This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35332e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e35332e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          TBKhKOftj1pESQO2BivilgIcTbW0XM4HXjE8e8qtwcE=
Subject key identifier:   72:47:6D:26:71:CA:A2:72:36:2A:5A:B8:CA:65:A9:59:D1:6E:0C:1B
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       05ADA44676C0F46F2281E7C767CBD4392592A780
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35332e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 06 Jan 2026 19:21:17 +0000
ROA not before:           Tue 06 Jan 2026 19:16:17 +0000
ROA not after:            Tue 05 Jan 2027 19:21:17 +0000
asID:                     17147
IP address blocks:        163.247.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ad:a4:46:76:c0:f4:6f:22:81:e7:c7:67:cb:d4:39:25:92:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Jan  6 19:16:17 2026 GMT
            Not After : Jan  5 19:21:17 2027 GMT
        Subject: CN=72476D2671CAA272362A5AB8CA65A959D16E0C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:d4:f4:78:4f:62:58:32:7b:15:5f:83:76:
                    03:7b:75:a2:f1:bb:a9:cb:ef:68:86:4f:4b:70:6c:
                    f8:3e:5a:f2:d6:7f:fc:1f:82:ec:47:66:be:39:85:
                    a4:01:ad:3c:e0:cb:f3:6c:b5:6b:8c:84:49:6b:eb:
                    74:9d:db:6b:0c:35:93:52:74:ce:bf:4b:81:65:6d:
                    00:72:ae:02:9c:d8:f0:95:e9:96:e4:73:b4:23:28:
                    a2:e1:67:ea:6b:6e:eb:02:b9:87:00:e5:82:8a:69:
                    bc:b5:67:53:0e:f8:12:4d:cb:c6:35:49:da:40:9c:
                    19:43:12:63:bc:55:dd:a5:11:6a:22:d8:a5:41:05:
                    23:ab:03:3e:74:01:42:a5:eb:a0:71:8f:79:f7:f4:
                    7d:c8:f8:2e:0d:96:1c:af:06:2b:8d:a8:f0:30:55:
                    97:40:6d:27:49:ff:b0:cc:01:86:2b:d9:44:28:4d:
                    6b:aa:bd:97:50:15:79:cf:97:c8:d9:0f:04:5a:04:
                    7c:8d:13:be:df:4b:ca:0c:e0:6d:18:23:49:66:86:
                    49:29:19:02:18:88:dc:87:39:41:e2:e8:6f:6a:1c:
                    68:f0:27:74:c4:85:75:45:ff:15:e8:e4:24:b7:0b:
                    25:9b:4f:da:01:25:c2:9c:6a:70:5a:a1:46:66:41:
                    d8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:47:6D:26:71:CA:A2:72:36:2A:5A:B8:CA:65:A9:59:D1:6E:0C:1B
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35332e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:4d:30:5d:0c:4a:e3:1e:88:96:9a:d2:87:39:c0:49:dc:bf:
         ab:65:41:45:61:f4:9f:a3:c4:30:48:00:0a:4e:95:b6:fb:7f:
         37:e1:c4:55:76:48:f7:ec:17:fa:52:07:e8:b2:41:7f:6f:50:
         c9:5b:87:de:54:29:c9:34:df:23:3a:11:1f:38:32:73:ff:3f:
         0b:c9:d3:53:07:ca:b8:3d:bb:b9:63:dc:f3:51:a6:b7:a0:09:
         b9:04:a7:08:d3:5e:bc:dd:8f:05:fd:da:97:1d:a2:3c:57:8b:
         2d:fa:00:98:6d:9a:98:65:e4:48:9d:b8:6e:0d:37:85:6e:88:
         69:36:7e:14:60:3d:e0:a9:93:1d:eb:49:4a:1a:b2:ea:63:70:
         8b:aa:d1:87:b8:70:ff:a8:6d:fd:68:40:ab:a5:26:dc:b5:6d:
         5f:b5:64:77:0b:7a:f4:0a:b2:5b:d8:f6:16:c7:4e:af:d0:c0:
         b8:b6:7c:46:7a:40:36:9c:47:fc:bc:b9:20:80:d5:20:e8:d9:
         47:d3:66:27:0a:2c:4a:b6:39:0b:54:bc:b4:8e:c4:c6:d0:54:
         28:3f:c4:59:12:21:8c:58:f6:f9:8a:bc:e0:80:96:ff:b3:78:
         87:ea:ab:73:98:19:79:9c:9f:8e:3b:87:fb:40:7c:87:9d:73:
         dd:2b:53:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:31:10 2026 by rpki-client