This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3137302e3233392e3132302e302f32322d3234203d3e20323632313539.roa
File:                     3137302e3233392e3132302e302f32322d3234203d3e20323632313539.roa (raw, json)
Hash identifier:          go2L8bE012jCwDz0dUAO/wtTnFm0QW1WtcfRDgc7CoE=
Subject key identifier:   27:1D:E5:13:0F:1E:D6:5D:56:80:28:3B:EC:55:59:22:94:DD:C2:F0
Certificate issuer:       /CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
Certificate serial:       1238AA2E836EED8520338994D21F15DB223AB31A
Authority key identifier: 94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3137302e3233392e3132302e302f32322d3234203d3e20323632313539.roa
Signing time:             Tue 06 Jan 2026 18:57:22 +0000
ROA not before:           Tue 06 Jan 2026 18:52:22 +0000
ROA not after:            Tue 05 Jan 2027 18:57:22 +0000
asID:                     262159
IP address blocks:        170.239.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:38:aa:2e:83:6e:ed:85:20:33:89:94:d2:1f:15:db:22:3a:b3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
        Validity
            Not Before: Jan  6 18:52:22 2026 GMT
            Not After : Jan  5 18:57:22 2027 GMT
        Subject: CN=271DE5130F1ED65D5680283BEC55592294DDC2F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7b:49:49:ff:c4:00:08:6c:c3:9a:c2:cf:fc:
                    1b:06:b8:66:3b:47:21:d4:e2:a5:58:a0:77:54:88:
                    af:2b:82:df:01:60:2d:35:ec:60:02:0d:f0:bd:d4:
                    b0:d5:21:73:f8:75:76:23:88:62:3c:6e:ae:41:a9:
                    ce:25:86:e5:6c:38:4a:04:1d:1e:6e:da:da:26:de:
                    89:6e:62:cb:24:05:96:19:1b:7c:99:0a:3b:c4:58:
                    d6:c1:fa:49:3c:27:c7:d4:53:3e:d1:95:ea:a8:27:
                    de:cb:ac:b3:a3:c3:02:21:51:86:c2:6c:0a:08:a2:
                    16:d3:ce:02:27:95:66:1f:75:1f:f7:37:dc:15:31:
                    77:b4:0e:ff:e5:22:07:2e:13:9c:53:93:45:82:ee:
                    6b:c9:70:03:2f:11:2c:6a:72:fa:08:73:de:c9:5d:
                    d0:17:91:fe:96:2e:a8:24:01:ea:d1:59:52:89:2f:
                    6b:00:a9:8a:dc:93:39:c2:3e:01:33:32:e4:a7:00:
                    54:41:86:e8:4e:1f:46:08:77:47:95:a6:97:8e:e9:
                    e4:3b:ef:df:02:58:74:0b:17:a5:a2:a4:88:29:7d:
                    d5:18:de:6d:21:02:ec:27:5a:fa:12:a0:20:c0:8c:
                    1d:17:ac:42:ff:60:4b:91:da:59:36:db:a0:83:3c:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1D:E5:13:0F:1E:D6:5D:56:80:28:3B:EC:55:59:22:94:DD:C2:F0
            X509v3 Authority Key Identifier:
                keyid:94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3137302e3233392e3132302e302f32322d3234203d3e20323632313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:ab:9a:33:4a:89:d4:eb:c8:8f:01:a5:d4:70:ef:65:74:5d:
         33:62:ad:94:c9:84:4e:79:f6:5d:f9:bc:c9:ed:01:6b:a1:71:
         2d:2a:fd:25:fb:21:d7:66:bc:73:e5:e7:d4:7c:fe:03:26:42:
         e9:46:b6:70:18:60:b6:5c:a2:2d:bc:f8:44:ba:84:ad:b6:a8:
         f2:31:0b:f2:fc:5a:d8:dd:e7:74:f2:d8:07:bc:b2:9a:ad:c3:
         54:1d:16:ec:e1:70:bf:f6:2b:32:28:be:59:d3:05:98:a5:aa:
         a7:3b:ad:f0:2f:e1:1d:70:24:7a:47:09:af:ac:5d:99:61:07:
         e1:52:28:4f:df:54:ec:ed:75:ee:95:a7:65:b0:f4:bf:fc:cf:
         3f:ea:03:ce:13:64:36:37:f1:f5:0b:e0:98:b2:10:d6:1c:be:
         40:a0:b7:42:31:a4:cb:73:8f:4d:68:03:64:76:de:ec:3a:8c:
         f9:64:6f:28:73:65:49:f6:fa:8f:36:ca:81:48:67:e5:54:8b:
         17:b2:71:ba:f5:e7:d1:9b:c5:7e:1a:38:f9:77:1c:40:46:a3:
         14:8d:e4:a5:55:53:ba:8e:5e:29:72:ed:ca:f2:92:e6:82:9a:
         a2:bb:18:87:c5:41:64:37:ca:b7:5c:89:2a:0a:35:d9:f8:f1:
         30:ff:d6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:28 2026 by rpki-client