This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/3137302e3233382e3234342e302f32322d3234203d3e203238303233.roa
File:                     3137302e3233382e3234342e302f32322d3234203d3e203238303233.roa (raw, json)
Hash identifier:          22NDWG70pofExW4AiS2PB8NBGqY4R82IKVfpowQiWog=
Subject key identifier:   85:FD:9E:C4:92:C7:BB:4B:2F:A4:64:98:71:1C:A7:BF:1B:B6:D5:DC
Certificate issuer:       /CN=8495817D6FBA8603C95099E0CF88C4791923C301
Certificate serial:       6CDD6A91F12E0A45BAEC81DAE114E091FEA0F931
Authority key identifier: 84:95:81:7D:6F:BA:86:03:C9:50:99:E0:CF:88:C4:79:19:23:C3:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8495817D6FBA8603C95099E0CF88C4791923C301.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/3137302e3233382e3234342e302f32322d3234203d3e203238303233.roa
Signing time:             Tue 06 Jan 2026 19:19:26 +0000
ROA not before:           Tue 06 Jan 2026 19:14:26 +0000
ROA not after:            Tue 05 Jan 2027 19:19:26 +0000
asID:                     28023
IP address blocks:        170.238.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/8495817D6FBA8603C95099E0CF88C4791923C301.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/8495817D6FBA8603C95099E0CF88C4791923C301.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8495817D6FBA8603C95099E0CF88C4791923C301.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:dd:6a:91:f1:2e:0a:45:ba:ec:81:da:e1:14:e0:91:fe:a0:f9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8495817D6FBA8603C95099E0CF88C4791923C301
        Validity
            Not Before: Jan  6 19:14:26 2026 GMT
            Not After : Jan  5 19:19:26 2027 GMT
        Subject: CN=85FD9EC492C7BB4B2FA46498711CA7BF1BB6D5DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d5:dc:ea:2b:cd:5c:54:d1:80:63:82:d1:e5:
                    d9:cd:c8:d6:a1:95:e9:c5:9e:a2:7c:b7:fd:b8:63:
                    5d:a0:df:8a:1b:41:70:36:77:ba:07:b1:40:59:55:
                    f7:a8:27:d9:a7:dc:05:d2:53:43:1e:b1:79:84:19:
                    e4:33:a8:00:12:79:4d:81:ab:ef:75:45:60:d7:77:
                    e3:65:e8:1e:55:ce:3d:e7:05:3b:1a:13:01:98:3f:
                    d7:23:c5:2c:c2:7c:7d:0d:99:b9:0a:aa:a2:94:93:
                    98:42:7a:50:6f:0d:ea:85:9e:c4:bc:8f:d2:7a:43:
                    9e:64:77:3f:fb:85:fa:22:ca:3b:ff:b4:0f:7c:d4:
                    02:44:ae:91:da:ba:9d:3b:98:e3:28:69:96:59:bf:
                    de:36:f4:2c:75:eb:cf:66:ee:ac:c3:dc:6c:7b:74:
                    1f:ed:cd:ef:99:95:3c:27:87:30:a6:e3:e1:3c:cc:
                    50:c8:10:19:3e:f0:3e:ba:0f:eb:46:f7:59:c9:33:
                    0f:a0:f8:35:19:dc:d0:fb:b5:ce:f7:fe:6e:5e:b0:
                    ce:09:c6:4e:17:76:92:30:7b:55:34:a5:1e:33:a1:
                    57:d7:79:04:09:4e:38:e9:91:ab:b1:97:d9:8e:06:
                    d1:6a:9d:6e:1e:b7:8f:df:14:50:8c:c0:df:ee:cb:
                    6c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FD:9E:C4:92:C7:BB:4B:2F:A4:64:98:71:1C:A7:BF:1B:B6:D5:DC
            X509v3 Authority Key Identifier:
                keyid:84:95:81:7D:6F:BA:86:03:C9:50:99:E0:CF:88:C4:79:19:23:C3:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/8495817D6FBA8603C95099E0CF88C4791923C301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8495817D6FBA8603C95099E0CF88C4791923C301.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/3137302e3233382e3234342e302f32322d3234203d3e203238303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:7b:55:67:a4:2f:aa:77:27:a0:e9:83:f0:66:a3:dc:4a:d6:
         be:6a:45:ed:55:9e:a2:67:11:09:ab:a6:a8:ea:26:a7:a2:96:
         2f:f2:9f:c9:ce:9b:52:27:b1:74:a5:70:ba:2f:a8:ef:b6:44:
         86:44:93:1e:29:49:7f:62:4c:bb:a3:f9:54:d6:b4:ca:74:0c:
         3c:fb:c1:08:34:a8:4f:86:be:22:04:a9:0b:4c:1f:0d:1c:43:
         65:7b:8a:bd:e4:4d:a1:34:92:90:53:0f:f8:d1:3e:a6:e5:1e:
         5a:ef:c9:bf:07:e4:30:37:b5:03:98:39:89:1d:f5:c5:81:29:
         5e:4d:f7:87:94:29:2e:2d:ab:3e:93:a1:96:1e:08:fb:87:42:
         0a:35:65:9c:17:6a:fa:73:a5:c9:bc:e6:fd:2f:84:b0:46:d7:
         4b:9b:52:08:13:b7:03:05:9a:46:d6:0b:af:cb:98:79:57:88:
         9e:f1:a0:db:ee:6a:56:80:0f:20:f5:b6:1c:47:0f:83:df:34:
         10:9e:cc:10:61:33:f8:93:04:18:8e:77:90:12:38:b3:cf:92:
         41:57:d0:6d:29:ff:9b:ff:f7:5a:77:15:5c:35:5f:c5:36:19:
         82:aa:09:74:89:87:cf:20:98:25:52:dd:35:ee:84:b5:be:d8:
         7f:66:f9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:59:51 2026 by rpki-client