This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3137302e3234342e38302e302f32322d3232203d3e20323634373530.roa
File:                     3137302e3234342e38302e302f32322d3232203d3e20323634373530.roa (raw, json)
Hash identifier:          1ubdaM1kQ0hWq9FBJqZuWaYHSOhrsvNtF5F48KDDpA0=
Subject key identifier:   C6:8B:A1:F4:7F:EF:46:66:E8:3C:CC:33:33:27:A2:FD:B5:17:33:57
Certificate issuer:       /CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463
Certificate serial:       5FE60F75EEF867BA5213E1A29DDB9BD985FCA4D0
Authority key identifier: 0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3137302e3234342e38302e302f32322d3232203d3e20323634373530.roa
Signing time:             Tue 06 Jan 2026 19:06:49 +0000
ROA not before:           Tue 06 Jan 2026 19:01:49 +0000
ROA not after:            Tue 05 Jan 2027 19:06:49 +0000
asID:                     264750
IP address blocks:        170.244.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e6:0f:75:ee:f8:67:ba:52:13:e1:a2:9d:db:9b:d9:85:fc:a4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463
        Validity
            Not Before: Jan  6 19:01:49 2026 GMT
            Not After : Jan  5 19:06:49 2027 GMT
        Subject: CN=C68BA1F47FEF4666E83CCC333327A2FDB5173357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:ff:c5:c5:ba:1d:4a:c7:97:25:fe:b6:c2:
                    f1:6e:c7:e3:50:f3:ad:80:81:ff:ac:79:b3:80:ae:
                    ef:00:44:ee:ad:14:bd:50:08:17:dd:49:7d:50:c7:
                    30:ad:63:a0:10:7f:09:2d:8d:05:86:0f:bd:8a:52:
                    16:2d:16:cc:58:98:e6:c3:15:06:55:a8:eb:56:f0:
                    de:65:d8:2d:42:f2:79:ba:6c:0e:4a:04:e4:af:d5:
                    c5:33:33:ec:7d:f2:f4:02:a9:27:8f:19:1b:9e:66:
                    9a:1c:7b:08:6f:01:6b:6c:95:f0:00:aa:1b:6c:93:
                    33:74:c2:3b:f5:cc:3b:70:95:c3:63:86:12:c7:a6:
                    72:b0:68:10:d5:7b:97:b9:6a:e6:5f:1a:24:27:1c:
                    a2:d1:5f:a3:0a:a6:e1:4b:74:48:64:80:c6:b4:28:
                    0e:4e:f1:b2:87:5c:53:87:8e:b6:f0:17:dc:e7:60:
                    2d:e3:b0:32:e5:c7:ec:21:0f:80:92:76:94:f2:66:
                    c9:28:69:43:34:fd:7e:ea:79:62:9a:d1:c7:a6:ac:
                    89:b9:ca:d0:99:4a:be:97:1d:76:65:d8:67:43:54:
                    1d:6f:f6:2c:f6:9b:ec:03:8c:96:a5:dc:d4:6f:c7:
                    4a:85:3e:66:96:89:10:7f:15:45:78:0e:8a:1d:ff:
                    64:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8B:A1:F4:7F:EF:46:66:E8:3C:CC:33:33:27:A2:FD:B5:17:33:57
            X509v3 Authority Key Identifier:
                keyid:0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3137302e3234342e38302e302f32322d3232203d3e20323634373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:fa:ce:86:e1:06:51:04:bb:93:bb:7f:e4:0a:67:8a:95:2b:
         15:3c:03:ac:b7:88:0c:2d:d1:68:c8:be:57:bd:06:db:a7:75:
         38:ee:50:6d:67:07:50:57:47:c5:4c:bf:6c:f3:b5:5a:a6:55:
         26:57:78:2f:40:39:ab:f7:57:99:83:3e:63:a4:ae:d2:20:de:
         43:90:5f:70:00:09:f4:b6:71:24:b6:50:a8:55:d2:38:3b:e2:
         f4:04:73:e4:95:36:1d:29:ac:c2:8f:57:e3:1f:fa:50:75:f2:
         16:78:06:fc:56:fe:56:67:8b:d8:e8:5e:da:d3:bb:65:f4:cf:
         e5:f2:fa:ac:83:5c:e9:1f:bc:76:94:3c:c4:a5:30:d6:84:c5:
         82:b8:13:16:8b:38:5a:b4:a3:ab:6f:7c:f1:9d:9b:b6:39:a4:
         dd:c2:87:5f:6d:f5:cd:2d:9f:3f:55:7a:2c:6c:05:55:29:fc:
         4f:f1:4a:b7:de:d0:28:61:db:cb:9a:6b:f1:6a:2a:c8:7d:5d:
         fc:0a:40:64:8d:2c:50:5b:82:2e:6d:6e:72:e7:2d:88:9e:5a:
         e0:c7:a8:d0:7b:98:e4:3a:eb:84:2c:0d:3d:46:3d:6c:09:66:
         c9:55:f9:94:bd:d9:10:61:f1:f9:8c:74:bf:5a:8b:e4:c6:c5:
         07:cc:3e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:55:22 2026 by rpki-client