This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/3136382e3232372e32342e302f32322d3234203d3e20323634363833.roa
File:                     3136382e3232372e32342e302f32322d3234203d3e20323634363833.roa (raw, json)
Hash identifier:          pexBPv/qUstG7UyIUG4iuwpBQqe83rmFbZMquG1aRhw=
Subject key identifier:   F9:B0:A3:DE:85:34:16:3F:73:BE:58:40:E5:67:65:1D:D2:5E:3C:0D
Certificate issuer:       /CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
Certificate serial:       68EA80620E9095CAAB66A61E542212C82E94F26E
Authority key identifier: 99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/3136382e3232372e32342e302f32322d3234203d3e20323634363833.roa
Signing time:             Tue 06 Jan 2026 20:57:19 +0000
ROA not before:           Tue 06 Jan 2026 20:52:19 +0000
ROA not after:            Tue 05 Jan 2027 20:57:19 +0000
asID:                     264683
IP address blocks:        168.227.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ea:80:62:0e:90:95:ca:ab:66:a6:1e:54:22:12:c8:2e:94:f2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
        Validity
            Not Before: Jan  6 20:52:19 2026 GMT
            Not After : Jan  5 20:57:19 2027 GMT
        Subject: CN=F9B0A3DE8534163F73BE5840E567651DD25E3C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:82:00:aa:58:35:25:2d:67:ee:bb:fc:18:
                    49:9d:5f:4a:b4:67:a6:1b:a9:68:4b:84:1b:36:47:
                    0e:16:eb:2b:ae:ff:c1:f6:b9:e9:9c:56:be:70:17:
                    ac:ec:7b:49:b6:dd:e3:7a:f0:bc:11:f8:a6:77:95:
                    6f:4a:32:da:97:fb:63:1e:56:2f:f9:b6:e0:91:92:
                    a7:75:7f:a8:e5:25:a4:fa:15:7b:f8:e2:7b:06:e7:
                    39:5f:ef:0d:71:96:54:e8:01:3b:ba:f1:d3:0b:23:
                    f2:19:e8:5a:bc:f9:ec:d5:d2:8a:0a:94:e9:a0:c5:
                    52:61:3d:e9:38:9f:97:ec:0c:0b:5c:30:b1:28:10:
                    d6:73:b8:8b:8e:b7:ec:52:00:b6:d8:39:bf:0b:e1:
                    6b:db:72:65:c7:95:e5:5e:55:7b:b2:4b:2f:e9:e6:
                    be:0b:00:18:a4:08:7d:ec:e8:05:11:03:a1:04:37:
                    89:ba:14:b3:57:bd:b1:bd:1b:1e:dd:9a:1c:90:bb:
                    b9:bd:7b:20:22:12:6f:98:01:ed:a4:71:95:54:76:
                    db:a0:03:e6:76:a3:56:2b:ea:eb:fe:4c:82:bf:6d:
                    0e:a8:f9:fc:ef:79:21:db:fc:b2:86:24:2c:13:79:
                    0c:0a:23:d1:87:33:1c:58:57:41:66:1c:85:cd:49:
                    07:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B0:A3:DE:85:34:16:3F:73:BE:58:40:E5:67:65:1D:D2:5E:3C:0D
            X509v3 Authority Key Identifier:
                keyid:99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/3136382e3232372e32342e302f32322d3234203d3e20323634363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:25:7e:0c:22:6a:74:65:73:1f:c5:8e:b7:12:a8:b6:84:b9:
         83:2b:22:30:33:62:b0:c3:d1:50:d9:69:f6:b6:45:0b:5f:69:
         90:28:7d:93:21:a5:24:1d:ca:37:c6:88:7b:7e:89:1b:d4:58:
         ed:49:5c:01:74:17:08:8a:c7:f7:95:24:67:71:70:f7:19:63:
         63:6e:19:5a:2f:9d:7a:18:e8:35:2e:54:67:af:19:f4:93:de:
         b6:0e:bb:da:e2:fd:d0:b4:bf:b3:3f:cf:1e:b5:a3:db:58:4c:
         57:b0:ac:63:e5:3d:14:4c:5d:57:47:73:d0:6e:b9:79:9f:9d:
         f5:96:5e:4c:d4:d9:b4:ad:af:79:2f:00:d3:95:6d:39:53:14:
         69:c6:2e:6d:ba:57:48:fb:9b:19:68:ce:b2:6a:b4:de:b3:3f:
         93:d7:41:49:1b:3b:5d:42:69:58:ee:fa:1a:81:a4:d2:47:79:
         01:d8:e3:0c:4d:8d:01:b4:43:7e:f4:91:59:71:06:2c:25:98:
         95:ba:eb:b9:9a:b8:73:01:95:58:17:4f:7c:6a:6f:47:8d:39:
         3a:4b:74:ed:12:41:d0:06:b0:e4:2c:66:e7:ed:75:c3:07:f4:
         60:24:14:ca:97:fc:e2:36:94:cd:9c:8e:0c:95:ea:93:f8:c3:
         87:c6:5b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:40 2026 by rpki-client