This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34352e302f32342d3234203d3e203237383433.roa
File:                     3136382e3132312e34352e302f32342d3234203d3e203237383433.roa (raw, json)
Hash identifier:          8LHv8/z7BByoOVwbYGDC9v4Aw8FWlEhhNiNhE6KZ9eQ=
Subject key identifier:   3A:8A:9C:BB:2A:D9:57:8F:99:0E:87:2C:5D:20:69:86:08:1C:C0:9A
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       48C3597F1CCF806F433413B3624A28DC4048D90B
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34352e302f32342d3234203d3e203237383433.roa
Signing time:             Tue 06 Jan 2026 19:03:54 +0000
ROA not before:           Tue 06 Jan 2026 18:58:54 +0000
ROA not after:            Tue 05 Jan 2027 19:03:54 +0000
asID:                     27843
IP address blocks:        168.121.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c3:59:7f:1c:cf:80:6f:43:34:13:b3:62:4a:28:dc:40:48:d9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Jan  6 18:58:54 2026 GMT
            Not After : Jan  5 19:03:54 2027 GMT
        Subject: CN=3A8A9CBB2AD9578F990E872C5D206986081CC09A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:dc:aa:8f:95:e7:f4:21:3f:59:dd:c1:68:35:
                    af:9e:26:94:f6:22:b5:aa:50:c8:3a:31:91:58:d0:
                    41:92:f3:8c:6a:6c:d8:81:e4:6f:09:c3:c5:f0:40:
                    f9:85:c1:a1:d7:e2:1f:00:5e:29:af:3b:21:dd:17:
                    d6:bd:9d:17:2f:57:5c:90:17:a7:f5:67:89:14:a8:
                    31:82:45:6a:6a:98:34:38:c3:1e:09:32:36:3a:c3:
                    c4:a5:2e:df:da:fd:15:6c:20:e5:79:b7:11:d4:2f:
                    e0:48:95:57:a4:77:0c:d4:bb:85:40:e4:1a:3f:44:
                    9f:25:bd:60:98:da:dd:3a:23:6e:a8:19:d2:59:34:
                    d6:42:3f:be:88:62:16:69:26:1f:1d:60:08:0c:b6:
                    ff:7c:3e:ee:2d:00:40:6e:e4:ae:65:44:76:88:99:
                    99:2c:0b:99:69:08:4d:f1:3a:95:4c:9c:d2:5d:ae:
                    ef:8b:da:dd:e0:f9:a3:de:9d:fa:c0:45:31:f3:c4:
                    34:54:a4:6a:cf:44:63:fe:74:1b:fa:d8:e3:ea:b5:
                    25:b1:e4:a1:f5:20:05:99:94:17:cf:c9:57:0b:39:
                    c3:87:16:41:e5:93:f1:c1:4a:db:fe:f7:b4:11:c6:
                    8d:7b:a0:90:6a:15:f4:0a:d1:1b:75:15:c9:0e:81:
                    4f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8A:9C:BB:2A:D9:57:8F:99:0E:87:2C:5D:20:69:86:08:1C:C0:9A
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34352e302f32342d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:cb:7d:53:13:87:12:dd:11:40:4a:10:b9:84:0b:da:b3:fd:
         c8:f8:5e:46:b6:86:06:81:66:19:41:05:4c:2c:d4:da:10:92:
