:2b:60:6a:4c:4c:07:d3:5b:3e:
         7d:fb:74:68:92:39:9e:f1:81:47:1d:c9:7a:8d:f9:da:69:fd:
         11:16:3a:82:c7:54:16:68:7a:45:0e:23:3d:64:89:5c:c3:4c:
         e1:e9:4d:a9:21:e5:55:9c:e5:b3:df:3e:bb:e6:6a:29:7b:ff:
         d1:e1:78:80:b9:0e:8a:f6:e2:d1:be:5d:6b:fb:d6:e3:ac:af:
         e7:47:71:7e:dd:96:7b:44:2e:42:44:0f:36:f1:33:72:6d:f2:
         df:fd:b1:4c:7d:54:78:0b:62:47:7b:ff:d4:a1:22:8c:23:2a:
         57:2d:71:17:60:bc:e5:88:9d:31:8b:37:82:29:15:e8:b2:d9:
         ac:8c:68:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:23 2026 by rpki-client