This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/3137302e38312e3134372e302f32342d3234203d3e20323732313138.roa
File:                     3137302e38312e3134372e302f32342d3234203d3e20323732313138.roa (raw, json)
Hash identifier:          WXi9FisDfDN/smKFUFwYZLvihJHnwS4WjYe6lAACNjc=
Subject key identifier:   1E:5D:F1:09:F9:59:CE:E1:A1:59:02:EB:88:B6:B9:02:FB:D2:C6:96
Certificate issuer:       /CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
Certificate serial:       77621619B4F69D7BDF04907D635B48F48ADBD639
Authority key identifier: 4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/3137302e38312e3134372e302f32342d3234203d3e20323732313138.roa
Signing time:             Wed 05 Nov 2025 13:55:00 +0000
ROA not before:           Wed 05 Nov 2025 13:50:00 +0000
ROA not after:            Wed 04 Nov 2026 13:55:00 +0000
asID:                     272118
IP address blocks:        170.81.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 13:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:62:16:19:b4:f6:9d:7b:df:04:90:7d:63:5b:48:f4:8a:db:d6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
        Validity
            Not Before: Nov  5 13:50:00 2025 GMT
            Not After : Nov  4 13:55:00 2026 GMT
        Subject: CN=1E5DF109F959CEE1A15902EB88B6B902FBD2C696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:67:af:48:1c:c1:e5:81:fb:e6:ad:75:06:
                    5e:bd:e4:c2:a9:35:36:61:0d:15:f4:49:ef:e4:01:
                    0c:29:13:be:cc:6f:70:6c:24:2b:69:77:3e:57:11:
                    7e:80:1c:5b:13:c7:56:ac:7c:8f:d2:fb:aa:d3:76:
                    dd:a6:73:7e:85:a2:32:07:09:cd:0f:c9:7a:e3:db:
                    9c:24:0c:fd:67:a1:c1:29:4d:7c:0f:b7:d4:31:e1:
                    25:93:fe:c9:20:51:0b:1b:3c:f9:49:59:b2:da:2a:
                    b5:d8:f8:7e:30:64:23:b3:b0:5b:a7:7e:71:9c:27:
                    57:92:d0:54:b5:2b:30:2a:d7:60:b9:74:d3:75:01:
                    e0:8f:31:40:bc:4c:df:54:c5:85:61:99:fd:9c:18:
                    a4:19:1e:59:13:67:b0:66:66:ad:36:7e:bf:00:b8:
                    99:3a:f5:d8:71:ca:01:05:93:f8:80:17:95:f1:83:
                    79:19:40:82:19:de:0a:fa:a3:b8:de:9d:d5:20:48:
                    06:24:7c:4d:56:42:07:ea:e1:98:6f:16:80:ba:4c:
                    51:22:0a:de:39:fc:aa:7f:65:23:35:a8:29:12:d6:
                    af:19:40:35:11:47:22:ab:d9:dd:57:31:fd:b8:f2:
                    ab:95:b8:e0:15:1e:dc:7f:d3:d8:0c:76:98:50:d3:
                    cb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5D:F1:09:F9:59:CE:E1:A1:59:02:EB:88:B6:B9:02:FB:D2:C6:96
            X509v3 Authority Key Identifier:
                keyid:4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/3137302e38312e3134372e302f32342d3234203d3e20323732313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:e9:59:7f:71:ac:2e:65:de:3d:5b:4e:26:9a:d2:71:37:6f:
         1a:ee:a6:5b:33:a2:ba:6b:58:66:65:d9:dc:0d:5e:a2:83:7d:
         d7:78:16:27:86:a9:3e:9a:04:14:f1:4a:85:7f:d1:5f:78:df:
         c7:2e:b7:ad:8b:d5:34:87:49:97:5f:9a:9d:b9:6e:c6:3d:68:
         6e:cd:7a:f1:d6:fa:63:7a:52:96:75:dd:61:9f:87:18:a6:d3:
         9a:3d:81:78:55:e7:7d:80:3b:d8:b7:6f:13:ee:88:ad:c1:15:
         d2:f7:af:b7:86:f5:dd:30:7a:e0:90:21:65:73:58:17:7e:0b:
         ac:b9:41:5c:5f:a4:9c:b7:01:b5:41:69:35:66:11:00:b7:01:
         1b:b0:6a:97:cb:72:91:07:f6:16:c2:62:1f:b4:2b:47:77:d4:
         7a:26:41:2d:88:8e:fa:6e:af:c4:1a:ef:80:96:b1:19:6e:e3:
         3c:ac:65:95:d7:74:43:9e:33:93:da:69:84:09:cd:a2:88:39:
         91:7d:c4:25:03:b2:44:57:29:dc:03:dd:4d:c1:d9:62:32:72:
         20:a2:b7:71:fb:fa:26:4a:56:af:c2:f3:8f:83:6a:71:e6:18:
         b9:62:e6:6f:8a:bd:b9:f5:e6:67:a4:45:0f:a7:c7:9e:b5:ec:
         ba:f0:58:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:42:24 2025 by rpki-client