         56:ad:8a:12:c1:44:1d:db:6d:4d:bd:f9:37:ef:72:ca:c9:68:
         a7:70:06:72:71:d2:32:50:27:3a:a9:4f:f6:23:64:4a:75:29:
         11:b6:64:d5:40:12:ad:3e:aa:15:b3:84:7c:5d:76:d8:8a:c6:
         ce:8a:57:1b:16:17:d0:be:07:77:df:0c:3b:3d:43:84:33:62:
         18:97:c7:35:28:36:46:bb:ef:23:8b:a8:28:04:a0:b9:7e:8e:
         c0:cc:ef:06:3d:c2:84:26:e3:c3:15:1c:a0:dd:8f:29:08:6f:
         b8:66:6b:83:b9:1f:bf:11:03:fd:8f:f0:f0:91:ef:67:dc:b3:
         77:95:dd:96:1e:91:e1:7f:10:c8:88:91:1c:7d:7e:c9:8c:76:
         f2:ea:2e:25:44:b3:3a:dd:92:3f:f1:7c:56:f1:72:e5:7b:30:
         6d:44:f6:52:bf:52:8b:59:ac:84:50:74:d2:82:9c:7f:3f:41:
         07:a1:7f:f8:8a:7e:23:4e:65:c8:f8:12:c8:2b:b8:6e:10:dd:
         9e:30:fd:01:f9:e7:54:40:62:35:f8:de:44:ed:a6:56:c6:86:
         7a:99:c8:88
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSMNZfxzPgG9DNBOzYkoo3EBI2QswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYwOEQzOEQ0NTcxQzA5QTgzQjQ1QUNGRDEwQUVCNzgy
NkNFOEY4NDAeFw0yNjAxMDYxODU4NTRaFw0yNzAxMDUxOTAzNTRaMDMxMTAvBgNV
BAMTKDNBOEE5Q0JCMkFEOTU3OEY5OTBFODcyQzVEMjA2OTg2MDgxQ0MwOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr3KqPlef0IT9Z3cFoNa+eJpT2
IrWqUMg6MZFY0EGS84xqbNiB5G8Jw8XwQPmFwaHX4h8AXimvOyHdF9a9nRcvV1yQ
F6f1Z4kUqDGCRWpqmDQ4wx4JMjY6w8SlLt/a/RVsIOV5txHUL+BIlVekdwzUu4VA
5Bo/RJ8lvWCY2t06I26oGdJZNNZCP76IYhZpJh8dYAgMtv98Pu4tAEBu5K5lRHaI
mZksC5lpCE3xOpVMnNJdru+L2t3g+aPenfrARTHzxDRUpGrPRGP+dBv62OPqtSWx
5KH1IAWZlBfPyVcLOcOHFkHlk/HBStv+97QRxo17oJBqFfQK0Rt1FckOgU//AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUOoqcuyrZV4+ZDocsXSBphggcwJowHwYDVR0j
BBgwFoAUnwjTjUVxwJqDtFrP0QrreCbOj4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMTZFOEYxMDMxNDZCMjg1MDMzNTAyM0E3MEE2RDM5ODc0
NzY2MzY4REJEQTVGMDQ4RDU1OTcyQjk4RkQ4MzY3LzAvOUYwOEQzOEQ0NTcxQzA5
QTgzQjQ1QUNGRDEwQUVCNzgyNkNFOEY4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjA4RDM4RDQ1NzFDMDlBODNC
NDVBQ0ZEMTBBRUI3ODI2Q0U4Rjg0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE2RThGMTAzMTQ2QjI4NTAzMzUwMjNBNzBBNkQzOTg3NDc2NjM2OERC
REE1RjA0OEQ1NTk3MkI5OEZEODM2Ny8wLzMxMzYzODJlMzEzMjMxMmUzNDM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM4MzQzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKh5LTAN
BgkqhkiG9w0BAQsFAAOCAQEAhMt9UxOHEt0RQEoQuYQL2rP9yPheRraGBoFmGUEF
TCzU2hCSVq2KEsFEHdttTb35N+9yyslop3AGcnHSMlAnOqlP9iNkSnUpEbZk1UAS
rT6qFbOEfF122IrGzopXGxYX0L4Hd98MOz1DhDNiGJfHNSg2RrvvI4uoKASguX6O
wMzvBj3ChCbjwxUcoN2PKQhvuGZrg7kfvxED/Y/w8JHvZ9yzd5Xdlh6R4X8QyIiR
HH1+yYx28uouJUSzOt2SP/F8VvFy5XswbUT2Ur9Si1mshFB00oKcfz9BB6F/+Ip+
I05lyPgSyCu4bhDdnjD9AfnnVEBiNfjeRO2mVsaGepnIiA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:32:58 2026 by rpki-client