This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/3136382e3138312e37322e302f32322d3234203d3e203532343332.roa
File:                     3136382e3138312e37322e302f32322d3234203d3e203532343332.roa (raw, json)
Hash identifier:          1XXf76qnI/8jL6gsqzYMd9a9PlaCWVGVHSPSSgJqPlQ=
Subject key identifier:   28:7A:3E:B4:6B:CE:8F:A1:F9:63:2E:04:72:6A:13:51:9C:68:F0:EB
Certificate issuer:       /CN=C403FA78404641A71D95DA750617F0EEF3DD464B
Certificate serial:       4A49CB2C4D6CE7B80C0276822393661F999D0695
Authority key identifier: C4:03:FA:78:40:46:41:A7:1D:95:DA:75:06:17:F0:EE:F3:DD:46:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/3136382e3138312e37322e302f32322d3234203d3e203532343332.roa
Signing time:             Tue 06 Jan 2026 19:45:30 +0000
ROA not before:           Tue 06 Jan 2026 19:40:30 +0000
ROA not after:            Tue 05 Jan 2027 19:45:30 +0000
asID:                     52432
IP address blocks:        168.181.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/C403FA78404641A71D95DA750617F0EEF3DD464B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/C403FA78404641A71D95DA750617F0EEF3DD464B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:49:cb:2c:4d:6c:e7:b8:0c:02:76:82:23:93:66:1f:99:9d:06:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C403FA78404641A71D95DA750617F0EEF3DD464B
        Validity
            Not Before: Jan  6 19:40:30 2026 GMT
            Not After : Jan  5 19:45:30 2027 GMT
        Subject: CN=287A3EB46BCE8FA1F9632E04726A13519C68F0EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2c:40:a3:5f:4c:68:a8:ba:23:d0:e1:a2:52:
                    d7:df:5d:f7:db:b5:3e:49:be:df:09:61:89:2b:fb:
                    6c:d8:7e:26:00:da:b0:d1:bf:eb:b0:3b:73:76:07:
                    28:69:3d:c1:e2:b5:98:70:e4:e0:de:54:6a:53:d2:
                    39:5d:c8:ad:40:9e:59:db:98:4c:4c:79:04:e0:8e:
                    4c:76:17:e5:86:52:a6:66:7d:ea:19:01:60:3b:3e:
                    3a:57:b1:d6:d4:10:d1:97:51:84:ac:e7:92:1d:97:
                    c3:ef:03:66:bc:2f:ba:22:61:16:f7:82:4c:25:a5:
                    34:7a:f4:ad:3e:ec:f1:d1:1f:02:47:28:c2:b0:41:
                    f2:09:9a:8b:b1:ae:55:b8:46:48:54:81:3a:aa:59:
                    a6:97:62:15:dd:e5:3c:87:cd:c3:bb:0b:5b:f5:49:
                    07:e2:40:33:56:bb:9e:15:f3:dc:cc:9d:87:c0:00:
                    78:52:74:3c:de:a0:63:23:ea:d1:ae:16:22:2c:aa:
                    15:0d:46:dc:f3:e5:30:73:1a:08:5d:5e:0b:00:d2:
                    52:b7:c2:01:27:c1:7b:f5:6f:1b:00:2a:35:a1:d9:
                    e9:67:22:e0:6c:e4:17:43:99:ea:5b:3e:bc:ce:5a:
                    55:6f:f0:42:09:ff:9f:58:ef:77:fc:de:0a:34:a0:
                    85:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7A:3E:B4:6B:CE:8F:A1:F9:63:2E:04:72:6A:13:51:9C:68:F0:EB
            X509v3 Authority Key Identifier:
                keyid:C4:03:FA:78:40:46:41:A7:1D:95:DA:75:06:17:F0:EE:F3:DD:46:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/C403FA78404641A71D95DA750617F0EEF3DD464B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/3136382e3138312e37322e302f32322d3234203d3e203532343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:ae:e5:97:4c:ad:95:a6:2d:28:6d:37:bb:4e:e7:18:b1:81:
         88:f0:69:f3:e9:97:c7:c2:c6:45:1c:9f:b7:04:c1:9f:7d:5a:
         3b:2e:82:07:4e:c6:ac:94:af:27:df:75:dc:88:36:40:af:5e:
         73:8b:b5:9c:10:74:5f:0f:7f:4a:ba:79:0e:ad:ee:e8:f1:89:
         8d:6a:02:38:65:c1:41:de:ed:92:3c:88:f5:b6:db:41:9f:8b:
         b5:99:3e:69:93:ab:6c:a7:3d:b1:0f:ca:59:39:10:88:28:2c:
         ad:2e:cb:29:29:22:09:34:b9:3c:6c:66:06:58:b3:00:be:d0:
         ba:d6:c5:2a:6a:f1:d3:f1:b8:50:97:a0:34:26:45:9e:5d:3e:
         85:0b:d2:84:fa:1f:db:86:bb:39:50:b8:66:4e:be:45:a3:ad:
         fa:0b:03:00:60:0b:f2:7e:68:06:48:4c:83:53:f1:c3:ba:22:
         5f:a8:a0:96:0c:b2:11:58:bf:d3:7b:67:41:1f:d7:f8:9d:3d:
         ee:0c:28:24:45:c4:cc:25:88:f4:b0:a2:de:9e:23:29:06:13:
         97:d0:d4:f5:85:e8:9c:e8:4f:10:29:a3:2c:1f:8e:8a:69:7f:
         91:14:e9:7a:24:46:f4:47:3b:f4:33:88:28:ca:09:39:52:b7:
         22:49:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:59 2026 by rpki-client