This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/3137302e3234362e38342e302f32322d3234203d3e20323635363537.roa
File:                     3137302e3234362e38342e302f32322d3234203d3e20323635363537.roa (raw, json)
Hash identifier:          xhtuWlIe0YWdzcxhR4Vcuvu1y5WuOuXDyC7m2rkoju8=
Subject key identifier:   C0:DD:9C:75:5F:67:9A:67:90:AD:0F:CD:C3:F4:08:62:4F:EC:13:59
Certificate issuer:       /CN=B05D2A8222011E8BE02C8B0C3D15D4A94366196C
Certificate serial:       019A9AC2FFDEA33821BEB86F525A746DED8444C7
Authority key identifier: B0:5D:2A:82:22:01:1E:8B:E0:2C:8B:0C:3D:15:D4:A9:43:66:19:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/3137302e3234362e38342e302f32322d3234203d3e20323635363537.roa
Signing time:             Tue 06 Jan 2026 20:56:27 +0000
ROA not before:           Tue 06 Jan 2026 20:51:27 +0000
ROA not after:            Tue 05 Jan 2027 20:56:27 +0000
asID:                     265657
IP address blocks:        170.246.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:9a:c2:ff:de:a3:38:21:be:b8:6f:52:5a:74:6d:ed:84:44:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B05D2A8222011E8BE02C8B0C3D15D4A94366196C
        Validity
            Not Before: Jan  6 20:51:27 2026 GMT
            Not After : Jan  5 20:56:27 2027 GMT
        Subject: CN=C0DD9C755F679A6790AD0FCDC3F408624FEC1359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:f6:c2:75:17:8e:cd:1f:53:72:c5:55:c0:
                    ea:06:2e:06:24:b2:d9:7e:9a:0f:39:ab:58:df:db:
                    70:88:03:e4:9d:08:78:d7:9e:e2:7a:a8:9f:75:a2:
                    5e:0f:97:11:4d:79:ee:c4:19:9e:66:93:d9:ff:61:
                    d1:8b:04:51:93:17:d4:68:dd:7a:ad:ad:f6:60:bc:
                    4c:c8:05:fc:cb:47:5a:a1:63:15:d2:83:7f:77:17:
                    d1:d5:37:d8:cd:f2:a5:00:ac:df:4d:fe:14:e2:c9:
                    2c:7e:a2:5b:c0:59:c9:ac:db:bd:6d:af:75:99:d6:
                    1f:fc:69:c4:a3:2d:a7:c6:2a:3d:f2:85:49:d8:87:
                    f3:b6:d3:fa:be:5f:6b:b0:d3:17:15:b7:cc:b3:26:
                    bb:f8:41:b5:0a:d2:44:17:a6:16:20:34:2d:2a:84:
                    9e:eb:f1:b1:31:2b:e1:eb:ca:0c:88:96:a5:03:36:
                    b1:ac:19:45:74:be:df:c4:c5:5b:9a:14:d6:be:60:
                    9d:c4:e1:54:ed:70:01:fa:a2:a6:73:82:10:a5:cd:
                    fb:25:2e:12:49:5f:5c:d6:66:7c:0c:6f:68:54:fe:
                    0f:14:c7:ec:d5:13:c4:f7:ac:77:3b:29:a5:6e:c3:
                    19:18:73:6f:1c:02:74:aa:a1:dd:e0:4c:38:8b:c4:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DD:9C:75:5F:67:9A:67:90:AD:0F:CD:C3:F4:08:62:4F:EC:13:59
            X509v3 Authority Key Identifier:
                keyid:B0:5D:2A:82:22:01:1E:8B:E0:2C:8B:0C:3D:15:D4:A9:43:66:19:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/3137302e3234362e38342e302f32322d3234203d3e20323635363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:ba:d6:25:90:7b:61:3b:24:53:f5:41:63:9a:63:0b:f2:ee:
         94:7d:14:02:63:e5:49:9d:62:9e:74:a2:0a:5f:74:1b:55:3b:
         20:14:d1:1f:6d:10:e3:cf:1e:4e:2b:4a:95:f4:62:6f:ae:de:
         64:ab:79:31:59:82:bf:4d:b0:c4:46:20:81:a7:de:ec:b3:9d:
         c2:1c:fa:55:9b:da:60:f0:22:2c:96:ad:3e:dc:3e:34:5d:ba:
         31:97:04:a4:3a:24:32:cc:a6:5a:ea:30:b2:2a:c9:d9:33:3b:
         63:98:b2:cb:1c:f7:3c:11:bf:d6:e3:a7:b2:73:94:70:f8:17:
         88:b3:10:77:4b:4c:60:f8:52:46:e4:2d:12:51:ea:ad:a8:7d:
         0f:28:e3:d8:04:ad:72:ae:e3:1e:46:b2:ef:bc:81:b9:14:b3:
         15:55:01:94:ea:b3:e3:9c:91:40:4a:c2:29:3a:75:7f:2c:be:
         fd:0b:33:65:9f:ae:9f:bc:8b:55:8d:97:34:b1:de:d0:dc:67:
         0a:42:ca:48:90:ec:63:38:ca:45:69:09:8f:45:ce:e2:0f:b9:
         d3:7f:1e:9e:5b:4a:02:0b:da:49:cb:c4:2b:89:46:0b:70:11:
         26:b9:3d:c9:50:c1:99:ee:3c:99:f0:d2:db:5a:cc:3e:cb:84:
         cf:ed:33:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:53:44 2026 by rpki-client