This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35362e302f32322d3234203d3e20323731383134.roa
File:                     3137302e3234362e35362e302f32322d3234203d3e20323731383134.roa (raw, json)
Hash identifier:          wHKvDG/tiinP1+G+toREClK394W7ZJG4xPkIUOuTLMg=
Subject key identifier:   0F:AB:A1:43:CD:5D:66:85:72:00:18:C2:D5:B5:6E:EC:2B:11:C2:EA
Certificate issuer:       /CN=E8415F203EB930F191C0398A880C11B310EE5884
Certificate serial:       3F82362D900612C739B1B298B9A83FF3918B01B3
Authority key identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35362e302f32322d3234203d3e20323731383134.roa
Signing time:             Fri 09 Jan 2026 08:50:00 +0000
ROA not before:           Fri 09 Jan 2026 08:45:00 +0000
ROA not after:            Fri 08 Jan 2027 08:50:00 +0000
asID:                     271814
IP address blocks:        170.246.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:82:36:2d:90:06:12:c7:39:b1:b2:98:b9:a8:3f:f3:91:8b:01:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8415F203EB930F191C0398A880C11B310EE5884
        Validity
            Not Before: Jan  9 08:45:00 2026 GMT
            Not After : Jan  8 08:50:00 2027 GMT
        Subject: CN=0FABA143CD5D6685720018C2D5B56EEC2B11C2EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:25:e8:13:c4:2c:55:fe:ac:84:6e:02:24:
                    fe:ff:8b:9c:51:83:49:ad:a5:42:10:7c:c1:36:73:
                    48:9d:72:54:db:b1:15:6d:c2:2b:32:43:63:e8:0e:
                    a7:6e:1f:2e:1b:7f:5a:9e:98:af:8d:ab:3b:73:69:
                    21:eb:72:94:f2:8c:da:b4:9e:0e:dd:b4:9f:b6:e1:
                    51:5c:25:6d:25:06:dd:8d:1a:f5:c3:9c:65:a8:4f:
                    e5:71:bd:c2:63:e3:37:60:0d:f8:fb:16:12:f6:ac:
                    86:e5:3d:c3:e7:ba:8d:88:95:8a:8e:e3:97:18:a0:
                    44:6e:92:7a:77:f5:c8:a7:6c:99:da:fc:db:a1:64:
                    bb:4a:da:f3:f6:1c:50:5f:86:a3:ac:00:15:8b:75:
                    b5:d2:69:3a:60:58:41:c3:5a:ea:77:1c:ad:97:52:
                    41:d3:7d:2c:58:88:f4:83:9f:31:b4:a5:09:8f:a9:
                    f4:e6:96:75:20:f7:eb:88:01:ef:8b:8a:bb:1d:0e:
                    62:23:80:75:22:e5:28:90:63:4a:49:c4:83:ff:87:
                    bb:5c:69:96:82:dd:45:9f:24:14:b1:03:06:f3:97:
                    8d:68:d7:cc:b0:49:31:0b:90:c6:f1:f7:f4:ae:70:
                    af:2d:a5:6d:b9:36:83:80:a7:fb:17:52:99:55:be:
                    88:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AB:A1:43:CD:5D:66:85:72:00:18:C2:D5:B5:6E:EC:2B:11:C2:EA
            X509v3 Authority Key Identifier:
                keyid:E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35362e302f32322d3234203d3e20323731383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:b8:8e:90:b9:4a:b5:56:8b:a3:ad:8a:05:82:e9:f7:20:0e:
         6a:d9:3e:2d:54:56:69:1f:80:26:d7:8c:cf:28:bf:65:a2:68:
         6a:ed:4c:c3:91:e8:2c:a2:48:8d:aa:2a:a2:73:79:15:e6:16:
         99:68:46:e1:4c:2b:d6:1a:d7:c7:9a:9f:61:9d:e9:9a:70:4c:
         18:36:59:67:d8:d9:5a:c9:77:a9:78:5b:5c:c4:8a:6d:5a:85:
         0d:b7:da:2f:51:34:a1:4f:16:8a:d5:ed:74:bb:9e:53:a1:2a:
         e8:ba:bd:75:26:c8:3e:33:7c:31:22:b5:91:2d:d8:e9:3c:44:
         cf:51:de:5a:32:6e:0a:d6:a6:1b:c4:13:3b:0e:15:70:7f:b2:
         79:98:10:e9:b8:1b:dd:0b:c7:b6:fd:1d:50:0c:27:6d:a0:82:
         50:87:35:2a:3c:61:4a:ea:da:4c:97:57:67:eb:8c:cd:14:6f:
         7e:df:de:89:26:be:5f:32:96:bd:1b:40:b8:5b:3f:a3:cb:14:
         d9:ff:c2:e1:98:da:47:30:b5:f2:b6:af:a4:aa:31:79:23:83:
         00:23:d0:31:1d:56:72:b4:e0:c6:11:d8:69:52:21:0f:1e:7b:
         c1:a9:d7:3e:7e:62:f3:d0:24:a1:b1:bb:bd:de:59:fd:65:63:
         59:9e:97:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:21 2026 by rpki-client