This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/3230372e3234382e37362e302f32332d3233203d3e20323632313734.roa
File:                     3230372e3234382e37362e302f32332d3233203d3e20323632313734.roa (raw, json)
Hash identifier:          qO2K0ihfvU3+6cVBXu57cFq8j3nPUM7aaXp/BIkhWCU=
Subject key identifier:   61:DB:43:80:54:9C:41:86:2D:79:FD:16:6F:80:31:B2:C1:9A:C7:78
Certificate issuer:       /CN=5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9
Certificate serial:       4BFB6796B6B9B1D65017136EC8E777271D2F3564
Authority key identifier: 5F:5D:4B:AE:F0:DE:76:E2:CB:4D:41:B4:5A:0B:4B:53:02:BF:E1:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/3230372e3234382e37362e302f32332d3233203d3e20323632313734.roa
Signing time:             Tue 06 Jan 2026 19:43:35 +0000
ROA not before:           Tue 06 Jan 2026 19:38:35 +0000
ROA not after:            Tue 05 Jan 2027 19:43:35 +0000
asID:                     262174
IP address blocks:        207.248.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fb:67:96:b6:b9:b1:d6:50:17:13:6e:c8:e7:77:27:1d:2f:35:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9
        Validity
            Not Before: Jan  6 19:38:35 2026 GMT
            Not After : Jan  5 19:43:35 2027 GMT
        Subject: CN=61DB4380549C41862D79FD166F8031B2C19AC778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:f6:98:45:31:3f:e8:a1:8f:ab:8f:30:6f:
                    a5:37:4a:f8:ef:45:4e:c7:5f:ad:9e:17:25:8a:40:
                    da:ae:73:9e:a4:06:05:42:11:80:92:b0:57:1d:bb:
                    c7:6c:b8:7a:56:b9:f6:24:58:2e:70:5f:32:66:b2:
                    ee:e7:3e:e6:f1:f8:b9:35:d9:49:90:b8:b3:24:3b:
                    b6:fc:71:02:76:a1:61:a6:97:16:01:7b:2a:b9:94:
                    29:58:71:b9:9d:90:83:75:4e:c7:18:a7:7c:59:dd:
                    5d:00:19:ce:f6:45:1d:d8:aa:f2:5e:b7:a8:75:83:
                    31:9a:0a:98:95:d7:43:bc:5a:b2:c9:9d:b0:b1:2e:
                    f0:d4:2a:36:8d:ef:d9:44:7d:c1:23:3f:e0:eb:ef:
                    33:7b:41:96:a0:db:47:e4:73:75:31:44:1d:96:70:
                    a8:1b:ce:dc:fc:bf:0f:bd:03:21:99:3c:24:d7:d5:
                    46:62:ae:32:e5:87:d6:2f:cc:e6:5e:2d:b8:be:54:
                    27:6b:33:32:ac:4f:cf:8d:a9:a5:bc:37:fb:4f:f0:
                    da:c2:39:83:ce:12:52:c7:49:ba:71:76:4c:dd:d8:
                    ff:ef:64:31:53:00:aa:1b:67:6b:52:e2:e1:36:12:
                    17:77:0a:fe:85:5f:cd:24:1b:50:67:40:63:df:e4:
                    62:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DB:43:80:54:9C:41:86:2D:79:FD:16:6F:80:31:B2:C1:9A:C7:78
            X509v3 Authority Key Identifier:
                keyid:5F:5D:4B:AE:F0:DE:76:E2:CB:4D:41:B4:5A:0B:4B:53:02:BF:E1:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/3230372e3234382e37362e302f32332d3233203d3e20323632313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:c9:25:6a:24:5d:d2:da:13:cb:66:b6:0f:21:35:d3:cb:29:
         05:19:69:c4:cd:f9:01:f4:e0:00:65:22:16:9d:73:53:72:05:
         3d:74:ee:b4:18:c8:6c:1e:c3:11:1d:37:dd:64:c0:3e:65:61:
         2e:fa:96:98:67:0e:dd:33:6d:c3:2b:a4:86:db:18:b9:63:d6:
         75:be:c6:4b:b0:71:e6:5d:a7:2b:12:af:66:05:43:40:7e:5f:
         bf:15:19:4e:1a:96:4b:26:de:e6:ac:13:fb:23:32:05:eb:bd:
         dc:85:16:91:9b:bb:28:43:57:69:e2:d2:e7:d6:19:30:92:f3:
         40:9a:65:df:43:99:b0:13:3b:24:53:4b:4b:64:a8:7a:40:aa:
         1e:d2:d5:ae:5a:b0:dd:69:a0:c2:d9:16:f1:c5:01:83:ba:0f:
         8f:ee:62:95:9d:cf:4a:e4:59:8f:21:37:7f:13:3e:5c:ec:9c:
         e8:bb:35:75:f7:6f:51:4a:cd:c8:aa:e9:be:fd:43:b5:52:cd:
         0b:4a:28:0d:e3:24:9c:3c:81:92:7c:72:36:59:f7:ce:55:fb:
         fa:e5:b5:47:c9:16:fe:09:08:58:d4:f9:db:ae:88:8a:2a:6b:
         07:87:ac:f0:b2:05:e1:d6:34:a6:2a:dd:5f:a6:83:20:f8:97:
         96:b3:17:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:08:14 2026 by rpki-client