This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e32382e302f32332d3234203d3e2037303034.roa
File:                     3136342e37372e32382e302f32332d3234203d3e2037303034.roa (raw, json)
Hash identifier:          bKde0ftDMprtaz/50ST7vsE4e63b7XI/rBKntYeZO8M=
Subject key identifier:   7F:73:B4:8B:DD:92:58:C7:07:70:4E:E4:B9:28:2B:2E:94:F3:A5:29
Certificate issuer:       /CN=2652C1433114197317FCA49E051F361760D69E0E
Certificate serial:       0D8C7D5663CDB7A9B40AE4ED4ABF79C81928E524
Authority key identifier: 26:52:C1:43:31:14:19:73:17:FC:A4:9E:05:1F:36:17:60:D6:9E:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e32382e302f32332d3234203d3e2037303034.roa
Signing time:             Tue 06 Jan 2026 20:51:52 +0000
ROA not before:           Tue 06 Jan 2026 20:46:52 +0000
ROA not after:            Tue 05 Jan 2027 20:51:52 +0000
asID:                     7004
IP address blocks:        164.77.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8c:7d:56:63:cd:b7:a9:b4:0a:e4:ed:4a:bf:79:c8:19:28:e5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2652C1433114197317FCA49E051F361760D69E0E
        Validity
            Not Before: Jan  6 20:46:52 2026 GMT
            Not After : Jan  5 20:51:52 2027 GMT
        Subject: CN=7F73B48BDD9258C707704EE4B9282B2E94F3A529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:e7:13:f6:6a:dd:9d:c6:2a:2d:92:ee:0a:
                    0b:88:39:d0:f8:41:cc:c1:0a:82:ce:26:15:50:1f:
                    ba:5f:e0:db:56:a5:2c:6c:d7:33:31:90:8f:7b:3a:
                    28:24:e9:49:cc:6e:9d:be:d4:22:c3:6c:a4:66:40:
                    44:16:cc:ab:24:43:b0:65:7c:85:75:4b:27:bf:ce:
                    74:21:6e:44:16:08:e5:83:e7:85:94:98:96:ee:1c:
                    bf:21:2d:00:a8:b5:4c:f6:46:86:41:6a:c1:66:3c:
                    a8:87:5c:fe:c9:86:be:25:fc:cf:92:37:82:16:a5:
                    5c:c2:d9:b3:db:c8:da:73:5a:b2:3b:7c:74:98:aa:
                    01:9a:f5:ab:96:0d:17:ee:00:6b:65:e8:0b:9f:b5:
                    59:da:20:88:1f:78:89:39:1c:6b:f7:94:3d:56:24:
                    61:5f:c1:16:2a:3b:ae:b2:49:12:b2:36:f5:a9:66:
                    72:b5:98:c0:7b:0f:45:c5:d5:c5:e6:41:26:54:d8:
                    96:54:d2:1f:4f:96:60:56:ac:9c:30:f4:cb:b4:d4:
                    16:c8:21:f6:d5:84:cf:25:c8:a3:0b:22:0f:4e:8f:
                    59:cd:64:85:63:db:f8:3c:7a:b1:3a:e7:56:3d:00:
                    80:31:2d:bd:78:f7:b6:79:6b:cf:78:71:f5:a9:17:
                    74:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:73:B4:8B:DD:92:58:C7:07:70:4E:E4:B9:28:2B:2E:94:F3:A5:29
            X509v3 Authority Key Identifier:
                keyid:26:52:C1:43:31:14:19:73:17:FC:A4:9E:05:1F:36:17:60:D6:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e32382e302f32332d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.77.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:21:0f:1e:26:02:07:89:a9:02:15:45:ad:88:d0:b1:5c:09:
