This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/3137302e38332e3130382e302f32322d3234203d3e20323731393730.roa
File:                     3137302e38332e3130382e302f32322d3234203d3e20323731393730.roa (raw, json)
Hash identifier:          buSPFG2S/ibtod9e2WXbvZ1ckhOhtmNIs5ZaLTaDXvo=
Subject key identifier:   7A:5B:67:02:04:B1:0A:69:69:72:52:A4:43:A9:E8:09:E9:71:3C:05
Certificate issuer:       /CN=B9E6C43D762E93FD87830A253F11922C7BC63907
Certificate serial:       0818CF6C06AE9DF8C54BA796E080804BA1DFF47C
Authority key identifier: B9:E6:C4:3D:76:2E:93:FD:87:83:0A:25:3F:11:92:2C:7B:C6:39:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/3137302e38332e3130382e302f32322d3234203d3e20323731393730.roa
Signing time:             Tue 06 Jan 2026 20:57:09 +0000
ROA not before:           Tue 06 Jan 2026 20:52:09 +0000
ROA not after:            Tue 05 Jan 2027 20:57:09 +0000
asID:                     271970
IP address blocks:        170.83.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:18:cf:6c:06:ae:9d:f8:c5:4b:a7:96:e0:80:80:4b:a1:df:f4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E6C43D762E93FD87830A253F11922C7BC63907
        Validity
            Not Before: Jan  6 20:52:09 2026 GMT
            Not After : Jan  5 20:57:09 2027 GMT
        Subject: CN=7A5B670204B10A69697252A443A9E809E9713C05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e2:67:90:96:7f:3e:36:1f:d5:c2:23:5b:cf:
                    b7:e1:62:24:23:0c:c0:cc:03:a3:e8:08:cb:93:3d:
                    d8:e7:a7:88:81:bb:50:a7:22:a1:26:58:f5:82:23:
                    2c:81:3f:ed:48:01:77:1a:6b:a4:97:e8:6a:c8:10:
                    97:23:e6:00:e5:88:b8:ce:70:89:a7:6c:3f:4d:c5:
                    4f:48:da:85:39:21:2b:1d:66:ec:ba:d9:e7:24:79:
                    0e:36:b3:b1:0c:7e:06:db:fd:6f:00:06:85:e7:b3:
                    8f:7f:f5:c9:be:0c:39:06:72:b0:b1:20:59:05:be:
                    bd:bf:dd:3e:f5:d5:7c:51:c1:65:a4:51:33:af:1c:
                    c6:31:25:77:50:4e:c5:e2:32:80:e6:10:5b:c1:0b:
                    4f:ef:08:62:03:64:13:2d:af:62:51:47:0d:03:ad:
                    7c:58:27:c1:7d:d9:f9:af:62:19:1b:02:8b:03:9b:
                    95:ee:4c:fd:10:21:28:1a:e3:98:a9:75:98:c8:8a:
                    c3:0d:90:b7:6a:72:44:22:da:c5:6c:89:29:2f:15:
                    bb:22:dc:c1:12:fe:8e:d8:76:f9:db:ec:bc:ff:23:
                    fd:4c:9c:4c:1c:06:d2:ae:c8:31:68:c3:d1:ee:7b:
                    56:04:39:33:a1:7b:27:c2:5b:41:9d:1a:cc:f4:c1:
                    ea:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5B:67:02:04:B1:0A:69:69:72:52:A4:43:A9:E8:09:E9:71:3C:05
            X509v3 Authority Key Identifier:
                keyid:B9:E6:C4:3D:76:2E:93:FD:87:83:0A:25:3F:11:92:2C:7B:C6:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/3137302e38332e3130382e302f32322d3234203d3e20323731393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:98:93:5a:c2:fc:6b:15:ad:70:ae:50:c0:28:e0:af:5e:01:
         25:00:86:2f:00:8b:88:fd:0a:4a:b9:78:e6:b9:fd:e9:47:75:
         e9:09:f7:99:a2:97:d9:a9:82:fc:e9:fc:28:2c:ef:dc:d1:ff:
         31:87:f9:cd:23:94:db:54:03:c9:f4:5b:00:fb:43:2d:b7:10:
         85:a6:c6:a4:d7:d4:d1:37:70:57:3c:13:11:ed:49:f8:eb:19:
         84:c9:22:a2:3c:88:7d:9f:fc:4c:0d:d1:6e:94:f0:5f:92:36:
         84:45:ed:3e:87:aa:4b:9c:c2:1b:15:15:52:d7:0d:df:a2:11:
         a5:a4:0b:87:ed:9b:43:d5:23:f7:65:33:54:4c:8f:fc:f7:d1:
         3b:ba:6f:31:e8:27:63:05:33:72:b1:6b:40:f3:2c:1c:86:34:
         7a:6e:12:65:22:a1:5e:96:e2:6d:ee:e9:b5:0c:c3:62:b7:47:
         8c:1d:d6:e4:c8:c5:38:ea:fb:b5:65:a6:f0:13:21:18:6c:01:
         ed:9a:34:2e:3d:d1:e5:26:1c:c1:01:89:41:74:24:21:5b:3b:
         e9:cb:0c:ec:71:f6:af:8a:69:cf:35:a2:c9:da:d0:60:b8:54:
         a9:ba:18:bb:eb:ee:51:f2:d9:8e:d2:95:48:80:05:8a:ed:2e:
         29:19:71:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:43 2026 by rpki-client