This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36302e302f32332d3233203d3e20323635373530.roa
File:                     3137302e3135302e36302e302f32332d3233203d3e20323635373530.roa (raw, json)
Hash identifier:          9Rzbjor4rnV2M3kcWPXP4CZVXVm7n9FfJeByQjUCMwE=
Subject key identifier:   54:B6:66:32:36:EF:CA:0C:22:CF:EB:17:5A:9C:C2:A9:C5:24:03:89
Certificate issuer:       /CN=F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1
Certificate serial:       6D96C038621021D114CECC961F034CBDB8507503
Authority key identifier: F2:D6:3F:40:F7:83:F7:AA:C7:E0:11:51:9F:FB:0E:4F:8B:F0:5D:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36302e302f32332d3233203d3e20323635373530.roa
Signing time:             Tue 06 Jan 2026 19:44:39 +0000
ROA not before:           Tue 06 Jan 2026 19:39:39 +0000
ROA not after:            Tue 05 Jan 2027 19:44:39 +0000
asID:                     265750
IP address blocks:        170.150.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:96:c0:38:62:10:21:d1:14:ce:cc:96:1f:03:4c:bd:b8:50:75:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1
        Validity
            Not Before: Jan  6 19:39:39 2026 GMT
            Not After : Jan  5 19:44:39 2027 GMT
        Subject: CN=54B6663236EFCA0C22CFEB175A9CC2A9C5240389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:07:aa:a4:4c:ab:99:5d:f9:70:62:eb:0a:04:
                    f2:33:8b:06:9a:b2:ce:57:3f:5d:f1:f5:12:b3:43:
                    08:35:bd:84:7e:77:fd:1e:06:f5:20:df:de:61:6e:
                    20:a4:c4:ee:e3:7d:de:19:2c:24:73:3a:fb:8f:3b:
                    c9:0a:d1:ae:92:8e:61:fb:51:35:76:85:f0:be:09:
                    ec:79:9b:3a:9d:e7:32:63:0f:e2:b2:d1:10:56:1d:
                    8a:c4:6a:d4:21:ef:2a:aa:d3:04:78:5a:f2:d5:4a:
                    31:02:fb:5b:a7:7f:df:5d:1d:9f:5d:f8:5e:7a:4b:
                    6a:71:54:08:2b:d0:18:ed:9c:19:d1:2e:94:f7:28:
                    64:26:38:63:a9:be:e2:51:34:10:81:dc:b4:52:35:
                    b5:14:4c:69:6d:cc:f0:da:4a:88:0f:3b:fb:ff:b2:
                    70:9e:98:2b:ed:78:72:b7:0b:71:1c:47:ed:97:a6:
                    0a:10:c8:db:a3:77:4a:3a:6b:bb:88:7f:df:a7:b9:
                    1c:74:f9:0e:14:a2:a6:96:71:29:ba:7f:56:31:e8:
                    d1:2d:4d:9f:bb:5c:e5:ff:5f:b4:62:96:e4:0e:45:
                    05:a0:0a:7c:26:df:4f:57:0f:09:2e:38:fe:69:7c:
                    c1:db:53:0f:5c:dc:00:eb:93:f8:6f:7b:cc:45:42:
                    4b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B6:66:32:36:EF:CA:0C:22:CF:EB:17:5A:9C:C2:A9:C5:24:03:89
            X509v3 Authority Key Identifier:
                keyid:F2:D6:3F:40:F7:83:F7:AA:C7:E0:11:51:9F:FB:0E:4F:8B:F0:5D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36302e302f32332d3233203d3e20323635373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:16:99:a4:93:90:57:e7:0b:ca:60:3e:43:fe:d3:6c:a1:56:
         c2:de:de:61:d5:a1:5b:fe:be:55:9c:c6:4d:7b:6b:87:9a:ff:
         de:a2:d9:10:4d:c9:a3:08:ac:d5:ab:b9:2c:6f:80:e0:23:4b:
         cd:17:61:85:d6:ec:3e:b8:15:07:a3:80:f1:a5:de:b7:c8:46:
         e7:af:25:c3:6a:7a:9e:68:45:5e:43:bd:01:29:5b:0e:ef:7c:
         42:31:e7:30:35:83:7a:8c:66:0e:b3:bb:22:85:15:ff:75:c3:
         ce:87:96:6c:b4:38:b5:8d:4f:a9:26:5d:98:62:47:af:2f:fe:
         f3:14:de:e6:50:26:d9:a3:b8:d4:79:03:84:0d:c3:3d:fa:c2:
         9e:d7:66:73:14:f1:cd:68:de:95:e5:d2:f0:1c:61:de:77:f3:
         a4:5c:61:c3:eb:67:91:f7:54:e3:14:98:97:c0:02:a8:f3:cc:
         e1:11:66:15:0b:ca:6f:f6:97:9a:aa:45:84:73:ed:bd:d2:25:
         7f:e6:30:1f:7d:9a:26:93:89:7b:3d:7d:89:f5:ae:c1:26:ea:
         d5:a9:86:01:5c:99:a5:05:47:e4:5c:f8:b9:a7:31:e0:41:3d:
         ee:e8:3c:b8:c6:5a:4f:c0:6b:33:7a:e0:74:00:cd:94:43:60:
         0e:a5:88:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:49:19 2026 by rpki-client