This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38322e302f32342d3234203d3e20323635373431.roa
File:                     3132382e3230312e38322e302f32342d3234203d3e20323635373431.roa (raw, json)
Hash identifier:          WxcaptNQ0OneHGVCu++XGo2HccuK7DuVbuoUO/4nrWo=
Subject key identifier:   D9:92:3C:1C:C0:7E:4E:E3:87:26:42:8B:41:C1:33:25:70:7F:36:DC
Certificate issuer:       /CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
Certificate serial:       6BF3E4BF059621825B5DEF5284B3497EDD6F0C35
Authority key identifier: 71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38322e302f32342d3234203d3e20323635373431.roa
Signing time:             Sat 17 Jan 2026 01:01:02 +0000
ROA not before:           Sat 17 Jan 2026 00:56:02 +0000
ROA not after:            Sat 16 Jan 2027 01:01:02 +0000
asID:                     265741
IP address blocks:        128.201.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 12:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f3:e4:bf:05:96:21:82:5b:5d:ef:52:84:b3:49:7e:dd:6f:0c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
        Validity
            Not Before: Jan 17 00:56:02 2026 GMT
            Not After : Jan 16 01:01:02 2027 GMT
        Subject: CN=D9923C1CC07E4EE38726428B41C13325707F36DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8f:33:7f:7c:c2:99:3a:be:3b:75:6c:d0:a6:
                    fe:16:01:f8:7a:34:b3:09:c1:b8:8e:3b:bf:bd:ac:
                    55:75:73:d4:00:d4:92:9b:5d:14:9c:93:62:b8:b7:
                    e2:60:35:5f:9e:b9:8f:a9:db:9b:b7:ab:21:da:20:
                    8e:86:1f:f5:aa:36:80:af:72:7c:91:aa:ac:e9:5f:
                    3e:13:d2:e0:47:4c:a8:bf:9a:0f:f2:fa:c3:a0:b4:
                    07:d3:4b:d3:1f:43:22:97:91:a0:dc:47:33:9a:a8:
                    fd:1e:37:6c:b2:1a:dd:66:47:cb:e4:e5:f5:04:76:
                    fd:09:6f:cf:07:1e:b3:3b:50:60:95:38:19:69:fa:
                    53:55:79:37:96:9d:d3:ef:69:7f:5d:89:99:6e:f9:
                    2e:cb:21:26:2e:d1:a6:7b:7d:cb:45:77:ad:71:94:
                    34:c7:b1:d8:ca:93:7b:bc:a7:9a:54:92:00:bd:a1:
                    33:23:91:c5:d7:6b:6a:bb:8a:56:41:30:7b:00:45:
                    9a:db:29:c2:e5:19:1b:8e:b9:2a:42:d1:c9:f9:b0:
                    c4:ac:5f:44:78:95:34:c3:20:61:e0:5c:c2:72:d2:
                    cb:8a:65:f5:8a:2e:98:f8:76:30:35:1b:07:03:9a:
                    c1:42:cb:fe:92:ba:03:8f:e0:ac:5d:f8:06:38:0d:
                    2c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:92:3C:1C:C0:7E:4E:E3:87:26:42:8B:41:C1:33:25:70:7F:36:DC
            X509v3 Authority Key Identifier:
                keyid:71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38322e302f32342d3234203d3e20323635373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:7f:c3:58:98:23:16:3b:9e:12:03:4d:79:33:f6:e2:5d:2d:
         71:aa:82:9f:05:05:66:d0:b7:06:ed:70:7c:f0:5e:9d:34:bc:
         08:78:ae:99:b0:d5:fd:6e:bc:2b:77:46:56:94:a3:e7:95:ba:
         2f:3d:e5:bf:a2:8a:f5:22:dc:6a:d8:a5:00:5a:74:76:59:89:
         01:50:25:47:44:24:ce:53:66:5c:e5:56:94:64:e2:ab:a2:dd:
         d1:c9:7c:c9:cc:55:9f:51:fb:e4:6e:18:67:e4:b1:b3:6b:d8:
         2b:ca:7f:c3:d3:cb:fa:29:9f:7e:4b:17:88:f1:0b:01:88:3c:
         7e:da:08:0a:18:1e:6c:cf:5c:8c:2e:f5:87:dd:27:e3:ef:c8:
         b7:b6:f4:1e:9c:e0:ae:97:e8:03:72:bb:41:c6:01:4e:e1:5d:
         34:bd:c6:aa:82:d6:1d:91:73:da:88:ff:7a:2d:c8:22:8e:fe:
         c9:ff:2d:2e:7a:05:1d:39:b2:bd:c8:b4:d9:a5:14:8f:76:f2:
         70:34:a9:68:37:dc:38:08:38:4c:d4:89:a6:d0:63:72:ec:6d:
         6c:45:42:57:77:ab:97:d2:5c:63:a8:d3:cf:7d:45:05:65:88:
         2b:09:69:28:5b:dc:9c:58:f8:2e:89:14:1d:1d:bc:e8:92:d6:
         3f:c7:cd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:47 2026 by rpki-client