This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3136382e3139342e3233322e302f32322d3234203d3e203237393834.roa
File:                     3136382e3139342e3233322e302f32322d3234203d3e203237393834.roa (raw, json)
Hash identifier:          bmyH3rLSWB2Nx8/tGjXV1z31r2Rvho/S4JNe8dAz494=
Subject key identifier:   9E:6B:94:D8:24:7C:EB:22:F1:DC:60:32:24:88:F1:95:B1:30:A1:53
Certificate issuer:       /CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
Certificate serial:       09A2EF949E99003325734FFC3465E6606FF0F487
Authority key identifier: 62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3136382e3139342e3233322e302f32322d3234203d3e203237393834.roa
Signing time:             Tue 06 Jan 2026 19:02:48 +0000
ROA not before:           Tue 06 Jan 2026 18:57:48 +0000
ROA not after:            Tue 05 Jan 2027 19:02:48 +0000
asID:                     27984
IP address blocks:        168.194.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a2:ef:94:9e:99:00:33:25:73:4f:fc:34:65:e6:60:6f:f0:f4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
        Validity
            Not Before: Jan  6 18:57:48 2026 GMT
            Not After : Jan  5 19:02:48 2027 GMT
        Subject: CN=9E6B94D8247CEB22F1DC60322488F195B130A153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3d:3e:d1:36:0f:d7:84:ec:d7:9b:7b:34:91:
                    d4:4a:b0:62:e2:96:f8:29:45:dc:7d:f4:da:09:da:
                    f1:2f:e2:5a:d7:5e:36:97:4b:ad:fa:41:11:e6:05:
                    2e:e9:82:7f:ae:15:44:b3:a4:e6:8e:e2:9b:7d:c2:
                    78:5a:57:9b:6e:c9:46:79:a8:ee:89:a3:fa:d4:dc:
                    63:92:d9:ae:19:5f:ab:42:57:67:67:b6:ab:a4:c8:
                    33:65:6c:bb:25:51:8e:b3:f6:9c:fe:f0:88:96:bf:
                    5b:56:ea:26:a8:8c:65:3c:ed:72:6e:c6:e0:38:44:
                    cd:76:94:fc:ad:80:9b:35:78:e9:40:0e:d9:9f:31:
                    cb:55:7d:e1:c0:9a:4c:95:5b:61:aa:5c:78:ae:c2:
                    41:ce:f2:8e:57:07:13:8e:9a:82:23:f7:01:8b:11:
                    c7:9b:27:f0:ac:6a:ba:09:44:e1:df:bd:23:a5:bb:
                    0f:c5:59:f2:a7:a6:d7:8f:2d:5f:5a:d1:dd:0d:cc:
                    0d:8d:c1:b1:78:5d:14:93:bb:e6:c9:52:d0:eb:92:
                    e3:be:b0:b6:b9:6b:40:0a:f2:92:1f:f2:a0:65:66:
                    fb:46:10:65:e7:37:71:3b:9f:80:6e:bf:3e:77:4b:
                    7c:94:4c:5b:1f:f9:2b:19:fb:d7:80:98:52:95:83:
                    09:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6B:94:D8:24:7C:EB:22:F1:DC:60:32:24:88:F1:95:B1:30:A1:53
            X509v3 Authority Key Identifier:
                keyid:62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3136382e3139342e3233322e302f32322d3234203d3e203237393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:f4:ea:c1:8e:fa:8b:88:21:99:85:36:16:7e:dc:de:50:fa:
         38:86:f4:10:4d:e0:f9:68:7e:8b:94:e4:e6:7c:07:39:a6:e7:
         43:51:09:6d:54:8a:66:83:fd:64:9d:2a:70:24:04:23:fe:ef:
         42:bd:2a:3b:af:ec:e3:41:49:0b:82:4c:fe:4d:42:57:db:cd:
         75:46:af:a3:84:4b:30:23:66:5b:58:83:af:fd:61:6d:85:ed:
         6c:8c:8e:a4:81:a0:a7:7f:71:d7:57:8b:76:9b:3e:83:9f:fd:
         1b:f2:7a:fb:c0:c3:94:02:69:95:6c:0e:0a:a6:15:e9:8f:58:
         d3:ac:fc:5d:b0:9c:22:73:0c:73:5e:e9:46:d7:45:07:c3:51:
         12:c8:46:d7:18:d6:53:64:1e:d9:bb:a0:e1:d6:01:92:91:cb:
         6d:6c:cf:f0:8c:04:70:94:4f:5d:fb:a9:cc:66:a5:05:3f:9f:
         fb:90:f5:6b:b3:89:26:f2:81:27:e7:2c:f6:ec:12:0b:70:03:
         ae:6a:3e:eb:46:88:ee:be:29:07:eb:13:9c:0e:13:39:c0:90:
         38:94:c0:00:de:d8:ae:f5:63:27:4f:a9:b8:50:35:5b:05:16:
         74:49:37:af:1b:28:e5:9c:1d:61:44:38:a4:1d:81:d7:28:a3:
         47:c2:6e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:55 2026 by rpki-client