This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3136312e302e3232342e302f31392d3234203d3e203237363635.roa
File:                     3136312e302e3232342e302f31392d3234203d3e203237363635.roa (raw, json)
Hash identifier:          utbgDcY1Gz5/QMqsifmF85IdtZLL4gOBUM6GlXrUTGc=
Subject key identifier:   05:41:28:B5:49:42:A2:B6:00:09:6D:F0:66:72:1D:3F:53:D8:AF:E9
Certificate issuer:       /CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
Certificate serial:       18B7820E71B211065A4F0E15954FF762B908ADC2
Authority key identifier: 8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3136312e302e3232342e302f31392d3234203d3e203237363635.roa
Signing time:             Tue 06 Jan 2026 19:30:52 +0000
ROA not before:           Tue 06 Jan 2026 19:25:52 +0000
ROA not after:            Tue 05 Jan 2027 19:30:52 +0000
asID:                     27665
IP address blocks:        161.0.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:50:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b7:82:0e:71:b2:11:06:5a:4f:0e:15:95:4f:f7:62:b9:08:ad:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
        Validity
            Not Before: Jan  6 19:25:52 2026 GMT
            Not After : Jan  5 19:30:52 2027 GMT
        Subject: CN=054128B54942A2B600096DF066721D3F53D8AFE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ec:53:e4:1f:42:fc:28:b6:8d:41:8f:e6:fc:
                    05:f1:2f:fa:54:75:e6:41:d2:ab:32:04:21:db:98:
                    25:d6:14:0a:88:6b:9b:66:fb:1e:d9:89:1c:94:d8:
                    74:0d:09:e5:08:66:c1:fd:62:19:8e:de:b8:f9:71:
                    64:44:1b:19:df:65:ab:dc:ef:83:ce:71:0f:04:63:
                    a5:27:41:0e:68:0e:c4:ef:29:dd:ee:19:f4:0b:0c:
                    39:28:c7:44:d0:9d:9d:b5:16:4a:25:62:53:9c:c1:
                    f8:c8:fa:6a:d6:8c:13:2f:c6:1e:2d:56:7f:a4:5c:
                    6f:ad:49:3b:1e:07:5d:50:28:f5:41:c1:5f:2a:da:
                    c3:06:54:5c:5f:6e:c7:6b:50:72:7a:e2:50:e9:0f:
                    2a:81:83:53:57:3d:9d:18:38:76:d3:29:05:67:ac:
                    e6:94:36:8f:ba:6e:ba:40:1a:12:a0:ac:2a:18:fe:
                    ab:81:de:e0:2c:84:52:a6:aa:1c:61:85:02:07:48:
                    31:2f:66:2c:50:f7:42:90:69:1a:e1:ad:df:44:e4:
                    64:09:8c:50:53:98:b8:76:49:53:e1:69:a6:2c:e4:
                    c7:06:57:1e:6c:6a:01:fa:cb:eb:ab:7b:2e:69:81:
                    01:5d:b3:a7:71:e4:b8:10:18:f9:26:05:ef:87:cc:
                    49:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:41:28:B5:49:42:A2:B6:00:09:6D:F0:66:72:1D:3F:53:D8:AF:E9
            X509v3 Authority Key Identifier:
                keyid:8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3136312e302e3232342e302f31392d3234203d3e203237363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         13:f6:14:02:90:a2:e5:38:66:31:ef:df:b8:37:94:95:6b:3e:
         48:52:02:15:04:4d:74:56:46:9c:46:3d:5d:a8:17:28:45:27:
         cd:9b:cc:a1:ba:32:c7:af:9e:ef:3e:be:03:78:6d:76:99:a5:
         a0:b4:e2:a3:ca:c6:e0:0b:a6:25:cb:af:2d:f1:64:90:17:7d:
         7f:27:4d:ea:52:24:42:c7:e9:6d:a3:2e:13:29:fd:5c:85:19:
         c3:a4:b9:b7:9c:1a:13:73:fc:4c:90:f3:c5:18:96:36:fd:0c:
         80:a0:71:f1:ea:59:39:f3:47:c9:d3:39:12:ee:22:05:cc:2c:
         e1:a8:57:40:c1:e9:dd:3d:f1:57:ad:f1:b1:a0:5e:16:f4:f8:
         4c:a9:7d:e5:b3:6e:22:3e:07:e4:8c:b4:9b:da:af:33:33:33:
         d9:59:f5:c1:6f:39:dc:30:52:b9:36:4f:23:80:10:c3:aa:fd:
         8e:f6:34:df:2b:bd:41:eb:e2:53:0b:12:37:12:b9:71:2e:d2:
         30:89:2a:f8:bf:e0:ca:3d:55:b0:b1:10:8c:e9:ed:5d:1b:19:
         a8:e2:ad:ed:df:8d:af:63:3e:10:c5:b6:e5:af:df:5e:9c:7a:
         95:a4:f4:45:2a:b8:9a:98:35:a4:f7:f2:c1:d3:49:b4:45:b1:
         be:3f:b1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:13:05 2026 by rpki-client