This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35372e302f32342d3234203d3e20323731383134.roa
File:                     3137302e3234362e35372e302f32342d3234203d3e20323731383134.roa (raw, json)
Hash identifier:          zHl9/Sb/1HNixTXM7vOtkPzVluClc1lnLMKn9Pvw8k4=
Subject key identifier:   BF:75:06:40:07:38:E3:22:E1:54:F5:4D:B9:AE:33:D7:FA:03:79:5E
Certificate issuer:       /CN=E8415F203EB930F191C0398A880C11B310EE5884
Certificate serial:       34C6CB9072D9865D438584573C215B05DC249C3A
Authority key identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35372e302f32342d3234203d3e20323731383134.roa
Signing time:             Tue 06 Jan 2026 18:59:36 +0000
ROA not before:           Tue 06 Jan 2026 18:54:36 +0000
ROA not after:            Tue 05 Jan 2027 18:59:36 +0000
asID:                     271814
IP address blocks:        170.246.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c6:cb:90:72:d9:86:5d:43:85:84:57:3c:21:5b:05:dc:24:9c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8415F203EB930F191C0398A880C11B310EE5884
        Validity
            Not Before: Jan  6 18:54:36 2026 GMT
            Not After : Jan  5 18:59:36 2027 GMT
        Subject: CN=BF7506400738E322E154F54DB9AE33D7FA03795E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:9b:fb:45:c3:22:78:3b:54:76:49:fd:d5:
                    36:d1:f9:d9:63:46:5b:9c:09:22:20:0c:85:40:c3:
                    f8:38:9b:96:64:da:32:e6:02:10:cd:ba:54:c9:c2:
                    65:30:61:90:d0:ec:5a:47:5c:7d:2f:8c:a7:d2:df:
                    be:e5:83:f9:5c:f2:f5:90:dc:8e:1d:d3:cf:fa:23:
                    91:f9:f3:fa:05:63:a3:1f:4f:f6:d2:83:c4:62:66:
                    87:bc:29:f2:d6:ab:9e:d0:f7:9c:be:d6:2a:c4:7a:
                    ca:0a:14:3c:7c:cb:32:1a:67:15:4e:9d:cf:02:bd:
                    23:c4:88:ae:08:79:a0:39:69:63:97:8b:31:d3:f1:
                    a2:92:75:ff:dd:75:0d:f2:40:d9:f3:8e:fa:33:dd:
                    9a:13:91:54:cc:4d:e7:98:43:90:f8:f4:4e:6e:4f:
                    c8:11:86:7f:6f:36:39:fd:bf:a5:14:87:e3:71:79:
                    b5:e8:c5:ee:16:0c:94:13:7f:7e:0f:5b:71:db:5e:
                    b1:61:66:f4:66:52:0d:f2:73:dd:c3:80:c0:ff:26:
                    fa:e3:50:d4:be:e0:35:c2:3c:4e:75:1a:f8:b3:6f:
                    fe:27:5f:74:52:9d:3c:e7:0e:e7:13:55:45:d0:b6:
                    33:09:7b:a0:9a:81:55:2e:21:47:34:18:1f:ef:0b:
                    b8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:75:06:40:07:38:E3:22:E1:54:F5:4D:B9:AE:33:D7:FA:03:79:5E
            X509v3 Authority Key Identifier:
                keyid:E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35372e302f32342d3234203d3e20323731383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:0c:7c:2a:2b:16:16:5d:22:41:59:87:09:37:55:cd:a5:b9:
         f0:aa:88:c5:b8:00:83:a5:37:7e:76:cc:54:c0:41:ee:10:83:
         9d:2d:78:dc:80:20:1a:11:a8:1a:04:5c:e8:8b:8b:f6:88:43:
         58:9d:06:02:fe:71:25:17:fd:1f:cf:fd:85:7c:8e:25:20:23:
         cf:a0:ff:25:ba:49:73:1a:12:22:44:9f:d7:bd:ef:6b:e4:4c:
         dd:df:c9:44:78:ee:5a:3e:bb:40:c6:83:81:21:b9:a1:63:21:
         f6:a9:65:38:b6:98:2a:be:a3:47:f9:0a:4a:11:a6:19:e9:d4:
         88:b5:ca:19:a5:28:94:4f:06:67:50:95:55:46:fa:1f:39:f3:
         61:31:99:bb:31:22:55:58:ea:f8:6a:12:85:3a:e5:e5:9e:3d:
         b9:75:74:79:35:c5:50:09:c5:04:b8:a9:ec:a4:b8:7b:72:3f:
         37:cc:b1:82:9d:46:51:f3:a1:3c:87:df:f1:81:1a:5f:23:c7:
         6c:27:ed:5e:47:2b:4f:23:a2:b2:99:2f:58:40:8e:84:b9:50:
         60:23:8e:10:ce:32:bf:e0:6a:e2:f2:1e:91:28:f8:cc:23:6c:
         1e:cb:73:02:25:60:74:85:e9:44:c4:7e:d0:60:89:d2:d8:ad:
         e9:91:0d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:49 2026 by rpki-client