This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/3137302e302e31322e302f32322d3234203d3e20323633313537.roa
File:                     3137302e302e31322e302f32322d3234203d3e20323633313537.roa (raw, json)
Hash identifier:          f9SrUyZYA550SEyHV5RyaH3qPYLG41cfmER7A4eSG78=
Subject key identifier:   46:31:84:FA:37:43:A5:4F:EE:F5:D4:09:6E:26:F5:6E:9F:DC:8E:9C
Certificate issuer:       /CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F
Certificate serial:       28F5FD9A3668BCF4E730562925ABE3253DDB9DEC
Authority key identifier: CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/3137302e302e31322e302f32322d3234203d3e20323633313537.roa
Signing time:             Tue 06 Jan 2026 19:40:26 +0000
ROA not before:           Tue 06 Jan 2026 19:35:26 +0000
ROA not after:            Tue 05 Jan 2027 19:40:26 +0000
asID:                     263157
IP address blocks:        170.0.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f5:fd:9a:36:68:bc:f4:e7:30:56:29:25:ab:e3:25:3d:db:9d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F
        Validity
            Not Before: Jan  6 19:35:26 2026 GMT
            Not After : Jan  5 19:40:26 2027 GMT
        Subject: CN=463184FA3743A54FEEF5D4096E26F56E9FDC8E9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:fd:c1:a5:a2:63:5f:53:ff:2d:89:24:61:
                    1a:91:05:1e:20:c1:c6:81:d9:86:01:50:20:b4:5e:
                    73:35:1b:43:d0:ff:be:08:78:0f:3a:8a:bc:f6:2d:
                    44:86:44:c9:83:86:12:1d:b2:57:fa:db:11:d3:26:
                    88:19:3d:09:35:3a:98:4d:4d:c5:1d:41:ed:76:58:
                    4a:77:36:eb:f9:8a:02:3a:67:8e:fb:ff:b8:26:ce:
                    25:cd:06:28:17:da:5c:a4:ab:0b:08:ee:f3:1a:71:
                    72:6b:b1:c1:47:3a:d6:f9:cf:10:60:91:d0:9b:ee:
                    6d:58:08:6e:04:32:8a:e9:b4:0a:94:44:70:a0:68:
                    e4:14:b6:28:cc:2d:49:5f:1a:68:55:22:85:8a:fa:
                    ad:7f:5a:85:61:94:07:cb:23:8a:4c:75:02:d4:97:
                    14:5e:be:2a:a7:fb:48:c5:1f:1c:ba:7a:0c:cc:cd:
                    77:94:64:be:b0:bb:56:65:0e:db:cd:6e:54:12:1c:
                    1f:4f:54:9b:84:14:db:59:d4:7d:c3:f5:35:09:4c:
                    91:b0:12:b5:c4:e2:e9:a9:c6:e4:d0:c7:f3:23:57:
                    d1:f5:0a:2d:81:73:88:6f:0f:6f:d5:db:db:54:6c:
                    1c:1a:9c:eb:1e:c2:c3:5a:f1:a4:74:76:5a:28:0e:
                    0e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:31:84:FA:37:43:A5:4F:EE:F5:D4:09:6E:26:F5:6E:9F:DC:8E:9C
            X509v3 Authority Key Identifier:
                keyid:CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/3137302e302e31322e302f32322d3234203d3e20323633313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:46:f3:60:f8:6a:d1:48:63:81:6a:9e:ff:35:ba:74:48:
         b9:de:ea:8b:ec:ef:19:28:f9:c1:76:b7:1c:c2:5c:4e:52:b4:
         8e:88:51:46:dd:94:19:1f:9b:d0:f2:61:ee:23:6a:56:04:a7:
         e2:de:17:5b:09:f1:49:83:40:d0:0f:d5:42:5b:26:c2:1f:59:
         7b:48:d5:33:2d:1a:4e:ab:de:89:9f:38:eb:e0:64:9b:67:5a:
         c9:62:51:62:3a:11:b7:d4:1d:39:86:dd:7d:4a:1f:1f:7d:62:
         c5:c9:e4:10:ca:e1:6f:93:0d:bb:80:b9:5e:5b:a3:87:bf:04:
         50:f3:92:0d:d6:9c:1a:7d:57:c6:a5:c5:4b:be:bc:d3:53:62:
         c7:2b:a5:21:57:e8:6b:94:03:c3:d5:6e:6b:aa:bb:88:40:d0:
         91:38:c0:cf:81:ad:a3:10:73:5d:7e:d0:a5:25:91:c2:ae:b1:
         d4:93:73:ef:4b:68:41:0e:c8:21:85:fd:81:46:00:df:71:1b:
         4c:58:dd:83:4d:18:f0:13:6a:6e:8e:a4:35:3e:6d:b1:b9:79:
         6f:44:07:87:8c:5c:69:5a:8c:48:80:6e:ae:39:44:e1:fb:f6:
         13:ad:1b:18:d4:7d:33:dc:05:97:b0:9b:d2:eb:2d:03:98:fa:
         64:13:f2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:18:07 2026 by rpki-client