This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35372e302f32342d3234203d3e203137313437.roa
File:                     3136332e3234372e35372e302f32342d3234203d3e203137313437.roa (raw, json)
Hash identifier:          zyxURRzguviB2DyNxXhOxFq2YxgCnmLgPr6OI/I9gRQ=
Subject key identifier:   14:10:27:95:38:9A:DA:33:14:9D:35:9D:FA:BE:82:33:AC:C3:58:9C
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       48D3103F37CCE7841158A9CA7AE97EF34C9BC357
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35372e302f32342d3234203d3e203137313437.roa
Signing time:             Tue 06 Jan 2026 19:21:17 +0000
ROA not before:           Tue 06 Jan 2026 19:16:17 +0000
ROA not after:            Tue 05 Jan 2027 19:21:17 +0000
asID:                     17147
IP address blocks:        163.247.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d3:10:3f:37:cc:e7:84:11:58:a9:ca:7a:e9:7e:f3:4c:9b:c3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Jan  6 19:16:17 2026 GMT
            Not After : Jan  5 19:21:17 2027 GMT
        Subject: CN=14102795389ADA33149D359DFABE8233ACC3589C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:28:8d:62:ef:fd:da:48:c7:ed:73:c2:71:58:
                    f3:00:5d:f4:e9:b2:3a:f5:8e:59:f0:ec:dd:14:ea:
                    a2:ec:eb:69:09:88:b1:ed:55:5a:76:b9:06:4a:16:
                    c2:24:12:17:c1:55:fa:91:c3:7b:af:2c:df:32:90:
                    8d:f6:fb:86:04:14:24:ae:b4:ce:40:f8:c8:2a:2b:
                    9c:68:9d:9b:8c:03:99:bb:7a:cc:32:60:f1:21:fe:
                    ee:ed:c5:a2:c5:0f:3e:3e:b4:7e:c8:c9:bd:64:2b:
                    db:1b:0d:06:31:18:ce:d7:63:34:d8:02:83:86:b0:
                    04:65:92:56:62:8d:84:83:22:67:7d:0c:bd:92:65:
                    e0:f6:50:77:c3:cc:9a:1b:67:62:dd:c9:27:ba:9e:
                    f4:ae:fc:3f:56:7c:ab:9c:5f:c2:6a:e4:ae:c7:04:
                    b7:2d:41:cf:65:94:3b:14:94:52:a7:2f:9d:b4:f2:
                    db:25:98:23:70:91:3b:0b:c1:8e:bb:b8:7d:8f:7f:
                    67:e6:71:b8:b2:78:d9:c5:f3:eb:d7:ed:82:ce:a7:
                    8a:42:62:ed:09:ae:1b:16:ca:fb:69:e5:b7:fe:c7:
                    94:e4:bb:51:75:7c:ed:f1:a7:03:99:63:6a:5a:98:
                    46:2b:ab:7a:58:1a:f7:de:be:89:aa:70:7c:b9:a1:
                    ad:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:10:27:95:38:9A:DA:33:14:9D:35:9D:FA:BE:82:33:AC:C3:58:9C
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/3136332e3234372e35372e302f32342d3234203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:7a:33:39:cc:b8:8c:00:93:bf:d7:5d:28:d5:55:ca:c7:fb:
         f6:4f:3e:35:73:53:4c:77:88:47:d6:cb:69:b6:ba:b4:06:8d:
         41:64:d8:88:3d:f0:f5:3d:74:57:07:f9:02:2b:fd:eb:16:04:
         85:84:e5:4a:fe:64:20:d6:c2:30:03:51:5f:8a:f8:f1:30:7e:
         89:a9:7e:47:40:e4:9e:5b:d9:4f:0e:6c:12:21:cc:1a:b1:76:
         13:13:9e:5e:c4:00:49:3d:c4:09:61:3f:21:97:cb:c5:d2:c7:
         99:4c:b8:9e:dc:12:84:8c:99:32:0a:83:a0:1d:65:ef:b9:c6:
         64:1e:71:06:19:1b:bd:e0:59:8a:d6:af:0b:7f:b3:86:13:be:
         37:5e:ff:a5:7d:c7:bf:12:25:ed:b5:45:6a:11:5b:6b:87:69:
         c1:90:5f:c0:18:93:b5:41:d8:40:af:83:48:26:37:d4:46:2b:
         e3:0c:f1:b9:c8:6f:ba:0c:29:57:aa:ab:70:7c:b3:47:52:bb:
         46:58:64:ab:b5:7d:76:54:0c:a9:e9:a1:46:5c:8d:6b:69:d0:
         d3:d1:3e:40:14:1d:75:7b:3e:b4:2d:f8:7e:ad:b0:0b:b7:1b:
         f4:01:c0:5b:89:1e:d5:52:78:96:4e:15:cf:4e:e4:d4:44:d4:
         f1:6e:85:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:44 2026 by rpki-client