This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37342e302f32342d3234203d3e20323730303439.roa
File:                     36362e3233312e37342e302f32342d3234203d3e20323730303439.roa (raw, json)
Hash identifier:          9yGBU0D6jnERJqtt1ZxGautuoy45/hed+TKwAGfUy98=
Subject key identifier:   F0:53:0E:F9:5D:49:CC:B2:BB:43:EA:77:14:A1:98:C5:F7:03:54:CF
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       2C937EBBDC99DD964B8B9B7DFB8321D7FEA6B740
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37342e302f32342d3234203d3e20323730303439.roa
Signing time:             Tue 06 Jan 2026 19:33:29 +0000
ROA not before:           Tue 06 Jan 2026 19:28:29 +0000
ROA not after:            Tue 05 Jan 2027 19:33:29 +0000
asID:                     270049
IP address blocks:        66.231.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:93:7e:bb:dc:99:dd:96:4b:8b:9b:7d:fb:83:21:d7:fe:a6:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Jan  6 19:28:29 2026 GMT
            Not After : Jan  5 19:33:29 2027 GMT
        Subject: CN=F0530EF95D49CCB2BB43EA7714A198C5F70354CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:19:dd:5d:f6:28:6b:a3:ab:6a:b1:a4:db:
                    61:2e:cb:4b:f8:00:7b:1d:ee:b5:19:33:e0:13:63:
                    60:c6:58:aa:80:db:7e:8d:4e:88:3d:5b:37:92:79:
                    84:20:d2:06:bd:65:df:4c:6e:45:9c:8d:47:f8:97:
                    80:12:18:4f:cd:04:97:0d:14:7b:a1:1c:bf:a2:63:
                    bf:45:ec:b5:b7:a3:78:ea:88:8a:e0:97:68:22:56:
                    b3:99:63:8e:a2:65:61:7d:13:08:51:83:9b:62:99:
                    a6:17:3f:2f:ce:47:2c:18:b1:5f:d7:a4:e4:b1:fb:
                    9c:c1:1c:3c:e9:84:ef:2d:a8:53:72:90:78:21:38:
                    e3:29:ca:cc:91:e1:45:4f:ff:4e:c1:d6:cd:dd:bf:
                    6e:95:24:b8:7e:22:84:a9:22:cf:13:20:6c:b9:21:
                    5f:b3:b6:ba:48:c3:58:64:e2:9a:c6:ab:c5:92:28:
                    ef:82:05:87:51:a4:77:e4:2b:66:6f:d7:1f:ea:e1:
                    d1:6f:d5:b1:73:97:0d:b1:0b:89:ad:5a:41:40:1c:
                    d2:d9:d4:94:90:9e:f1:16:d7:17:b7:3f:ee:d8:7e:
                    47:bc:48:02:e1:17:d1:7e:70:4c:98:f1:7a:2c:ce:
                    7f:9c:93:2b:af:e6:f3:a6:cc:0e:62:85:c6:b0:0d:
                    dc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:53:0E:F9:5D:49:CC:B2:BB:43:EA:77:14:A1:98:C5:F7:03:54:CF
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37342e302f32342d3234203d3e20323730303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:96:be:97:10:92:f7:ec:15:d2:6a:02:c6:89:02:5a:ad:5f:
         c5:7b:13:87:9a:e5:2a:19:94:94:bd:67:1d:09:4c:f8:2d:84:
         ea:26:3b:68:66:c9:68:c5:45:38:16:97:a9:2e:e1:4a:36:ec:
         7e:d6:2b:8d:c1:e1:5d:25:a3:b5:8c:63:39:f6:5e:c4:2c:71:
         ac:c6:f1:67:3c:e2:c4:52:cc:16:a3:5d:d9:9b:ff:5c:5a:86:
         75:17:0a:cf:5c:0b:2c:3d:49:59:c3:90:18:42:7f:95:99:82:
         67:bc:5b:89:62:a4:e5:3b:57:e0:a8:38:07:ca:70:48:2f:fa:
         4b:86:90:cb:1e:58:da:bf:73:43:bc:13:70:17:e0:27:c2:11:
         87:4a:4e:83:3b:d0:18:1a:73:c5:ff:68:5f:0d:a7:66:ae:3d:
         27:42:22:72:8a:56:28:07:93:f2:f9:af:da:7d:70:67:d8:3e:
         c3:ba:28:09:5c:28:e8:61:e1:cd:26:16:c3:56:61:1f:24:27:
         4d:54:ef:71:63:1a:67:18:ce:84:8e:0f:2d:12:49:8c:b8:1f:
         71:de:ac:cc:ff:7d:0d:9d:b9:7c:75:68:3c:b3:4d:46:0d:4e:
         9e:61:89:e6:e3:67:b3:db:d0:d3:e4:6f:bd:e9:e7:49:f5:70:
         0c:44:4f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:12 2026 by rpki-client