This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138342e302f32342d3234203d3e203130373738.roa
File:                     3136382e3139362e3138342e302f32342d3234203d3e203130373738.roa (raw, json)
Hash identifier:          lP0KIuAq5+hSJzBm/u1tUxGvWEt7Wjfc/6+AIdq7/tc=
Subject key identifier:   39:8E:6B:C2:CB:74:96:59:5F:E1:3B:CC:92:65:6F:11:41:49:D7:AF
Certificate issuer:       /CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
Certificate serial:       3027E105A822E265E1AAA90CEAE4BC70FF13FDFA
Authority key identifier: E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138342e302f32342d3234203d3e203130373738.roa
Signing time:             Tue 06 Jan 2026 19:44:25 +0000
ROA not before:           Tue 06 Jan 2026 19:39:25 +0000
ROA not after:            Tue 05 Jan 2027 19:44:25 +0000
asID:                     10778
IP address blocks:        168.196.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:27:e1:05:a8:22:e2:65:e1:aa:a9:0c:ea:e4:bc:70:ff:13:fd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
        Validity
            Not Before: Jan  6 19:39:25 2026 GMT
            Not After : Jan  5 19:44:25 2027 GMT
        Subject: CN=398E6BC2CB7496595FE13BCC92656F114149D7AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:a1:a9:2c:51:15:93:93:eb:3e:55:55:cc:
                    78:8e:22:70:db:99:d9:f9:01:eb:9b:5c:45:85:c7:
                    1f:14:e2:5d:2a:64:dd:19:dd:76:e0:69:0d:39:53:
                    cf:0c:1d:2f:89:33:d6:a6:ae:70:87:0f:45:9b:86:
                    49:a4:85:78:81:b0:d5:ac:e7:60:60:69:17:8e:68:
                    84:cb:80:a8:0a:d9:5e:16:77:67:e0:94:42:a4:50:
                    60:81:f9:91:00:a5:de:e2:df:a3:00:4b:77:11:ca:
                    d3:0d:01:c4:5e:f0:3b:6c:b4:89:0c:b1:2e:b2:15:
                    5b:53:04:9a:76:c3:85:c6:86:9b:a8:05:da:9a:b3:
                    59:d4:cb:4f:93:7f:52:eb:08:95:cf:6e:77:5c:53:
                    e1:88:7a:09:47:f1:cf:94:49:e9:0d:6e:2e:1a:18:
                    9a:64:8d:a8:21:f6:c0:33:fc:1e:71:55:46:e6:19:
                    c9:e4:a7:5c:42:8a:15:42:87:9e:ba:0a:83:d1:3f:
                    1d:29:2e:f0:6f:d9:15:fb:02:46:57:a2:23:1c:d0:
                    78:94:79:11:f5:02:ca:14:a2:27:94:58:ed:b1:d2:
                    cc:55:b4:0f:31:4e:14:65:9a:a5:e9:95:bc:a6:97:
                    c4:b9:88:a5:29:a2:6d:5a:7b:00:fc:ce:51:f2:34:
                    38:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8E:6B:C2:CB:74:96:59:5F:E1:3B:CC:92:65:6F:11:41:49:D7:AF
            X509v3 Authority Key Identifier:
                keyid:E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138342e302f32342d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:0a:25:ab:bd:af:c3:3e:57:12:c0:34:21:aa:55:ad:79:17:
         3a:20:6a:8b:1a:a9:d7:6d:fa:9f:b7:65:f6:02:c0:f2:35:7d:
         12:83:5a:64:da:67:15:7a:e2:b2:06:c0:5f:40:5a:09:ae:15:
         4f:f8:8e:7f:1b:49:f4:e6:31:bc:2d:f5:cd:57:71:24:80:d7:
         f6:8a:e7:3e:ac:f4:64:24:3f:1c:bb:12:9f:f5:67:e5:b6:44:
         95:7a:f1:c1:8c:e2:b1:ee:9d:fc:14:a1:e0:a9:89:93:60:fa:
         89:0e:e5:ba:07:e8:7a:7b:46:64:be:a4:c2:50:c6:37:f7:c5:
         25:06:f4:c2:91:41:f5:58:da:98:4c:ef:7b:f6:6e:55:28:3d:
         96:5d:92:52:47:5c:33:d6:0e:a0:b9:14:90:5c:9a:25:55:a5:
         8c:3b:41:f9:5b:80:f6:53:c4:10:b5:65:92:35:2f:da:99:26:
         9c:c3:3e:4e:09:80:11:fc:ec:13:93:0b:ff:15:91:36:01:33:
         ed:5d:58:bc:5f:2b:88:4e:c1:fe:24:0e:76:4a:05:cf:b0:20:
         cc:7d:08:27:6f:70:51:98:01:36:d1:46:f2:7b:19:7e:c8:71:
         4c:0a:1f:a9:49:73:61:9a:f5:50:6e:ee:44:05:d5:b8:b0:9d:
         2a:29:de:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:24:04 2026 by rpki-client