This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e20323732393831.roa
File:                     3137302e3233392e36342e302f32322d3234203d3e20323732393831.roa (raw, json)
Hash identifier:          Q1sqEo3oEsuiG+0OXJNbwby8pqDJZJNb9wydV2oGVIM=
Subject key identifier:   43:F8:E7:76:8C:A8:5D:E3:09:81:7A:17:37:58:30:54:20:62:86:51
Certificate issuer:       /CN=094D2B4D623E37AF19F9481AD2255430380E9CBD
Certificate serial:       15D197E47F84C5CD6CD773F455DBB936F55B8245
Authority key identifier: 09:4D:2B:4D:62:3E:37:AF:19:F9:48:1A:D2:25:54:30:38:0E:9C:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e20323732393831.roa
Signing time:             Tue 06 Jan 2026 19:29:51 +0000
ROA not before:           Tue 06 Jan 2026 19:24:51 +0000
ROA not after:            Tue 05 Jan 2027 19:29:51 +0000
asID:                     272981
IP address blocks:        170.239.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d1:97:e4:7f:84:c5:cd:6c:d7:73:f4:55:db:b9:36:f5:5b:82:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094D2B4D623E37AF19F9481AD2255430380E9CBD
        Validity
            Not Before: Jan  6 19:24:51 2026 GMT
            Not After : Jan  5 19:29:51 2027 GMT
        Subject: CN=43F8E7768CA85DE309817A173758305420628651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:71:d6:a6:ef:64:2a:85:1d:90:2b:af:33:96:
                    0c:ac:4d:89:ab:95:ce:12:31:a0:16:b3:a1:8e:e2:
                    83:f5:a3:b7:31:8a:bb:59:e3:14:ac:b5:f6:3e:eb:
                    86:d0:2f:d3:15:aa:c0:94:d8:d0:5d:84:27:4f:5d:
                    03:9a:e9:dd:0d:f5:3c:32:e5:1b:95:12:f3:77:2b:
                    4d:c6:10:cd:c1:42:19:45:40:3e:67:0e:35:7e:98:
                    b8:13:1c:fa:ca:4d:6d:ef:24:93:d6:ec:71:66:12:
                    b8:d1:1a:5f:f2:b3:ed:e8:19:dd:fd:0d:08:b5:82:
                    2f:c4:0a:52:58:4e:dd:5a:33:23:12:68:3c:f6:8c:
                    4c:38:23:e6:36:a8:c3:f5:d6:0a:93:5f:0b:b4:86:
                    98:f3:5d:f3:46:68:c8:22:bc:03:a2:16:2d:73:23:
                    77:8a:1b:f8:48:91:44:08:c0:51:2f:68:44:99:ae:
                    53:d6:60:e8:c3:49:e5:3b:a9:f4:9f:10:1d:ef:ae:
                    be:2e:71:35:79:77:a5:08:01:3c:f4:a6:28:ef:13:
                    dd:a8:1b:57:ac:6e:5c:6d:08:ae:30:69:c3:60:d4:
                    99:66:47:31:d7:9c:1f:e8:2a:ff:06:2f:14:15:53:
                    aa:53:32:f1:4e:1f:8c:0a:78:8c:32:63:98:57:36:
                    62:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F8:E7:76:8C:A8:5D:E3:09:81:7A:17:37:58:30:54:20:62:86:51
            X509v3 Authority Key Identifier:
                keyid:09:4D:2B:4D:62:3E:37:AF:19:F9:48:1A:D2:25:54:30:38:0E:9C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e20323732393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:8f:06:52:52:f1:3a:41:17:69:64:64:a8:f9:e0:62:75:02:
