This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/3136382e3139342e3231362e302f32322d3234203d3e20323634373630.roa
File:                     3136382e3139342e3231362e302f32322d3234203d3e20323634373630.roa (raw, json)
Hash identifier:          vRauBDLoie7ryeDQ6nbDbNSPzM0R+O3wGJ4BbFn02ls=
Subject key identifier:   F5:CB:FC:3C:AF:DE:B1:6B:9D:AB:CE:23:63:D7:7A:FB:3A:60:18:69
Certificate issuer:       /CN=88DE53E0010338ADE050EFFAA4698BF37488EE71
Certificate serial:       5EB128F0E3B5D51023614A8E3BE49BDD55833EE0
Authority key identifier: 88:DE:53:E0:01:03:38:AD:E0:50:EF:FA:A4:69:8B:F3:74:88:EE:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/3136382e3139342e3231362e302f32322d3234203d3e20323634373630.roa
Signing time:             Tue 06 Jan 2026 19:31:37 +0000
ROA not before:           Tue 06 Jan 2026 19:26:37 +0000
ROA not after:            Tue 05 Jan 2027 19:31:37 +0000
asID:                     264760
IP address blocks:        168.194.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b1:28:f0:e3:b5:d5:10:23:61:4a:8e:3b:e4:9b:dd:55:83:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88DE53E0010338ADE050EFFAA4698BF37488EE71
        Validity
            Not Before: Jan  6 19:26:37 2026 GMT
            Not After : Jan  5 19:31:37 2027 GMT
        Subject: CN=F5CBFC3CAFDEB16B9DABCE2363D77AFB3A601869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:77:cf:14:37:09:f3:84:d5:b5:87:4e:67:29:
                    d7:08:26:1a:00:e9:69:94:d9:85:4e:bf:af:2a:21:
                    89:9a:a8:90:68:85:4c:2f:b8:07:43:ac:0b:d9:59:
                    d3:4d:f9:84:2f:e8:04:13:19:4b:a3:57:04:1f:67:
                    69:34:48:99:b3:ea:42:15:6a:6c:56:78:92:a4:7e:
                    a3:d5:8a:c2:44:4c:36:b3:3f:60:47:38:c3:bd:d0:
                    bb:93:41:fc:28:74:c5:d3:06:04:2a:7d:65:0f:c3:
                    36:36:db:f3:5d:0b:b1:e0:48:c0:ec:c2:bd:c4:6c:
                    62:02:7a:69:cf:70:55:8a:ae:8d:12:fa:8d:1a:57:
                    2c:61:ff:aa:9b:f3:f0:ba:5e:5a:c8:dd:45:83:b7:
                    1f:0d:b6:d9:5b:f3:a3:f9:c2:88:fc:db:e3:5a:01:
                    e4:69:61:20:7c:b8:6e:75:87:33:a5:6d:71:2a:a2:
                    0e:37:19:be:87:68:25:e5:ff:90:41:45:12:52:4b:
                    f0:a0:54:d3:5d:64:16:2b:56:52:2b:86:d0:27:38:
                    c9:80:30:ac:84:2e:0c:47:82:9a:f2:af:24:ce:d0:
                    8c:e1:41:4a:40:01:3e:c1:c6:f8:40:c6:cc:8a:a3:
                    c2:94:bb:cb:f8:8c:b0:fb:d8:1b:ac:f0:ae:61:88:
                    25:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CB:FC:3C:AF:DE:B1:6B:9D:AB:CE:23:63:D7:7A:FB:3A:60:18:69
            X509v3 Authority Key Identifier:
                keyid:88:DE:53:E0:01:03:38:AD:E0:50:EF:FA:A4:69:8B:F3:74:88:EE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/3136382e3139342e3231362e302f32322d3234203d3e20323634373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:6d:1a:a7:20:26:29:99:4d:60:fc:91:2f:21:04:35:90:13:
         87:58:65:77:ec:ca:92:b3:c8:da:f7:f2:2e:ee:a1:30:67:f4:
         30:e1:93:a4:2d:f5:b3:a1:c6:7d:ea:0f:d9:5e:64:f3:11:33:
         b0:fe:7f:e2:e0:25:9f:b1:27:cd:e8:a1:fd:f4:15:3a:61:24:
         19:ee:78:03:8f:48:d1:c6:31:b2:0c:ad:6c:16:98:16:6f:31:
         02:b6:f5:e4:85:da:48:e2:77:5b:3c:00:f2:9f:0e:3e:2c:64:
         7d:54:8e:79:1d:93:4e:f6:56:20:ff:0a:8a:a7:1a:f0:84:f7:
         16:9e:0d:db:67:b8:b2:f5:36:92:b2:53:34:95:d4:39:f0:6e:
         b5:2b:ac:db:aa:ae:1d:8d:e9:3d:b3:d7:8a:0f:90:90:a2:6d:
         28:c9:5b:f2:61:02:2d:5a:3f:4e:86:7c:b0:12:6a:c4:34:a6:
         82:b5:a5:68:40:d7:36:53:e0:e1:d8:8d:49:d6:d3:88:7d:ca:
         c2:12:9f:b7:f5:46:20:d0:ec:15:eb:45:c6:00:3a:0b:df:aa:
         dc:38:d1:3f:f6:6f:1c:d9:b2:71:e3:16:47:22:25:72:40:fe:
         1d:0e:0b:dd:81:bc:ea:55:39:54:f4:6c:73:ec:fb:cf:ac:cc:
         63:3c:d4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:29 2026 by rpki-client