This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/3137302e3233332e36382e302f32322d3235203d3e20323634373332.roa
File:                     3137302e3233332e36382e302f32322d3235203d3e20323634373332.roa (raw, json)
Hash identifier:          MRBjhOgg+iNlWkSdoU3O8ra4cfkHRtpD/53/oxxEI0U=
Subject key identifier:   BF:B2:D6:5A:D5:1C:C3:35:97:E1:24:F9:AA:A2:89:61:43:5D:EA:0B
Certificate issuer:       /CN=1F4C8E2A50993D70AF79E87C7E1B8660979E2614
Certificate serial:       61968D57DFB48DAB513922B3DDBB9DF9746083D7
Authority key identifier: 1F:4C:8E:2A:50:99:3D:70:AF:79:E8:7C:7E:1B:86:60:97:9E:26:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/3137302e3233332e36382e302f32322d3235203d3e20323634373332.roa
Signing time:             Tue 06 Jan 2026 19:47:46 +0000
ROA not before:           Tue 06 Jan 2026 19:42:46 +0000
ROA not after:            Tue 05 Jan 2027 19:47:46 +0000
asID:                     264732
IP address blocks:        170.233.68.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.crl
                          rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:96:8d:57:df:b4:8d:ab:51:39:22:b3:dd:bb:9d:f9:74:60:83:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C8E2A50993D70AF79E87C7E1B8660979E2614
        Validity
            Not Before: Jan  6 19:42:46 2026 GMT
            Not After : Jan  5 19:47:46 2027 GMT
        Subject: CN=BFB2D65AD51CC33597E124F9AAA28961435DEA0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:73:c6:8d:40:2e:9e:d6:43:81:57:d7:0d:0d:
                    82:34:b3:aa:cc:cf:4c:0d:e4:dd:cc:81:c8:3e:dc:
                    53:09:b5:22:fd:1e:11:96:0f:17:99:9b:76:33:53:
                    fd:da:1c:62:24:09:1d:a9:85:a9:fd:ce:a1:a0:75:
                    5d:06:f0:f5:30:6d:0f:78:9a:a2:a1:14:1d:07:90:
                    70:54:6b:37:11:98:2a:c0:ba:3d:d0:2f:74:25:0b:
                    b9:a6:5d:ff:73:ab:f7:aa:91:a7:78:34:6f:ac:40:
                    91:b6:8c:87:30:ad:99:36:20:20:ec:3b:db:80:46:
                    e7:09:ea:67:a1:60:df:fb:c5:59:80:77:c3:da:c9:
                    cf:65:03:bc:f8:0a:63:d5:aa:20:57:df:ca:c1:83:
                    5b:28:9a:5a:e0:06:13:da:f9:41:72:f6:88:ac:05:
                    c9:7d:02:c9:a8:55:4b:40:ae:f3:85:84:d8:1b:8e:
                    ff:c1:64:c7:2c:1b:68:fb:97:1c:57:dc:ff:01:f5:
                    07:4d:87:fc:3d:e6:37:aa:bf:95:80:6b:26:72:9f:
                    d4:e4:c2:8d:36:06:89:0c:8c:91:04:82:fc:29:28:
                    cf:02:db:e2:8c:eb:90:97:52:ac:6a:7d:6c:11:cc:
                    cc:3e:2c:54:78:74:ff:f3:16:f9:1a:80:84:0f:57:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B2:D6:5A:D5:1C:C3:35:97:E1:24:F9:AA:A2:89:61:43:5D:EA:0B
            X509v3 Authority Key Identifier:
                keyid:1F:4C:8E:2A:50:99:3D:70:AF:79:E8:7C:7E:1B:86:60:97:9E:26:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/3137302e3233332e36382e302f32322d3235203d3e20323634373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:3a:04:ca:0b:67:26:d9:d7:d3:66:ca:d4:65:bb:79:a5:d3:
         cd:15:63:9e:e0:9d:9b:82:b8:fc:b8:7f:d2:cd:92:0f:dd:9b:
         aa:19:a7:0d:05:d6:38:c1:93:c5:43:9b:d3:7a:d3:4d:f6:23:
         5b:9c:62:62:6b:1a:87:25:b4:bb:98:df:3e:19:2f:46:38:ab:
         17:c1:dc:6b:b8:6a:51:52:ef:51:3e:67:2a:4c:d5:d0:0f:15:
         81:e0:f1:db:9e:09:79:2f:7e:9d:95:1b:7a:da:e4:ab:ff:f4:
         09:0f:f6:cc:76:d3:6d:e1:56:99:b6:ef:66:af:cf:95:69:8b:
         9e:be:0c:36:82:ff:79:e6:72:c9:d8:c2:6d:b5:55:52:97:a0:
         ac:ee:3b:8e:ae:ee:87:e7:02:a9:52:75:e8:eb:27:80:ca:80:
         5f:29:0e:31:24:1d:f1:d6:8f:f9:3c:55:f6:86:84:e4:a2:f6:
         12:55:bd:12:15:88:45:88:63:40:e4:a1:57:bc:15:c4:ef:18:
         ea:a8:55:39:8a:3d:a6:e6:36:ca:c2:77:e3:72:b7:07:b3:5e:
         57:05:4e:78:a7:10:0a:f5:3d:7e:d6:a3:09:6b:a6:c3:bc:55:
         1b:2e:7e:84:55:30:43:b8:bf:ea:05:d4:38:b0:00:3a:42:8c:
         31:7c:1b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:51:49 2026 by rpki-client