This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34332e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e34332e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          XJmwAkr7/1BiBDe//M0oNxIMHW4G+ut8UeJ665W9ZoE=
Subject key identifier:   61:1E:66:07:3B:07:11:8A:FB:4C:CF:81:0E:4E:98:31:DB:80:74:C2
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       4A2D1D515915442817443ABBEC3BB7DEE7B0E50D
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34332e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 06 Jan 2026 19:21:16 +0000
ROA not before:           Tue 06 Jan 2026 19:16:16 +0000
ROA not after:            Tue 05 Jan 2027 19:21:16 +0000
asID:                     17147
IP address blocks:        163.247.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2d:1d:51:59:15:44:28:17:44:3a:bb:ec:3b:b7:de:e7:b0:e5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Jan  6 19:16:16 2026 GMT
            Not After : Jan  5 19:21:16 2027 GMT
        Subject: CN=611E66073B07118AFB4CCF810E4E9831DB8074C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:70:35:3c:5b:fb:6a:6b:b5:48:5d:ba:cb:f0:
                    92:6b:77:67:f0:09:5d:1d:ca:92:3d:58:57:c9:e8:
                    a4:e1:a0:cc:b6:71:47:9a:18:07:2e:87:fd:e8:e8:
                    85:00:cd:28:ae:63:4c:75:75:f5:d0:48:e5:23:e2:
                    8c:5a:8e:37:4f:35:a7:31:13:a5:71:fa:ef:9d:04:
                    96:4a:d7:f2:ec:3e:f9:6d:6b:95:1e:ef:21:08:27:
                    61:2c:90:4f:3a:83:2d:e7:f6:de:55:24:a2:7d:d2:
                    4f:dd:2d:fd:32:52:a1:49:96:25:f4:d8:56:59:c4:
                    34:85:5c:5e:bf:eb:96:80:64:c4:c0:24:61:75:01:
                    aa:28:fa:ce:0f:9e:3b:9d:e1:18:de:0c:63:90:78:
                    fd:1f:28:c7:d3:cd:0a:7f:58:fe:a9:a5:ad:1e:4e:
                    92:0c:db:20:4e:53:24:6d:0a:eb:d7:d4:dc:0b:ff:
                    ca:bd:12:21:3e:77:ea:c3:d4:da:b4:bc:a7:71:7c:
                    e8:d7:15:4f:15:47:a0:a2:3a:cd:c3:98:f8:8b:11:
                    a4:a4:41:66:ed:44:85:b3:4f:44:80:cb:b8:3b:4b:
                    26:c4:ba:c6:5d:59:f5:f7:94:f1:9f:19:29:cc:10:
                    79:7f:43:b2:1d:76:1c:b9:9f:f8:3c:1c:e4:ce:00:
                    48:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1E:66:07:3B:07:11:8A:FB:4C:CF:81:0E:4E:98:31:DB:80:74:C2
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e34332e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:db:57:31:9b:b4:2f:73:e7:a6:31:26:46:32:87:1f:15:4d:
         04:e4:27:87:c1:bf:6a:96:f8:83:7c:8d:5a:04:56:39:c8:6f:
         9c:f9:1a:cc:90:3f:f3:f9:15:bb:8e:73:8f:a8:0a:fd:2f:36:
         90:9a:d3:d6:2d:be:72:1b:6f:da:f0:ce:89:11:28:d0:6b:3c:
         49:de:a4:3c:1e:be:a9:75:53:6a:91:88:93:30:7e:ca:7b:34:
         72:37:0e:50:56:ea:f7:87:b2:63:76:ec:15:9b:e8:6e:42:c2:
         29:3e:68:0f:93:b1:b5:7d:7a:a8:b0:8f:9c:80:c8:39:73:55:
         21:fd:eb:dc:e1:da:9a:64:8e:1b:91:e5:de:67:9a:37:56:de:
         36:6a:1c:8e:06:90:38:06:b2:57:82:d4:05:6e:cf:3d:79:32:
         f2:98:0b:0b:8d:b5:cd:01:9a:3c:30:19:18:ae:82:ee:38:92:
         d5:84:c2:a0:39:34:66:2d:36:6c:b0:57:a3:d0:25:e0:d5:d6:
         33:60:c0:d5:28:ed:f4:c6:f5:1a:a7:58:05:ac:44:e5:2e:d6:
         4f:68:80:79:de:75:e6:aa:c6:1c:5b:9f:b0:6f:0d:06:5f:39:
         aa:ad:45:99:1d:90:d3:96:1f:87:c7:c5:41:06:08:6d:39:53:
         63:b4:b3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:31:08 2026 by rpki-client