This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32322d3234203d3e203237393437.roa
File:                     3136382e3139372e3138382e302f32322d3234203d3e203237393437.roa (raw, json)
Hash identifier:          U2RTkK4V9zGWgh71jv5hTFmS6l/PHgmA5Q5sZS9/uUU=
Subject key identifier:   E4:37:8D:F0:32:3E:32:FB:13:C1:FE:68:1F:B6:A5:CE:28:16:E0:8B
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       77778FA1AD09EE99D96AB00607B2CA98881369DE
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32322d3234203d3e203237393437.roa
Signing time:             Tue 06 Jan 2026 19:08:42 +0000
ROA not before:           Tue 06 Jan 2026 19:03:42 +0000
ROA not after:            Tue 05 Jan 2027 19:08:42 +0000
asID:                     27947
IP address blocks:        168.197.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:77:8f:a1:ad:09:ee:99:d9:6a:b0:06:07:b2:ca:98:88:13:69:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Jan  6 19:03:42 2026 GMT
            Not After : Jan  5 19:08:42 2027 GMT
        Subject: CN=E4378DF0323E32FB13C1FE681FB6A5CE2816E08B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:23:33:a2:63:15:42:83:01:3c:da:af:61:5a:
                    96:d3:d1:3f:b7:c2:e9:a5:3e:98:53:78:5b:54:b3:
                    e6:63:60:57:2f:01:06:53:fc:5b:fd:55:0b:33:b1:
                    56:d7:63:e9:79:30:e1:d2:42:01:9b:d0:cf:ef:de:
                    b2:97:27:8d:89:03:41:da:7f:26:6e:68:75:fc:92:
                    02:28:ca:db:47:5c:9c:a7:16:6d:82:1a:c5:73:35:
                    b9:4e:2f:21:c4:df:73:b4:0e:36:f5:d8:93:33:21:
                    a2:7c:48:74:be:a1:b1:70:14:3e:27:d5:f0:a7:c3:
                    6a:04:06:34:f2:f2:e3:c4:dd:71:57:37:80:a6:4a:
                    c1:33:01:06:1e:4d:d5:0f:79:58:8c:10:70:ae:c6:
                    21:2c:78:c1:65:25:46:32:48:e5:96:d8:35:9e:0e:
                    8e:88:2f:3a:7f:ac:cf:20:5e:41:7d:36:3e:0e:77:
                    f9:8f:37:2a:2b:5c:3c:35:77:47:db:49:51:b4:b9:
                    cd:51:02:e5:ec:19:68:1d:4b:92:5b:4c:f5:50:b5:
                    3a:be:78:34:df:c9:e3:1c:a0:68:32:5c:64:16:d4:
                    f2:2e:db:91:83:d8:13:45:30:73:ee:6a:f2:fd:7f:
                    5f:bb:8c:4a:8e:99:c2:39:bc:84:a4:50:ea:03:0e:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:37:8D:F0:32:3E:32:FB:13:C1:FE:68:1F:B6:A5:CE:28:16:E0:8B
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32322d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:47:0e:af:dd:65:c9:4b:05:2d:41:0b:43:9b:f0:e4:f4:7b:
         ab:84:d7:61:29:a6:bf:8f:f7:48:50:61:06:a5:8c:62:f6:b5:
         4c:1c:53:29:e1:e3:42:a5:c3:99:e1:f2:2b:42:79:6f:dc:a8:
         19:b5:4b:ae:c3:35:e1:4a:7c:7f:42:5f:33:77:e2:c6:ce:60:
         49:05:e0:3a:31:0d:9a:7e:34:66:dc:e1:4e:ae:50:57:59:1c:
         13:15:80:eb:f6:27:1d:43:7b:5e:1d:b2:c8:d1:e6:cc:ad:dc:
         f8:2a:9f:3e:11:d3:a8:1c:be:f4:1b:9c:22:50:92:70:5c:e5:
         3f:e5:ce:a1:35:55:47:74:f3:47:87:70:87:4f:be:02:10:ab:
         91:c4:97:4a:da:9e:8f:ac:9f:bb:b8:f0:89:30:ce:b7:fe:c0:
         6c:bf:95:cb:6a:db:7f:53:dc:2c:94:e6:98:58:91:e8:8e:c1:
         93:fc:53:2f:85:11:af:02:32:b7:58:72:6c:3e:84:9e:56:e6:
         48:06:75:ff:42:1c:c8:60:8b:58:00:09:3a:24:c1:cd:79:60:
         58:57:07:d2:93:64:3e:40:e6:45:9e:d3:b6:d7:0f:24:c2:e9:
         02:39:6e:6e:ab:45:98:e9:9c:6c:d0:b8:a9:f8:d2:6c:fd:21:
         c8:d1:2b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:54:57 2026 by rpki-client