This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35382e302f32342d3234203d3e20323731383134.roa
File:                     3137302e3234362e35382e302f32342d3234203d3e20323731383134.roa (raw, json)
Hash identifier:          iDT71EvCrakIkoan4cZNXV3tkVYhIIAUZbb44w3quoA=
Subject key identifier:   C0:3C:65:15:3C:51:C7:5B:C0:DD:DD:D0:F2:24:84:5F:60:7D:E2:D3
Certificate issuer:       /CN=E8415F203EB930F191C0398A880C11B310EE5884
Certificate serial:       3ACBD50B51B5E34A155031FDAA728AFF00FF05D3
Authority key identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35382e302f32342d3234203d3e20323731383134.roa
Signing time:             Tue 06 Jan 2026 18:59:35 +0000
ROA not before:           Tue 06 Jan 2026 18:54:35 +0000
ROA not after:            Tue 05 Jan 2027 18:59:35 +0000
asID:                     271814
IP address blocks:        170.246.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:cb:d5:0b:51:b5:e3:4a:15:50:31:fd:aa:72:8a:ff:00:ff:05:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8415F203EB930F191C0398A880C11B310EE5884
        Validity
            Not Before: Jan  6 18:54:35 2026 GMT
            Not After : Jan  5 18:59:35 2027 GMT
        Subject: CN=C03C65153C51C75BC0DDDDD0F224845F607DE2D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:f7:05:45:b2:57:f6:35:8a:dd:8d:e9:81:
                    2e:f8:99:77:78:1d:36:41:b3:62:4d:eb:3b:fc:1f:
                    54:38:a5:b1:eb:ab:28:75:09:ef:08:e2:e0:f9:79:
                    a2:a5:62:f7:97:0b:fe:97:93:a0:3a:00:23:aa:94:
                    f1:31:ba:5e:59:10:07:6f:11:70:05:99:3d:54:f6:
                    19:88:35:f3:1a:0e:e9:6b:9b:5c:87:6f:9d:c8:fa:
                    a9:6d:45:92:3a:be:4b:dc:8d:6d:74:31:d2:e9:7d:
                    af:ed:69:19:82:03:ea:5a:32:9a:36:84:1c:2a:d5:
                    72:99:3e:dc:f6:0b:5c:c6:f3:f9:1b:c9:94:55:1f:
                    35:da:69:1a:f0:91:76:e8:10:a0:d8:d2:cf:21:71:
                    ed:b6:4b:ef:68:5e:4c:01:e5:bd:e2:3f:0b:22:0c:
                    ab:bf:30:95:64:bc:61:cd:fe:98:4e:de:11:0d:b2:
                    4c:e7:71:9f:4a:f5:d3:3a:a4:30:8a:e9:13:8a:63:
                    86:cc:01:d4:9b:d3:d9:a4:8b:55:31:9d:8b:99:ac:
                    9b:03:fd:35:d3:69:b4:b0:0c:a7:46:90:e6:ea:97:
                    dd:f4:76:44:a8:93:12:f5:8b:6b:1f:5e:6e:ba:c9:
                    b9:1f:ca:4f:c1:dd:fb:63:96:56:42:00:fc:35:11:
                    20:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3C:65:15:3C:51:C7:5B:C0:DD:DD:D0:F2:24:84:5F:60:7D:E2:D3
            X509v3 Authority Key Identifier:
                keyid:E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35382e302f32342d3234203d3e20323731383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:aa:35:9e:d6:12:52:15:8f:7a:00:3d:8a:96:97:c3:77:87:
         43:7c:45:b3:6b:78:e4:d8:32:60:66:23:9f:19:27:fa:79:d9:
         41:f6:d7:33:41:58:19:62:96:9b:4e:9c:9d:98:8d:15:b2:3d:
         f8:44:66:e3:c7:7f:67:25:79:86:6e:a3:47:56:4a:1c:0f:64:
         de:fd:9a:56:a6:7f:b9:34:2c:1c:c5:fb:df:7d:73:08:f4:cf:
         71:ec:21:e6:29:9a:19:4b:16:bc:f5:38:80:71:9a:9d:49:12:
         af:ab:0e:b7:ff:7a:79:0e:8c:29:6b:0f:64:1a:da:68:12:c2:
         48:44:0c:b7:cc:35:0c:4c:1c:6b:7a:02:59:fc:98:61:56:db:
         10:c4:bb:ab:50:f9:0b:1c:0d:e5:3d:d6:fd:3f:dc:09:2a:34:
         e4:fc:f1:5f:93:34:98:c4:b3:2d:7e:2a:45:7c:b3:7e:94:93:
         f0:02:57:0b:76:ba:0a:0f:fd:8a:06:ba:9f:47:5b:bb:ea:ff:
         ca:21:78:7a:93:69:8f:35:fd:ce:a5:32:34:e9:4b:24:4b:c6:
         c5:e0:13:50:88:97:1d:ea:43:20:cf:08:a9:87:c8:b6:7b:91:
         e1:0a:d6:72:d5:04:77:c6:37:30:87:a4:86:83:cb:48:db:c9:
         ee:e1:6b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:57:44 2026 by rpki-client