This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/3136382e3132312e38302e302f32322d3234203d3e20323634373037.roa
File:                     3136382e3132312e38302e302f32322d3234203d3e20323634373037.roa (raw, json)
Hash identifier:          OZ7bICz+1rPf/BamCnqW6yZ183AnwAoOv6UymTDNvT4=
Subject key identifier:   38:B2:70:40:DA:59:92:50:8A:55:3A:D6:D3:9F:14:22:46:F5:49:EC
Certificate issuer:       /CN=B1566632B5442CF0C87AB7D54C504E27671A3935
Certificate serial:       300EC4E1F55033B697432AAC664C57B4DF80D9CB
Authority key identifier: B1:56:66:32:B5:44:2C:F0:C8:7A:B7:D5:4C:50:4E:27:67:1A:39:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1566632B5442CF0C87AB7D54C504E27671A3935.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/3136382e3132312e38302e302f32322d3234203d3e20323634373037.roa
Signing time:             Tue 06 Jan 2026 19:34:04 +0000
ROA not before:           Tue 06 Jan 2026 19:29:04 +0000
ROA not after:            Tue 05 Jan 2027 19:34:04 +0000
asID:                     264707
IP address blocks:        168.121.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/B1566632B5442CF0C87AB7D54C504E27671A3935.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/B1566632B5442CF0C87AB7D54C504E27671A3935.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1566632B5442CF0C87AB7D54C504E27671A3935.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0e:c4:e1:f5:50:33:b6:97:43:2a:ac:66:4c:57:b4:df:80:d9:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1566632B5442CF0C87AB7D54C504E27671A3935
        Validity
            Not Before: Jan  6 19:29:04 2026 GMT
            Not After : Jan  5 19:34:04 2027 GMT
        Subject: CN=38B27040DA5992508A553AD6D39F142246F549EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:49:31:f5:36:04:50:d1:ef:0a:3a:bf:31:5c:
                    88:1b:43:26:46:ed:b5:67:b4:c3:9b:b5:bb:01:a4:
                    10:cc:0c:5f:9d:84:43:87:cc:91:98:57:4c:8f:ea:
                    1f:90:f1:27:f3:b7:1e:90:e6:14:62:bb:d9:b7:7e:
                    ff:af:e9:5e:9d:aa:26:63:2f:14:e4:cd:be:9f:64:
                    ad:84:c9:29:a8:4d:e1:01:56:6b:88:85:fc:4c:5c:
                    41:e0:3e:b3:dc:bc:d3:9b:a6:b5:e3:81:4d:96:b1:
                    a5:29:89:b6:07:73:d4:43:07:bc:00:ad:fe:1c:03:
                    1b:22:c6:78:94:09:89:cf:6e:90:f5:83:39:b2:8b:
                    d9:a1:7f:0a:c5:3e:f1:ab:4d:85:e3:5d:8e:ad:8a:
                    33:a9:fb:d4:fa:0c:1d:7a:a2:7a:6a:3c:01:94:67:
                    3d:48:0b:62:6e:4c:78:0c:27:6c:28:9f:21:39:5c:
                    3f:94:21:3f:74:88:36:a8:e1:29:4f:c4:95:b7:ca:
                    6a:e6:05:ee:0e:1b:9e:29:d1:73:b2:e8:6a:fc:1b:
                    a4:63:0a:b2:22:6b:2c:d7:7c:00:11:cb:f6:70:c8:
                    ad:ea:4b:e4:2f:bf:48:ff:91:40:f8:df:f6:9c:20:
                    e7:e8:58:c0:bd:d4:a1:c4:b3:df:d6:be:3d:6e:4e:
                    17:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B2:70:40:DA:59:92:50:8A:55:3A:D6:D3:9F:14:22:46:F5:49:EC
            X509v3 Authority Key Identifier:
                keyid:B1:56:66:32:B5:44:2C:F0:C8:7A:B7:D5:4C:50:4E:27:67:1A:39:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/B1566632B5442CF0C87AB7D54C504E27671A3935.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1566632B5442CF0C87AB7D54C504E27671A3935.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1D9339D3AE229913F4F3033649BA074987B440C200FD89030DAE3D69F5E6F9F/0/3136382e3132312e38302e302f32322d3234203d3e20323634373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:82:95:73:cd:0d:fd:19:e9:e3:63:3e:a9:e0:cb:13:80:ae:
         d2:7d:f0:d1:f4:fb:50:6b:16:82:c4:c1:ff:9a:96:0a:ae:ea:
         86:cb:4f:b8:07:93:7b:73:4e:d7:ed:d0:6e:63:42:f1:a9:25:
         61:f5:2b:3b:23:35:f7:ea:7d:f0:78:be:e9:60:fc:4f:1d:9a:
         0d:f7:97:3b:14:9b:23:48:c9:aa:bb:4e:52:28:bc:55:42:cd:
         fa:0f:53:76:1d:79:e8:03:34:ce:8f:52:c1:6a:8d:3c:cb:2f:
         ce:a6:40:ff:43:f0:60:44:37:a9:24:58:76:ee:da:d7:d6:8b:
         9a:9e:78:6a:2b:2c:ac:77:27:b3:ce:68:70:92:4b:80:63:7e:
         9e:ab:e7:35:7a:cb:5f:ef:21:db:1a:97:9f:8a:13:ef:15:c2:
         00:68:0a:26:7e:68:f2:fd:aa:30:08:fd:b8:4c:5e:4d:b8:f7:
         dd:4c:be:81:b5:45:89:8c:df:71:07:63:c6:22:8c:8d:b4:70:
         07:74:f9:9c:ba:96:87:a5:49:7f:b4:f1:f3:65:3e:d6:b1:dd:
         c1:8d:b1:77:25:a5:56:0d:33:81:d7:62:8a:b8:f5:13:c5:14:
         39:c1:2b:f8:9b:ce:36:3f:57:79:2b:33:b6:19:ed:ce:bd:ff:
         05:19:c3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:08 2026 by rpki-client