This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3136382e39302e38342e302f32322d3234203d3e203237393834.roa
File:                     3136382e39302e38342e302f32322d3234203d3e203237393834.roa (raw, json)
Hash identifier:          MyCu1HgLPgcjGvYKEaDXsxrHBTWErz2TlverbOUsEnk=
Subject key identifier:   C1:DA:8C:A9:14:AF:22:85:8A:37:D0:C4:7E:38:EB:4B:47:1B:CE:3C
Certificate issuer:       /CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
Certificate serial:       74A22E36C63FA158926700C54071B1AC8729C440
Authority key identifier: 62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3136382e39302e38342e302f32322d3234203d3e203237393834.roa
Signing time:             Tue 06 Jan 2026 19:02:51 +0000
ROA not before:           Tue 06 Jan 2026 18:57:51 +0000
ROA not after:            Tue 05 Jan 2027 19:02:51 +0000
asID:                     27984
IP address blocks:        168.90.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a2:2e:36:c6:3f:a1:58:92:67:00:c5:40:71:b1:ac:87:29:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
        Validity
            Not Before: Jan  6 18:57:51 2026 GMT
            Not After : Jan  5 19:02:51 2027 GMT
        Subject: CN=C1DA8CA914AF22858A37D0C47E38EB4B471BCE3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:31:55:13:ea:a8:84:a4:c9:52:88:b4:11:
                    3f:78:2a:9c:ca:61:05:ab:d0:f0:7a:34:9f:77:58:
                    0e:6b:b1:b2:77:99:ac:a9:cd:a7:9a:aa:b2:29:13:
                    c3:cd:60:5b:30:3b:74:21:03:04:ad:57:95:4f:99:
                    b6:89:18:b0:5a:2f:09:7b:45:b5:0f:88:51:75:6b:
                    be:ca:1b:37:63:45:76:2b:f5:73:cc:ff:45:92:c1:
                    0a:86:ec:2c:1b:ec:66:e4:e0:f7:0d:96:a0:35:54:
                    03:d7:6f:0f:41:ac:5f:0e:52:39:b5:fa:56:8c:ba:
                    74:34:00:05:8c:3e:33:de:41:83:49:a3:5a:70:c4:
                    c7:90:38:19:76:97:bd:e7:a5:0d:dd:87:fd:f3:79:
                    b5:8f:ee:06:6d:f3:52:ad:ba:e6:20:ed:7e:9c:c3:
                    05:1b:f6:e3:1b:46:31:f6:82:51:f0:a3:92:97:e7:
                    1e:5d:26:3d:b1:86:74:8e:1b:a8:0b:f3:e1:19:fc:
                    91:43:a8:b5:16:f8:0b:5c:2d:5a:de:31:32:9e:e5:
                    6b:14:dc:b3:df:ee:c8:63:81:b3:f6:37:f4:8a:25:
                    b0:7a:94:d4:32:8b:d4:f2:1d:57:30:2c:e3:a5:89:
                    44:c9:3d:6a:db:46:8c:4e:cd:9d:65:8e:8e:67:44:
                    4f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DA:8C:A9:14:AF:22:85:8A:37:D0:C4:7E:38:EB:4B:47:1B:CE:3C
            X509v3 Authority Key Identifier:
                keyid:62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3136382e39302e38342e302f32322d3234203d3e203237393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:0e:ca:8d:61:11:25:ce:a1:b5:82:17:1b:2e:9c:61:a4:38:
         f4:fb:84:81:78:74:68:b4:86:55:4d:93:72:12:c6:11:5d:6a:
         db:e9:3d:fd:23:48:92:75:cd:23:cd:3b:19:34:b8:b0:b3:cd:
         bb:b5:6f:4e:a0:89:4a:87:77:cb:a6:96:0d:ca:d1:32:29:96:
         c1:a1:d7:35:95:5d:fa:2c:5b:08:eb:b1:51:17:64:6c:b6:92:
         32:f5:e9:0a:e6:ba:d4:8b:8b:13:f1:d3:bd:03:b1:03:5b:b4:
         47:97:05:42:bb:c9:d3:db:d4:1e:e2:85:11:72:81:3c:7b:ba:
         ba:c6:a8:a0:87:29:be:5b:2b:74:fa:9b:fc:16:ca:52:47:bd:
         e5:6e:3f:fe:82:d5:54:ca:90:5b:bc:26:b6:f0:6a:62:1a:1c:
         17:7e:34:52:f6:32:4f:b1:97:bb:53:07:e9:a5:d3:72:d0:a5:
         07:26:ac:4a:2c:10:34:c8:0c:26:9e:4c:9f:0e:e5:1a:b4:f4:
         b3:b4:c5:14:ae:e9:50:85:19:8b:ab:58:49:7a:92:51:f0:de:
         d0:e0:0e:02:b8:33:ac:37:56:e0:2d:f9:f9:31:ea:67:97:4c:
         55:48:03:c0:c6:33:05:5b:52:48:a5:8c:6f:81:75:95:b2:19:
         e5:a5:64:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:07 2026 by rpki-client