This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34302e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e34302e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          OZVoPWABen2xExeD0PCEibQx7KAWYUF1UedOKq/ubWI=
Subject key identifier:   B5:BE:EE:1F:B0:69:16:01:EA:2F:2C:70:A6:48:AB:D0:7C:23:12:55
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       6FE4320BEA236357C7F740E1DBF1CB66E5A2F98A
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34302e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 06 Jan 2026 19:21:22 +0000
ROA not before:           Tue 06 Jan 2026 19:16:22 +0000
ROA not after:            Tue 05 Jan 2027 19:21:22 +0000
asID:                     17147
IP address blocks:        163.247.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e4:32:0b:ea:23:63:57:c7:f7:40:e1:db:f1:cb:66:e5:a2:f9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Jan  6 19:16:22 2026 GMT
            Not After : Jan  5 19:21:22 2027 GMT
        Subject: CN=B5BEEE1FB0691601EA2F2C70A648ABD07C231255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0d:07:c4:aa:28:a7:24:6c:4a:4f:00:98:c8:
                    5e:42:3f:9e:6b:d4:24:b3:a3:72:46:cb:dc:8a:54:
                    9a:68:ce:cf:9e:32:36:81:d1:a1:67:a4:75:26:14:
                    e4:79:a9:6f:fa:b0:97:8b:a1:20:13:a1:69:41:a4:
                    a4:eb:14:f8:9a:19:83:a9:6c:52:13:d5:78:03:cb:
                    c9:c7:ce:1f:8f:d3:8b:ee:02:72:0a:d8:b5:c3:44:
                    30:f2:0a:0c:3c:a0:40:db:50:23:29:a6:d2:c5:4a:
                    8c:69:de:c8:3a:4e:05:9f:02:ba:7c:37:85:88:94:
                    39:0c:04:8b:a1:8a:66:94:8a:9e:2a:43:c8:54:43:
                    e9:a1:4f:58:43:3f:2d:5c:cd:90:6f:ed:82:ac:d1:
                    ba:42:bf:cb:fb:5f:54:6e:b4:b7:48:da:87:6c:78:
                    1d:57:20:01:aa:63:8b:9c:9f:10:5f:ac:d2:aa:b1:
                    6d:2c:ad:5c:75:ff:1b:d0:fe:03:e8:2b:fd:8d:11:
                    f7:86:ce:9e:c1:63:f9:93:cb:70:93:29:01:2c:6d:
                    50:c7:58:5e:0e:af:7e:dd:f8:33:9f:b6:ed:20:7a:
                    7b:d9:a3:df:bf:d4:d4:9b:a2:5e:b5:79:01:a7:e5:
                    7d:8f:23:e8:09:6f:69:26:0b:ac:fb:d4:11:9b:c1:
                    e8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BE:EE:1F:B0:69:16:01:EA:2F:2C:70:A6:48:AB:D0:7C:23:12:55
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34302e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:a4:20:08:e4:3a:65:c7:f8:df:35:bb:20:3c:70:98:44:47:
         fd:6e:ff:8f:ce:46:10:fb:c3:23:90:af:22:d0:b8:22:67:07:
         f2:2b:a6:11:0f:57:d6:e5:ab:0a:30:4d:e3:e5:47:31:2c:0c:
         20:88:34:3f:0f:22:16:83:ff:29:c8:42:dd:cd:bb:8c:90:a5:
         fa:e2:8a:64:06:98:d3:c6:a6:38:7c:f1:05:36:24:cc:f0:a8:
         7b:0b:2d:c6:0f:97:56:32:01:7b:56:c3:43:fe:1b:ec:86:18:
         0c:0b:f9:70:46:ad:8c:84:35:a3:7e:ed:ec:fb:d2:b7:bf:f7:
         6a:27:7d:9f:2d:26:eb:68:ef:78:fd:d4:9f:a1:49:bb:8b:c3:
         18:f4:27:7f:8e:42:b3:aa:28:04:ba:69:69:b7:f1:0d:76:b2:
         0a:45:f6:76:b7:7b:6f:4b:fc:81:9b:58:69:26:f1:32:66:1e:
         d0:a1:e1:ae:b7:fb:87:5a:4e:71:b3:4c:b2:df:f3:0f:6e:c8:
         08:40:61:5e:35:0e:f4:d4:cf:15:f6:51:c3:09:4c:05:60:6f:
         c1:e0:0b:e5:f0:01:e9:d3:8c:4a:50:fa:e9:85:a5:1d:78:5d:
         db:15:c9:a5:77:d2:bd:92:d6:a2:25:77:09:b1:c7:4d:d2:1e:
         b7:c9:85:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:36 2026 by rpki-client