         43:b6:e0:cf:06:fb:7a:b6:31:7a:c7:f1:76:02:fb:f8:08:92:
         04:23:9b:83:5c:54:ac:a8:6b:11:83:8b:58:6a:d1:6c:c4:14:
         34:90:32:91:e8:30:94:36:fe:61:87:39:5a:ed:9d:cd:c8:f5:
         42:82:52:e6:bb:51:0b:ea:82:4d:e4:ac:5d:5f:3d:c6:37:00:
         f9:57:b5:1f:4d:89:d2:c1:89:f1:51:c4:ca:90:4c:17:60:dc:
         c9:ad:4e:c5:ce:20:e6:08:5b:f1:e8:56:98:9f:a3:15:ca:76:
         e7:99:be:83:40:b5:04:91:8e:0d:f5:b9:b2:c1:09:5d:bc:d6:
         f8:99:6c:d8:ed:a6:73:40:96:14:de:32:7a:02:19:7d:df:f3:
         3e:42:25:59:6f:4a:5d:1f:95:6a:95:fe:a6:e3:5f:46:6d:0a:
         c4:8e:a4:40:cf:08:b8:8e:b6:d5:0e:4b:e4:bd:f8:ee:0a:5a:
         91:d6:13:6c:ac:9a:8e:4c:a5:3d:3d:a0:90:34:15:32:a0:67:
         46:1b:88:c1:1e:d0:dd:d0:2b:57:e0:b7:61:cd:03:67:3c:d1:
         d1:79:ab:77:35:98:0a:7b:3e:22:df:94:e4:67:09:da:46:ac:
         a5:8e:a4:30
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFdGX5H+Exc1s13P0Vdu5NvVbgkUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk0RDJCNEQ2MjNFMzdBRjE5Rjk0ODFBRDIyNTU0MzAz
ODBFOUNCRDAeFw0yNjAxMDYxOTI0NTFaFw0yNzAxMDUxOTI5NTFaMDMxMTAvBgNV
BAMTKDQzRjhFNzc2OENBODVERTMwOTgxN0ExNzM3NTgzMDU0MjA2Mjg2NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgcdam72QqhR2QK68zlgysTYmr
lc4SMaAWs6GO4oP1o7cxirtZ4xSstfY+64bQL9MVqsCU2NBdhCdPXQOa6d0N9Twy
5RuVEvN3K03GEM3BQhlFQD5nDjV+mLgTHPrKTW3vJJPW7HFmErjRGl/ys+3oGd39
DQi1gi/EClJYTt1aMyMSaDz2jEw4I+Y2qMP11gqTXwu0hpjzXfNGaMgivAOiFi1z
I3eKG/hIkUQIwFEvaESZrlPWYOjDSeU7qfSfEB3vrr4ucTV5d6UIATz0pijvE92o
G1esblxtCK4wacNg1JlmRzHXnB/oKv8GLxQVU6pTMvFOH4wKeIwyY5hXNmJtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQ/jndoyoXeMJgXoXN1gwVCBihlEwHwYDVR0j
BBgwFoAUCU0rTWI+N68Z+Uga0iVUMDgOnL0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wREY1QzUzNTM4QjhFNjREQjg5RDkxNTJCOENCQTM1QUE4
NDBCN0FGQTdGNTU0OTNDOTVGQzdFRkUwNTBFMjlELzAvMDk0RDJCNEQ2MjNFMzdB
RjE5Rjk0ODFBRDIyNTU0MzAzODBFOUNCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTREMkI0RDYyM0UzN0FGMTlG
OTQ4MUFEMjI1NTQzMDM4MEU5Q0JELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMERGNUM1MzUzOEI4RTY0REI4OUQ5MTUyQjhDQkEzNUFBODQwQjdBRkE3
RjU1NDkzQzk1RkM3RUZFMDUwRTI5RC8wLzMxMzczMDJlMzIzMzM5MmUzNjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMyMzkzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqu9A
MA0GCSqGSIb3DQEBCwUAA4IBAQCAjwZSUvE6QRdpZGSo+eBidQJDtuDPBvt6tjF6
x/F2Avv4CJIEI5uDXFSsqGsRg4tYatFsxBQ0kDKR6DCUNv5hhzla7Z3NyPVCglLm
u1EL6oJN5KxdXz3GNwD5V7UfTYnSwYnxUcTKkEwXYNzJrU7FziDmCFvx6FaYn6MV
ynbnmb6DQLUEkY4N9bmywQldvNb4mWzY7aZzQJYU3jJ6Ahl93/M+QiVZb0pdH5Vq
lf6m419GbQrEjqRAzwi4jrbVDkvkvfjuClqR1hNsrJqOTKU9PaCQNBUyoGdGG4jB
HtDd0CtX4LdhzQNnPNHReat3NZgKez4i35TkZwnaRqyljqQw
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:07:44 2026 by rpki-client