This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36332e302f32342d3234203d3e20323635373530.roa
File:                     3137302e3135302e36332e302f32342d3234203d3e20323635373530.roa (raw, json)
Hash identifier:          aDqF5YdXVUBeDbAG+9ea2oDODoYKRaQ+dMJAnBIgHSM=
Subject key identifier:   75:5C:F3:EE:B7:B7:87:51:CD:57:E1:C9:31:0C:8F:6D:2B:48:61:35
Certificate issuer:       /CN=F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1
Certificate serial:       4143D7DE196A1DA064CAD147385DE59DAF82CC72
Authority key identifier: F2:D6:3F:40:F7:83:F7:AA:C7:E0:11:51:9F:FB:0E:4F:8B:F0:5D:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36332e302f32342d3234203d3e20323635373530.roa
Signing time:             Tue 06 Jan 2026 19:44:38 +0000
ROA not before:           Tue 06 Jan 2026 19:39:38 +0000
ROA not after:            Tue 05 Jan 2027 19:44:38 +0000
asID:                     265750
IP address blocks:        170.150.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:43:d7:de:19:6a:1d:a0:64:ca:d1:47:38:5d:e5:9d:af:82:cc:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1
        Validity
            Not Before: Jan  6 19:39:38 2026 GMT
            Not After : Jan  5 19:44:38 2027 GMT
        Subject: CN=755CF3EEB7B78751CD57E1C9310C8F6D2B486135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c7:87:eb:58:14:4b:ec:b0:c3:b2:c2:b6:82:
                    18:d2:72:b8:c0:29:01:40:a8:a1:6e:55:65:66:85:
                    11:56:29:0d:75:54:09:af:c2:b9:08:73:58:af:54:
                    47:20:af:3a:da:02:5b:2d:ec:f7:bb:aa:92:23:c9:
                    f3:2e:a9:fb:a6:59:7e:e0:53:26:fd:1f:01:1d:fa:
                    6a:cd:9a:59:09:05:c3:0f:4b:f3:ea:3d:ed:4d:4d:
                    35:a7:65:6e:b1:0b:3d:f2:65:e3:31:ba:f9:42:4e:
                    4a:27:d4:e7:40:6f:66:37:e9:81:f3:45:16:cc:70:
                    e2:80:a8:87:ce:c0:96:f3:ed:55:4b:af:1a:6f:14:
                    c4:cc:22:ef:a2:f8:42:fd:c2:7a:e6:c1:fb:d3:90:
                    37:fa:34:75:33:71:6d:85:58:58:0a:7a:44:58:aa:
                    38:af:87:72:8b:c3:97:e3:79:c6:28:07:7c:7f:67:
                    ea:91:8c:ea:de:7a:ad:11:c6:c3:1f:42:63:4e:bf:
                    f3:17:97:cb:73:7a:83:5f:45:1c:fd:63:b9:20:4e:
                    e5:af:e9:41:c1:0d:73:c3:20:d4:9c:9a:3a:6a:f4:
                    73:84:f4:a4:8a:78:47:5e:4d:52:fd:97:99:3b:d7:
                    ea:b2:a6:69:13:55:bc:db:43:e4:e5:ee:94:47:78:
                    79:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5C:F3:EE:B7:B7:87:51:CD:57:E1:C9:31:0C:8F:6D:2B:48:61:35
            X509v3 Authority Key Identifier:
                keyid:F2:D6:3F:40:F7:83:F7:AA:C7:E0:11:51:9F:FB:0E:4F:8B:F0:5D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36332e302f32342d3234203d3e20323635373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:dc:7e:cf:b0:c9:d9:3d:32:19:69:5e:c4:9c:f6:4a:b8:e1:
         cf:68:4f:8c:8e:b1:d0:d4:27:a9:77:31:f9:3b:73:a9:8a:b4:
         0d:e5:38:de:e9:7f:6a:75:21:d5:bf:8e:d1:e1:b0:70:2e:48:
         99:7f:54:44:76:c3:2d:83:d8:3f:90:03:1e:00:5f:b2:d1:69:
         27:8e:5f:25:4b:ca:fc:05:cc:cb:6f:3a:bd:95:d0:c0:92:92:
         96:50:77:d1:c2:24:91:9f:3c:02:5d:a0:76:4d:b6:9b:dd:98:
         df:ab:62:2b:f3:26:e3:5d:d1:26:8f:27:04:ed:65:f7:e4:81:
         68:c5:45:97:76:a4:e6:96:35:59:ec:29:da:40:43:ad:74:0f:
         49:86:24:89:56:ae:1b:c7:3e:0d:75:69:2a:b7:35:40:6e:ed:
         06:06:53:5a:34:06:42:38:77:7c:8b:80:18:f7:08:a2:15:1f:
         ab:5b:75:79:06:b9:f2:5f:89:e4:e3:e5:ab:c6:e6:94:fd:bc:
         77:a9:02:b5:21:65:8f:82:b1:c3:33:8a:aa:03:d3:fe:ab:21:
         49:f0:e4:84:c2:85:f5:fb:61:63:bd:96:db:5c:b3:89:d8:f5:
         2c:e6:3b:eb:20:3b:73:5b:35:e8:8a:d7:b7:63:77:13:78:09:
         da:1f:b3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:34 2026 by rpki-client