This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e31312e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e31312e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          jToeke3pmtyl3VHTihFUwuRKlYHJvTFJmvdqOugBDZY=
Subject key identifier:   8E:9C:2D:8C:71:23:B9:23:08:5B:22:FB:70:A8:F6:C2:FA:30:45:67
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       5E5A155CF59F926722830713A767F0F3D2079C05
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e31312e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 06 Jan 2026 19:21:21 +0000
ROA not before:           Tue 06 Jan 2026 19:16:21 +0000
ROA not after:            Tue 05 Jan 2027 19:21:21 +0000
asID:                     17147
IP address blocks:        163.247.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5a:15:5c:f5:9f:92:67:22:83:07:13:a7:67:f0:f3:d2:07:9c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Jan  6 19:16:21 2026 GMT
            Not After : Jan  5 19:21:21 2027 GMT
        Subject: CN=8E9C2D8C7123B923085B22FB70A8F6C2FA304567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a5:6f:32:fd:7a:52:d8:06:3b:8f:3c:88:46:
                    6e:ad:49:71:99:6f:ea:89:04:75:37:c1:50:dd:47:
                    75:2d:1d:b1:f3:bd:61:48:ba:3e:86:1f:16:29:93:
                    8f:64:21:01:c4:4c:1c:d4:33:a0:9e:13:81:1e:ae:
                    38:52:a6:5b:b1:5b:28:6a:5c:1b:17:9e:a0:e3:bb:
                    a6:85:2e:b4:31:29:8e:11:3c:90:f1:92:ea:75:49:
                    52:ce:4b:4c:8b:38:7a:07:80:d1:a3:40:64:69:34:
                    4d:87:ce:41:6f:64:06:2e:2c:19:da:80:a8:92:30:
                    09:92:68:45:7f:6c:43:7e:71:c1:7d:15:0e:46:4b:
                    d6:f3:58:45:de:44:f0:96:5a:be:17:3c:16:d2:4e:
                    d9:94:53:17:74:0d:26:6d:6a:3a:cc:f3:13:4e:35:
                    f1:77:b5:df:ce:9c:c5:cd:ff:c3:84:b2:69:ae:e7:
                    1a:bd:e6:50:d7:67:63:6f:03:d4:ba:e5:4d:52:18:
                    e3:06:72:2e:96:e2:22:f0:63:1d:10:d2:24:21:7b:
                    2d:c2:a2:78:f6:b1:de:f7:57:1a:32:b1:ad:aa:f6:
                    8e:74:72:37:0a:d1:aa:8d:e1:47:90:32:2e:c0:55:
                    9f:b5:ff:05:ee:3a:fa:10:b3:97:8a:d2:3e:0f:ae:
                    8d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9C:2D:8C:71:23:B9:23:08:5B:22:FB:70:A8:F6:C2:FA:30:45:67
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e31312e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:8c:ec:d7:98:1f:78:4b:a7:7c:86:9e:66:bd:64:0e:7b:26:
         1d:3d:ab:30:68:eb:1f:f4:e9:4e:ae:8b:01:3c:a4:25:f4:f1:
         b8:8e:75:a8:97:ef:42:1d:7a:b6:cf:86:1e:2f:cc:d5:f0:23:
         91:cd:e7:72:d7:c7:da:d6:86:bd:bd:ad:a3:ea:4e:4b:ee:7d:
         3f:16:8b:cf:69:ce:71:8d:76:d6:e4:8d:35:5d:b3:38:d2:39:
         33:c7:0d:7f:c6:0c:85:c1:c0:b7:6a:a3:3b:eb:9b:d2:1d:d7:
         3c:96:fd:2c:8b:6c:57:ee:97:0e:53:81:a8:e9:28:92:3d:d2:
         93:d1:8b:45:ce:50:61:11:dd:7a:6b:1e:bf:b1:8b:69:4a:89:
         30:aa:37:ce:f9:f5:fa:b9:44:e8:d9:bc:a6:1f:d8:c9:dd:17:
         ed:e2:dc:b4:ab:6c:ce:9e:78:a7:12:23:e6:5d:29:da:0b:bc:
         aa:86:63:69:68:42:df:46:b8:05:87:c7:38:68:e3:cf:2e:0c:
         9f:98:81:8b:cf:07:f9:83:1d:b6:36:c7:a4:e9:71:61:e6:5d:
         63:ea:ec:4b:19:83:0f:a1:8a:00:97:38:2b:24:75:67:7f:52:
         8e:39:5b:1d:77:c9:32:dd:02:b6:07:6f:9a:98:fb:bf:fc:18:
         6f:f2:2f:aa
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXloVXPWfkmcigwcTp2fw89IHnAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBCNDI4QjY1RjREQkExNkU0NEY3Qzc0MTJCNzFDMTI2
RjcxREM2QjAeFw0yNjAxMDYxOTE2MjFaFw0yNzAxMDUxOTIxMjFaMDMxMTAvBgNV
BAMTKDhFOUMyRDhDNzEyM0I5MjMwODVCMjJGQjcwQThGNkMyRkEzMDQ1NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVpW8y/XpS2AY7jzyIRm6tSXGZ
b+qJBHU3wVDdR3UtHbHzvWFIuj6GHxYpk49kIQHETBzUM6CeE4EerjhSpluxWyhq
XBsXnqDju6aFLrQxKY4RPJDxkup1SVLOS0yLOHoHgNGjQGRpNE2HzkFvZAYuLBna
gKiSMAmSaEV/bEN+ccF9FQ5GS9bzWEXeRPCWWr4XPBbSTtmUUxd0DSZtajrM8xNO
NfF3td/OnMXN/8OEsmmu5xq95lDXZ2NvA9S65U1SGOMGci6W4iLwYx0Q0iQhey3C
onj2sd73Vxoysa2q9o50cjcK0aqN4UeQMi7AVZ+1/wXuOvoQs5eK0j4Pro07AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUjpwtjHEjuSMIWyL7cKj2wvowRWcwHwYDVR0j
BBgwFoAU0LQotl9NuhbkT3x0ErccEm9x3GswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NzY3NjlEQTkyNTBBRUUwMTZFQ0U2OTFFRjUyM0VBOEI5
M0Q2Q0JGQkU3NzU3N0MzMzlFNDkxRDhCOEUyMzk1LzAvRDBCNDI4QjY1RjREQkEx
NkU0NEY3Qzc0MTJCNzFDMTI2RjcxREM2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMEI0MjhCNjVGNERCQTE2RTQ0
RjdDNzQxMkI3MUMxMjZGNzFEQzZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzc2NzY5REE5MjUwQUVFMDE2RUNFNjkxRUY1MjNFQThCOTNENkNCRkJF
Nzc1NzdDMzM5RTQ5MUQ4QjhFMjM5NS8wLzMxMzYzMzJlMzIzNDM3MmUzMTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzMxMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKP3CzAN
BgkqhkiG9w0BAQsFAAOCAQEAiozs15gfeEunfIaeZr1kDnsmHT2rMGjrH/TpTq6L
ATykJfTxuI51qJfvQh16ts+GHi/M1fAjkc3nctfH2taGvb2to+pOS+59PxaLz2nO
cY121uSNNV2zONI5M8cNf8YMhcHAt2qjO+ub0h3XPJb9LItsV+6XDlOBqOkokj3S
k9GLRc5QYRHdemsev7GLaUqJMKo3zvn1+rlE6Nm8ph/Yyd0X7eLctKtszp54pxIj
5l0p2gu8qoZjaWhC30a4BYfHOGjjzy4Mn5iBi88H+YMdtjbHpOlxYeZdY+rsSxmD
D6GKAJc4KyR1Z39SjjlbHXfJMt0Ctgdvmpj7v/wYb/Ivqg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:51 2026 by rpki-client