This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e382e302f32322d3232203d3e20323635373631.roa
File:                     3136342e3136332e382e302f32322d3232203d3e20323635373631.roa (raw, json)
Hash identifier:          KolwZIprRbFe3abjexb95L4ZaWlhMaxB4+y+umnOLyY=
Subject key identifier:   12:E3:09:73:24:ED:B8:9C:A8:24:25:AF:D4:A4:C8:4D:C6:D5:04:EB
Certificate issuer:       /CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
Certificate serial:       702482592EC0873EF7960AA4094246E2414E5498
Authority key identifier: 78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e382e302f32322d3232203d3e20323635373631.roa
Signing time:             Tue 06 Jan 2026 20:50:42 +0000
ROA not before:           Tue 06 Jan 2026 20:45:42 +0000
ROA not after:            Tue 05 Jan 2027 20:50:42 +0000
asID:                     265761
IP address blocks:        164.163.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:24:82:59:2e:c0:87:3e:f7:96:0a:a4:09:42:46:e2:41:4e:54:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
        Validity
            Not Before: Jan  6 20:45:42 2026 GMT
            Not After : Jan  5 20:50:42 2027 GMT
        Subject: CN=12E3097324EDB89CA82425AFD4A4C84DC6D504EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f5:73:43:b3:41:b3:6a:9f:a8:91:54:13:a5:
                    75:a2:c2:2b:e6:3b:30:56:0f:55:72:0b:0d:dc:bc:
                    38:1e:0b:5e:4b:63:2e:4c:2a:1d:b2:50:87:9d:17:
                    bc:86:50:ae:ac:95:aa:4e:fa:15:40:2b:88:7a:0a:
                    1a:a2:24:e5:91:d0:0c:e8:0b:64:4d:44:38:97:36:
                    e2:8d:e6:56:11:ac:47:00:db:f6:51:fe:80:af:06:
                    d3:6b:a0:ee:d3:4d:29:1d:28:15:2c:27:67:a0:a9:
                    b5:2f:ce:01:e7:24:53:c2:39:c6:dc:3b:d1:fa:26:
                    ee:75:e2:5e:49:c9:a7:e8:4a:3d:18:70:97:8b:03:
                    c0:35:57:b4:9b:46:ca:24:84:b4:9a:48:37:65:f7:
                    fb:ae:0f:2e:3e:28:83:f0:6f:69:da:e9:18:d3:70:
                    18:2b:f1:62:f3:0f:c4:91:0c:75:80:b6:29:ab:1f:
                    ba:ec:7c:bb:0e:08:fe:4f:a6:9c:8b:34:dd:20:c2:
                    91:23:a5:03:c5:f7:71:d6:c7:6a:42:92:67:bc:42:
                    4e:a8:ec:1c:c1:90:f8:84:4c:4c:d9:e7:e6:7d:bd:
                    50:e7:a3:2b:45:7c:69:fc:7f:23:cc:74:62:78:74:
                    28:b5:85:8b:3e:ca:07:94:b1:53:c2:65:a7:ae:f4:
                    10:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E3:09:73:24:ED:B8:9C:A8:24:25:AF:D4:A4:C8:4D:C6:D5:04:EB
            X509v3 Authority Key Identifier:
                keyid:78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e382e302f32322d3232203d3e20323635373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:16:42:85:b7:73:2b:89:6a:e3:a9:dc:7f:78:2d:c3:67:88:
