This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e302e302f31362d3136203d3e203137313437.roa
File:                     3136332e3234372e302e302f31362d3136203d3e203137313437.roa (raw, json)
Hash identifier:          BC9ss66MHwfmljQnZeEqRMllRDdubnQvCv2iJdD8OdY=
Subject key identifier:   8B:FF:79:DC:84:96:F0:F1:A3:E0:70:D2:91:4E:28:58:09:64:01:CF
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       40E21884D14822CFF1CCC229F26B35CD86501EE8
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e302e302f31362d3136203d3e203137313437.roa
Signing time:             Tue 06 Jan 2026 19:21:22 +0000
ROA not before:           Tue 06 Jan 2026 19:16:22 +0000
ROA not after:            Tue 05 Jan 2027 19:21:22 +0000
asID:                     17147
IP address blocks:        163.247.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e2:18:84:d1:48:22:cf:f1:cc:c2:29:f2:6b:35:cd:86:50:1e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Jan  6 19:16:22 2026 GMT
            Not After : Jan  5 19:21:22 2027 GMT
        Subject: CN=8BFF79DC8496F0F1A3E070D2914E2858096401CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ac:fd:60:08:4c:fb:10:10:43:39:9c:a1:7e:
                    23:aa:9e:37:33:3f:f2:75:a3:ab:94:a8:f5:7d:18:
                    aa:b3:49:71:62:21:10:92:a1:85:55:95:3a:e1:c8:
                    e2:b0:d9:e8:17:52:76:d8:f3:55:04:45:3e:25:56:
                    0d:e4:dd:25:6c:f1:0a:4b:71:52:67:e0:0e:ef:f1:
                    98:4c:bc:83:ed:11:fb:0f:a0:4b:56:26:f6:e9:86:
                    ad:fa:bd:4a:b4:4f:66:51:59:95:5c:af:66:fb:83:
                    aa:c4:ca:00:ae:a7:7c:c1:80:a3:31:e5:a7:1f:fc:
                    48:f5:a8:e0:6e:2b:c7:a9:f9:01:62:18:81:a6:9c:
                    bf:6a:10:a8:05:59:23:a3:04:ae:27:d5:38:8f:57:
                    75:74:fd:66:87:ad:d4:c8:17:70:88:b7:6a:36:e3:
                    fb:4e:c0:3e:b7:a5:0f:26:53:1d:97:21:5e:5f:90:
                    72:6b:7a:19:c0:c0:87:25:87:0f:02:4e:dd:9a:0d:
                    11:2a:c0:38:47:01:6f:95:5d:a2:3c:e5:90:ad:32:
                    6d:0b:33:83:67:1b:96:e3:b1:c4:f8:ac:75:87:a8:
                    d7:7c:e3:2d:16:b2:05:01:01:52:9e:e5:62:14:79:
                    7e:e9:a7:88:01:11:b5:99:f4:50:1e:07:cb:00:73:
                    70:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FF:79:DC:84:96:F0:F1:A3:E0:70:D2:91:4E:28:58:09:64:01:CF
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e302e302f31362d3136203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:29:91:23:66:bf:f1:fc:67:64:30:db:50:55:8d:83:97:5d:
         ff:7b:e3:6f:30:84:06:84:36:08:b8:ca:a9:8a:c4:1b:9b:1d:
         08:e7:36:76:19:91:b8:cd:dc:80:a7:0d:fc:e6:0c:a7:a6:74:
         a6:09:18:78:04:19:e1:91:41:67:c8:ab:c4:af:80:72:e1:f9:
         f2:81:d4:c6:af:57:23:31:a2:0f:95:ee:74:51:ab:d2:21:a6:
         6a:e0:d1:6f:24:84:43:0c:a1:d2:e1:0e:5b:ab:39:e2:73:e5:
         79:ee:34:de:c3:7a:eb:b6:8c:9a:c6:02:47:f2:e7:d3:f4:1a:
         56:31:4b:1c:28:7c:1c:7c:03:3d:9f:13:c8:93:5d:2a:7f:e4:
         4b:ed:26:4f:4a:4d:32:79:92:eb:96:49:3a:66:e3:9d:5f:16:
         9b:d8:02:00:34:1c:34:63:a5:80:47:c4:f2:ef:36:5c:3f:cc:
         b8:09:a5:e2:6c:f0:f8:0d:f8:78:b1:15:45:61:01:2d:75:d3:
         4c:91:59:5a:99:fd:48:b3:9c:d8:1c:7f:e6:b0:3d:65:f4:33:
         98:7e:6e:0c:93:1c:f2:5e:0f:f3:be:91:9c:44:3b:88:67:e5:
         d2:b2:fb:e8:9d:6c:c9:26:46:4e:48:ee:59:d6:1c:ff:3c:ec:
         60:39:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:37 2026 by rpki-client