This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3136382e3232382e3139322e302f32342d3234203d3e20323633373235.roa
File:                     3136382e3232382e3139322e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          KSyP0JEvbtVxdG7JpztGYwClL2b9SAxfSnVuuqZbzOw=
Subject key identifier:   83:08:F6:16:D6:9B:DA:4C:73:AC:61:13:F2:9B:EC:2E:89:EF:EA:4C
Certificate issuer:       /CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
Certificate serial:       7247485BA5BF5E23773F5C578B06E9143207B8E8
Authority key identifier: BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3136382e3232382e3139322e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 06 Jan 2026 19:42:32 +0000
ROA not before:           Tue 06 Jan 2026 19:37:32 +0000
ROA not after:            Tue 05 Jan 2027 19:42:32 +0000
asID:                     263725
IP address blocks:        168.228.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:47:48:5b:a5:bf:5e:23:77:3f:5c:57:8b:06:e9:14:32:07:b8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
        Validity
            Not Before: Jan  6 19:37:32 2026 GMT
            Not After : Jan  5 19:42:32 2027 GMT
        Subject: CN=8308F616D69BDA4C73AC6113F29BEC2E89EFEA4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:23:37:7c:95:74:c5:0f:5a:e3:e6:9b:2e:5a:
                    27:2f:e7:fc:cf:3a:7b:dc:4a:33:bb:e3:c7:60:54:
                    6c:e0:b8:45:ea:49:3b:6e:5b:e2:d3:3a:80:1c:73:
                    82:44:b1:8c:f8:a0:72:68:a4:03:8b:26:4f:ff:1c:
                    2b:56:58:a4:10:1b:ed:84:16:4a:68:25:29:6c:5d:
                    e2:ea:89:0c:a5:99:15:ab:69:ad:e9:15:45:72:d0:
                    e9:dd:16:80:ed:5b:c5:51:8e:a4:ad:43:fe:ab:e3:
                    e4:ef:d4:a8:0a:34:ff:6c:8d:da:5f:37:ef:a0:db:
                    92:55:03:4b:e8:38:ca:e0:68:c5:ec:ed:6f:96:33:
                    ff:e7:d8:1a:38:ab:1a:fb:eb:c3:96:be:6d:16:0c:
                    6b:fc:c7:09:f4:fd:fb:15:f9:0c:bb:15:c2:b8:25:
                    fd:f1:d9:22:ef:81:8a:2e:d6:f2:1e:8f:e1:11:b0:
                    61:12:64:bb:4b:e8:75:4f:ac:21:2b:af:64:e9:c1:
                    e5:5f:d7:ed:46:4f:39:60:8b:07:23:0a:de:ef:9c:
                    cf:a9:ea:7b:c4:1e:02:1a:28:af:0e:8d:b3:74:91:
                    bd:5e:c0:54:2c:ae:23:ef:2c:e6:3d:57:44:00:3d:
                    37:14:03:c9:66:93:b5:2b:49:da:09:b3:76:d9:39:
                    78:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:08:F6:16:D6:9B:DA:4C:73:AC:61:13:F2:9B:EC:2E:89:EF:EA:4C
            X509v3 Authority Key Identifier:
                keyid:BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3136382e3232382e3139322e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:20:0b:f7:3c:13:65:5b:2d:86:69:b1:ea:52:b1:47:55:10:
         8f:69:e7:7c:1e:e9:60:48:b5:04:45:94:e1:6e:53:bb:a3:b6:
         74:35:7c:d6:d3:7d:9e:b8:f8:21:8c:ab:19:8d:6a:1b:e0:19:
         11:07:47:58:32:7a:cb:5e:00:1c:33:41:e0:7f:7c:cc:29:0c:
         26:a2:df:ba:2f:5f:dd:7b:ce:ff:d3:1c:b8:98:77:41:90:f5:
         0c:64:d8:46:d1:87:3e:a5:b5:62:ca:fa:37:ac:40:2a:99:2c:
         34:25:53:fa:e3:f5:bf:77:e6:8f:2e:95:2f:5c:59:62:43:e2:
         04:ec:70:db:eb:fd:f2:e6:1d:a8:cd:05:de:73:ab:01:68:35:
         47:bf:ed:16:2b:ce:11:c4:c1:f7:90:95:6e:8e:a1:1e:9f:fb:
         9f:a1:71:e5:61:ae:6f:5b:28:8b:50:b9:9f:d4:c5:fe:5f:0d:
         e8:15:f4:77:03:33:d4:24:c6:ee:ce:a6:92:00:01:71:eb:ef:
         0b:9e:fb:0b:1a:9e:24:12:2b:99:2a:c6:14:51:00:5e:6e:e7:
         18:33:33:4d:7d:db:02:9a:e4:88:a0:57:df:24:45:ee:85:49:
         1b:69:d8:22:73:0c:65:3a:a4:87:25:9e:8f:27:ca:7c:f8:dd:
         a6:36:81:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:09:53 2026 by rpki-client