         29:79:cf:95:4b:77:75:16:ab:70:a9:ee:7f:9e:e6:a4:af:93:
         0c:76:6a:2f:0d:92:b1:b2:b2:35:6a:8a:72:a6:bb:2d:73:f4:
         b9:96:b8:c1:b9:ed:a1:17:6c:66:8f:e9:95:f3:1b:fe:85:7c:
         e8:87:b4:c4:70:01:33:f6:f7:d7:5d:20:01:f3:19:a4:9e:fb:
         92:dc:68:b0:5a:38:91:4a:d7:10:fc:7f:52:6a:de:b7:10:3f:
         81:86:b5:0d:8a:49:a4:1e:99:5d:87:5b:20:1c:d7:16:97:21:
         f4:2c:97:e6:a3:c0:5c:e4:b1:2c:15:69:cd:74:b5:c8:cc:b1:
         f3:a4:5c:7e:6b:e3:ef:f2:c6:24:0f:62:27:b0:b8:d2:f5:45:
         b7:a1:32:12:d0:82:ce:f1:4d:ab:52:87:8e:d4:37:8c:4f:9a:
         7a:fa:a6:62:c0:78:5d:44:27:a9:21:ef:d7:9b:42:14:46:1b:
         27:25:e1:84:68:a5:24:23:55:49:59:6b:23:d0:f5:98:2c:4e:
         b9:1d:e5:a7:44:21:ca:aa:fa:2b:ab:82:29:17:c7:35:04:26:
         90:1c:a3:09:8c:02:be:a4:49:29:f6:bb:e6:9b:23:2d:4e:76:
         de:5a:fe:e9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUcCSCWS7Ahz73lgqkCUJG4kFOVJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhBQkMxREQ2ODY0QzNDQzlGRTE4MTkyNzU2MEM3RjEw
QjgyQjQ0RDAeFw0yNjAxMDYyMDQ1NDJaFw0yNzAxMDUyMDUwNDJaMDMxMTAvBgNV
BAMTKDEyRTMwOTczMjRFREI4OUNBODI0MjVBRkQ0QTRDODREQzZENTA0RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT9XNDs0Gzap+okVQTpXWiwivm
OzBWD1VyCw3cvDgeC15LYy5MKh2yUIedF7yGUK6slapO+hVAK4h6ChqiJOWR0Azo
C2RNRDiXNuKN5lYRrEcA2/ZR/oCvBtNroO7TTSkdKBUsJ2egqbUvzgHnJFPCOcbc
O9H6Ju514l5JyafoSj0YcJeLA8A1V7SbRsokhLSaSDdl9/uuDy4+KIPwb2na6RjT
cBgr8WLzD8SRDHWAtimrH7rsfLsOCP5PppyLNN0gwpEjpQPF93HWx2pCkme8Qk6o
7BzBkPiETEzZ5+Z9vVDnoytFfGn8fyPMdGJ4dCi1hYs+ygeUsVPCZaeu9BDPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUEuMJcyTtuJyoJCWv1KTITcbVBOswHwYDVR0j
BBgwFoAUeKvB3Whkw8yf4YGSdWDH8QuCtE0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRTNFQkFERDg2OTkwQUFEQkY3MzRCMjA5NDREREMyOEUz
QjQ1NzRCRTRDNjAyRUQwQkQ2MDM2MjM3RDQ3M0FCLzAvNzhBQkMxREQ2ODY0QzND
QzlGRTE4MTkyNzU2MEM3RjEwQjgyQjQ0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OEFCQzFERDY4NjRDM0NDOUZF
MTgxOTI3NTYwQzdGMTBCODJCNDRELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUUzRUJBREQ4Njk5MEFBREJGNzM0QjIwOTQ0RERDMjhFM0I0NTc0QkU0
QzYwMkVEMEJENjAzNjIzN0Q0NzNBQi8wLzMxMzYzNDJlMzEzNjMzMmUzODJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNTM3MzYzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqSjCDAN
BgkqhkiG9w0BAQsFAAOCAQEAIRZChbdzK4lq46ncf3gtw2eIKXnPlUt3dRarcKnu
f57mpK+TDHZqLw2SsbKyNWqKcqa7LXP0uZa4wbntoRdsZo/plfMb/oV86Ie0xHAB
M/b3110gAfMZpJ77ktxosFo4kUrXEPx/UmretxA/gYa1DYpJpB6ZXYdbIBzXFpch
9CyX5qPAXOSxLBVpzXS1yMyx86Rcfmvj7/LGJA9iJ7C40vVFt6EyEtCCzvFNq1KH
jtQ3jE+aevqmYsB4XUQnqSHv15tCFEYbJyXhhGilJCNVSVlrI9D1mCxOuR3lp0Qh
yqr6K6uCKRfHNQQmkByjCYwCvqRJKfa75psjLU523lr+6Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:19 2026 by rpki-client