         54:a1:cb:40:1d:f3:3b:07:e6:9b:44:26:01:08:8d:ea:d4:74:
         e2:cb:76:c4:2f:05:5e:9e:36:0c:bd:91:57:49:45:8b:2c:46:
         72:6a:0a:71:5f:28:4a:50:ef:11:50:65:0e:3a:92:aa:a7:56:
         d2:70:30:b1:bd:f9:11:6a:82:c2:d2:b7:20:18:0e:1a:f1:76:
         56:f9:ab:41:bf:66:ca:11:f0:42:06:ef:a4:a0:5b:a3:f5:36:
         b4:7b:7e:11:e8:57:89:e7:ca:90:e0:e1:9e:a6:1c:25:e5:d6:
         4b:02:d3:0d:08:ec:5f:c8:fd:05:5b:92:36:a3:04:87:cf:e9:
         81:35:b1:59:13:9b:bc:b2:43:81:c0:78:93:68:a8:f2:0c:ad:
         c6:3b:16:81:61:a0:8b:4e:76:ce:af:7e:d2:f7:b8:58:80:07:
         1d:8e:8b:1f:eb:09:6f:8c:35:7e:fe:ec:b1:0c:20:f3:c4:13:
         55:0b:18:84:27:cd:2c:b2:c3:f7:77:4c:8a:cd:68:9a:3e:50:
         30:26:c3:96:f9:92:6e:1b:d4:a8:bd:97:8b:e9:77:7b:41:8d:
         94:f9:67:9a:46:0d:9f:52:0a:fa:14:68:09:60:9e:13:5b:e5:
         78:cb:1c:bb
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUDYx9VmPNt6m0CuTtSr95yBko5SQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY1MkMxNDMzMTE0MTk3MzE3RkNBNDlFMDUxRjM2MTc2
MEQ2OUUwRTAeFw0yNjAxMDYyMDQ2NTJaFw0yNzAxMDUyMDUxNTJaMDMxMTAvBgNV
BAMTKDdGNzNCNDhCREQ5MjU4QzcwNzcwNEVFNEI5MjgyQjJFOTRGM0E1MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEP+cT9mrdncYqLZLuCguIOdD4
QczBCoLOJhVQH7pf4NtWpSxs1zMxkI97Oigk6UnMbp2+1CLDbKRmQEQWzKskQ7Bl
fIV1Sye/znQhbkQWCOWD54WUmJbuHL8hLQCotUz2RoZBasFmPKiHXP7Jhr4l/M+S
N4IWpVzC2bPbyNpzWrI7fHSYqgGa9auWDRfuAGtl6AuftVnaIIgfeIk5HGv3lD1W
JGFfwRYqO66ySRKyNvWpZnK1mMB7D0XF1cXmQSZU2JZU0h9PlmBWrJww9Mu01BbI
IfbVhM8lyKMLIg9Oj1nNZIVj2/g8erE651Y9AIAxLb1497Z5a894cfWpF3QlAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUf3O0i92SWMcHcE7kuSgrLpTzpSkwHwYDVR0j
BBgwFoAUJlLBQzEUGXMX/KSeBR82F2DWng4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMTZBQjhDQkVCNENCNTJDREEyQTVCMjA4REMzQ0M3RDg4
NDc5RDQ3Mjc0MzUyOTNCN0QzOTAwQ0RBMkQ2OThBLzAvMjY1MkMxNDMzMTE0MTk3
MzE3RkNBNDlFMDUxRjM2MTc2MEQ2OUUwRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjUyQzE0MzMxMTQxOTczMTdG
Q0E0OUUwNTFGMzYxNzYwRDY5RTBFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDE2QUI4Q0JFQjRDQjUyQ0RBMkE1QjIwOERDM0NDN0Q4ODQ3OUQ0NzI3
NDM1MjkzQjdEMzkwMENEQTJENjk4QS8wLzMxMzYzNDJlMzczNzJlMzIzODJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDM3MzAzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpE0cMA0GCSqG
SIb3DQEBCwUAA4IBAQAcIQ8eJgIHiakCFUWtiNCxXAlUoctAHfM7B+abRCYBCI3q
1HTiy3bELwVenjYMvZFXSUWLLEZyagpxXyhKUO8RUGUOOpKqp1bScDCxvfkRaoLC
0rcgGA4a8XZW+atBv2bKEfBCBu+koFuj9Ta0e34R6FeJ58qQ4OGephwl5dZLAtMN
COxfyP0FW5I2owSHz+mBNbFZE5u8skOBwHiTaKjyDK3GOxaBYaCLTnbOr37S97hY
gAcdjosf6wlvjDV+/uyxDCDzxBNVCxiEJ80sssP3d0yKzWiaPlAwJsOW+ZJuG9So
vZeL6Xd7QY2U+WeaRg2fUgr6FGgJYJ4TW+V4yxy7
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:05:41 2026 by rpki-client