This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/3136382e3232372e3235322e302f32322d3234203d3e20323633373737.roa
File:                     3136382e3232372e3235322e302f32322d3234203d3e20323633373737.roa (raw, json)
Hash identifier:          2E6uCZBa6AV00GT39hhoA6AHvGWorb1DiSj2iXpMksQ=
Subject key identifier:   D0:6E:09:84:CA:7D:D0:4C:44:90:1E:CB:CE:E4:C5:A9:80:2E:23:C4
Certificate issuer:       /CN=765D05128298873F41D1D65632AB25BDBE113398
Certificate serial:       0907DA26D7271EA6CB924795A46AA1F8486C78A1
Authority key identifier: 76:5D:05:12:82:98:87:3F:41:D1:D6:56:32:AB:25:BD:BE:11:33:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/3136382e3232372e3235322e302f32322d3234203d3e20323633373737.roa
Signing time:             Tue 06 Jan 2026 19:09:06 +0000
ROA not before:           Tue 06 Jan 2026 19:04:06 +0000
ROA not after:            Tue 05 Jan 2027 19:09:06 +0000
asID:                     263777
IP address blocks:        168.227.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:07:da:26:d7:27:1e:a6:cb:92:47:95:a4:6a:a1:f8:48:6c:78:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765D05128298873F41D1D65632AB25BDBE113398
        Validity
            Not Before: Jan  6 19:04:06 2026 GMT
            Not After : Jan  5 19:09:06 2027 GMT
        Subject: CN=D06E0984CA7DD04C44901ECBCEE4C5A9802E23C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:67:b5:f9:bc:b8:2b:29:27:c1:54:fe:56:
                    71:c4:9d:74:72:4f:b2:94:74:6c:4e:d6:23:74:a1:
                    6a:b6:e1:50:00:5f:7a:08:ad:fa:d2:7d:8e:71:59:
                    51:9a:43:75:7d:f3:86:67:37:f4:03:fe:f7:66:01:
                    6f:0e:69:b3:33:ca:27:47:2d:9a:57:47:ab:93:9b:
                    6e:c9:36:de:49:91:b6:18:b3:b6:e2:13:3c:0f:b5:
                    2d:96:ba:cf:9f:15:0e:c3:66:0c:dd:30:58:ba:64:
                    31:a6:5b:2a:b5:4b:9b:db:96:f6:cc:15:b4:1c:70:
                    94:4b:fa:ff:ec:df:e1:ae:ca:e7:c7:49:8e:04:6b:
                    6e:85:6e:47:45:76:44:5f:ff:34:6a:86:7a:5b:e4:
                    55:a1:b3:aa:28:f4:cb:5b:79:ab:27:52:f2:5d:78:
                    52:79:68:e7:66:04:06:83:16:42:d9:34:1c:80:ee:
                    b9:75:49:a0:a2:4e:d5:b6:80:bc:f6:36:ad:a7:c3:
                    47:1a:24:27:20:ef:34:e8:44:9d:5b:09:5d:f0:e0:
                    d8:cf:a8:42:5e:9f:e7:a9:a5:7c:7a:c2:33:0d:71:
                    b5:64:ab:f0:0f:70:f6:bd:e9:78:cf:72:b7:bb:fe:
                    04:4e:b6:87:6d:73:61:6a:d7:8a:42:f9:35:a3:d7:
                    44:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6E:09:84:CA:7D:D0:4C:44:90:1E:CB:CE:E4:C5:A9:80:2E:23:C4
            X509v3 Authority Key Identifier:
                keyid:76:5D:05:12:82:98:87:3F:41:D1:D6:56:32:AB:25:BD:BE:11:33:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/3136382e3232372e3235322e302f32322d3234203d3e20323633373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:a5:d3:43:f2:c0:30:47:80:64:cb:f7:b8:89:2f:e6:36:ce:
         c9:d4:14:7a:9c:ec:37:6c:48:37:1f:98:8a:29:df:0a:72:90:
         bc:0b:0d:06:8a:11:7f:ac:4e:54:05:2a:fd:dc:b0:e9:30:df:
         37:59:64:47:77:07:44:74:95:57:8d:39:88:d9:a2:d7:fd:67:
         18:97:a7:d3:6f:0f:81:50:43:8c:ae:74:2f:83:3f:ac:dd:1e:
         e5:8d:28:95:10:38:26:e2:53:7b:23:40:75:94:f4:25:74:d9:
         3a:e0:3d:ed:09:af:4f:0f:2d:1c:e9:ec:bc:6b:37:b9:ce:28:
         74:6f:7f:a7:1b:ca:e2:c1:f8:fa:a6:cc:7d:bc:9f:50:d5:ba:
         37:d9:b9:20:43:c6:2f:07:23:2c:07:0e:79:bc:3f:42:c9:dd:
         2b:f2:09:2a:33:7c:a9:d1:dd:29:a1:85:bd:26:4b:07:6a:40:
         1b:73:88:9f:a9:14:13:51:bb:27:2e:3e:5a:71:fb:70:fe:d0:
         56:1a:15:19:4d:42:92:fa:62:fa:8c:af:c4:51:7c:dd:cf:b7:
         ba:a6:89:f5:a6:c1:f7:cc:ad:69:5a:d8:9b:78:0f:47:e7:22:
         24:52:2c:82:7d:4f:64:e4:cf:71:ba:e6:ef:69:59:24:f0:aa:
         9d:86:88:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:42 2026 by rpki-client