This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/3137302e3135302e34342e302f32322d3234203d3e20323634373136.roa
File:                     3137302e3135302e34342e302f32322d3234203d3e20323634373136.roa (raw, json)
Hash identifier:          +5sdGnvS1UWYht93tqMiHnfahkxE2ZmHQbI6biTLEhE=
Subject key identifier:   E7:18:BE:74:2A:22:C5:2A:4B:11:AB:14:56:1F:5A:54:DC:32:5D:78
Certificate issuer:       /CN=6DE888EFA2956802EC74153A5670BFB030384D0F
Certificate serial:       225E76C11FD3659C6837DAD53005D8DBE0EEF4BC
Authority key identifier: 6D:E8:88:EF:A2:95:68:02:EC:74:15:3A:56:70:BF:B0:30:38:4D:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DE888EFA2956802EC74153A5670BFB030384D0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/3137302e3135302e34342e302f32322d3234203d3e20323634373136.roa
Signing time:             Tue 06 Jan 2026 19:20:05 +0000
ROA not before:           Tue 06 Jan 2026 19:15:05 +0000
ROA not after:            Tue 05 Jan 2027 19:20:05 +0000
asID:                     264716
IP address blocks:        170.150.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/6DE888EFA2956802EC74153A5670BFB030384D0F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/6DE888EFA2956802EC74153A5670BFB030384D0F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DE888EFA2956802EC74153A5670BFB030384D0F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5e:76:c1:1f:d3:65:9c:68:37:da:d5:30:05:d8:db:e0:ee:f4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DE888EFA2956802EC74153A5670BFB030384D0F
        Validity
            Not Before: Jan  6 19:15:05 2026 GMT
            Not After : Jan  5 19:20:05 2027 GMT
        Subject: CN=E718BE742A22C52A4B11AB14561F5A54DC325D78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:9f:92:55:a8:aa:b1:4a:a7:57:f7:b9:3b:
                    27:4b:ed:39:65:e5:eb:2c:8c:c7:e0:6d:0e:83:02:
                    df:15:e4:5b:48:d6:1b:3e:4e:9b:74:e3:e2:f2:59:
                    b3:95:26:9e:44:d9:89:fa:a5:be:77:74:a3:b5:9c:
                    b9:f8:f5:f8:62:d2:12:3a:2d:c8:54:c1:85:4d:a0:
                    8c:2a:1e:f1:b4:6f:b2:dd:ee:5e:dd:5f:8c:95:a2:
                    65:0d:9a:ce:c7:84:35:8f:bf:94:f2:f0:22:77:6d:
                    ad:88:7f:50:01:a8:fd:4d:ca:a2:63:83:67:2d:f4:
                    9f:13:66:42:b5:8c:38:51:ee:56:9b:82:a4:11:f1:
                    3e:b8:a8:cf:45:98:90:3f:20:f1:85:f9:7f:2d:fb:
                    2a:85:d4:61:ba:fc:89:2f:72:d0:53:f4:e8:d6:82:
                    5c:25:c5:ed:b6:3d:3d:15:14:32:d9:06:dc:f8:d1:
                    1a:d2:4c:3d:9c:00:4e:55:47:9b:c4:f6:e8:92:f8:
                    1a:e1:d1:d1:02:c2:c3:6d:88:9a:91:c7:60:ed:db:
                    c5:b8:98:f2:cc:f6:37:99:90:dd:7c:70:77:cc:11:
                    d9:23:fc:71:70:a0:22:cc:15:73:71:80:32:90:5f:
                    9d:f3:d2:e5:c3:fd:fe:a8:33:2c:52:47:c6:fb:10:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:18:BE:74:2A:22:C5:2A:4B:11:AB:14:56:1F:5A:54:DC:32:5D:78
            X509v3 Authority Key Identifier:
                keyid:6D:E8:88:EF:A2:95:68:02:EC:74:15:3A:56:70:BF:B0:30:38:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/6DE888EFA2956802EC74153A5670BFB030384D0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DE888EFA2956802EC74153A5670BFB030384D0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/3137302e3135302e34342e302f32322d3234203d3e20323634373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:5b:5b:58:a8:bd:60:f5:4e:1f:a0:a5:80:18:96:bb:17:7c:
         62:76:eb:28:6b:a3:3f:50:44:46:8d:96:32:dc:da:be:0d:b7:
         fe:90:ec:69:d7:52:5f:ef:e6:1f:c7:34:01:0e:8e:3d:7e:67:
         53:eb:e1:8a:55:02:a7:c0:96:f9:c3:cd:e8:f8:a8:2f:12:cb:
         d4:54:d7:f6:fa:30:f5:e7:fa:ed:99:16:4d:5e:a6:eb:24:85:
         52:21:b5:0a:3c:69:52:b9:07:a4:7d:7a:39:eb:f6:1a:a3:e2:
         6c:b4:e5:08:f8:61:2b:c8:13:73:58:fa:43:a0:96:04:89:f3:
         93:20:7d:ba:08:e2:b7:fc:51:be:32:dc:6f:80:24:3e:21:2d:
         22:f3:a6:e1:3e:be:33:af:eb:3a:fb:18:cb:bc:31:24:27:e9:
         ca:1f:c6:c0:01:48:25:ea:72:d5:fe:33:04:63:32:3d:d7:34:
         31:d4:75:96:d6:ac:2d:e2:09:a6:4f:37:9e:4f:55:e0:5e:02:
         c4:2a:d5:16:79:98:76:9a:21:06:d6:47:2c:be:0d:49:37:91:
         8b:1c:95:2f:b4:61:da:a2:1d:25:c1:a4:b2:48:19:47:92:2f:
         19:6e:66:d3:74:c4:7c:b7:0f:12:7e:96:38:5d:08:2c:7c:2b:
         1a:51:d6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:57:44 2026 by rpki-client