This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230312e302f32342d3234203d3e20323634373734.roa
File:                     3136382e3139372e3230312e302f32342d3234203d3e20323634373734.roa (raw, json)
Hash identifier:          ZTzMoqQDvGuoZV7IA1EOsiR6Tj9jrp6XYZ7oKs75zo0=
Subject key identifier:   8A:31:55:45:E8:14:3E:28:14:A0:F6:87:9F:07:65:57:35:39:2E:77
Certificate issuer:       /CN=9514A7D608C4CFA34185B1F9CECDCD5D234D119D
Certificate serial:       3B11C0BE72C0543DF8639454C0F3C2E3694D1443
Authority key identifier: 95:14:A7:D6:08:C4:CF:A3:41:85:B1:F9:CE:CD:CD:5D:23:4D:11:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230312e302f32342d3234203d3e20323634373734.roa
Signing time:             Thu 22 Jan 2026 16:26:50 +0000
ROA not before:           Thu 22 Jan 2026 16:21:50 +0000
ROA not after:            Thu 21 Jan 2027 16:26:50 +0000
asID:                     264774
IP address blocks:        168.197.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:11:c0:be:72:c0:54:3d:f8:63:94:54:c0:f3:c2:e3:69:4d:14:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9514A7D608C4CFA34185B1F9CECDCD5D234D119D
        Validity
            Not Before: Jan 22 16:21:50 2026 GMT
            Not After : Jan 21 16:26:50 2027 GMT
        Subject: CN=8A315545E8143E2814A0F6879F07655735392E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:39:66:05:ff:b7:3e:75:0d:47:4c:f6:fd:ad:
                    64:16:ff:1c:64:c8:38:17:7b:e5:ec:95:0a:22:92:
                    52:0e:9d:f6:42:b3:e8:1d:68:45:68:6b:a3:34:fb:
                    fb:7c:c1:a7:95:73:f8:4f:b4:d6:09:de:93:10:57:
                    9f:46:40:f0:87:75:23:3a:91:13:c1:07:37:8d:78:
                    66:48:7e:fd:21:da:9a:a9:eb:77:cb:a7:f7:30:bf:
                    c3:aa:08:e2:4c:6e:c6:f0:fd:16:05:92:e1:e5:27:
                    f1:61:62:64:08:47:f8:cf:d7:22:52:b7:fe:cb:4f:
                    c2:ba:e2:df:e4:54:12:d5:49:00:db:c9:cb:4c:46:
                    ae:83:6e:52:28:1f:ef:9d:65:2d:82:8e:69:a6:ff:
                    0c:15:67:c5:82:7b:64:03:1a:9d:c7:9e:22:26:39:
                    5a:cf:16:71:8e:65:a1:d1:2f:c2:3d:28:db:03:8a:
                    ce:ec:00:ff:e1:5e:a1:c1:03:74:da:73:0c:ae:a3:
                    32:c2:eb:3b:29:cc:65:7e:d0:96:b3:dc:ee:e2:23:
                    cc:75:93:df:b2:45:22:37:f2:ba:3f:83:10:c1:6c:
                    62:96:d1:d4:63:b6:d7:c5:ad:1c:e5:3f:d0:68:67:
                    ff:a7:a1:5c:93:ec:c0:eb:19:69:61:ae:b7:d7:ae:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:31:55:45:E8:14:3E:28:14:A0:F6:87:9F:07:65:57:35:39:2E:77
            X509v3 Authority Key Identifier:
                keyid:95:14:A7:D6:08:C4:CF:A3:41:85:B1:F9:CE:CD:CD:5D:23:4D:11:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230312e302f32342d3234203d3e20323634373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:13:9e:fa:92:91:1d:af:f8:0b:cf:72:22:7e:69:42:55:00:
         95:18:25:cd:33:b2:c8:fe:92:ee:90:2a:30:9b:e9:b2:b5:68:
         db:a5:c8:a0:7e:2c:28:91:85:6a:6e:43:2a:04:3f:f9:84:c1:
         cb:71:0e:d2:74:9f:00:2a:0a:33:df:f5:81:c8:d8:b8:b3:55:
         a6:a2:4f:6f:5b:3d:c5:7b:c8:db:63:28:c8:85:85:51:31:4f:
         df:0d:ff:8a:ea:3a:3a:59:83:57:e1:55:3e:e2:b6:04:5e:d7:
         ba:26:b3:3f:86:8a:67:64:19:e7:53:e3:dc:26:b2:fd:78:6c:
         a7:86:4f:ec:69:cc:43:05:23:3f:39:68:d3:1a:55:1e:44:b0:
         37:b5:02:e7:9e:45:8b:c1:38:cc:a7:6d:97:29:a6:67:26:38:
         68:fd:41:18:52:82:e1:91:ff:ee:7a:b5:6a:6a:71:6b:e2:dc:
         61:1b:e9:8e:97:d1:18:48:f8:de:33:c2:20:72:60:a7:28:0b:
         0a:8a:90:47:e2:88:60:a7:30:96:00:dd:df:73:9c:02:66:b2:
         2b:ff:31:7b:11:16:e4:45:a4:ad:59:d1:dd:d1:8b:2b:ad:d6:
         94:2c:2b:c6:37:87:c6:f3:7d:73:c8:67:a0:58:22:26:e8:65:
         7a:c4:9e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:19 2026 by rpki-client