This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3137302e302f32342d3234203d3e20323635373436.roa
File:                     3132382e3230312e3137302e302f32342d3234203d3e20323635373436.roa (raw, json)
Hash identifier:          vXe0kNrskVvu4+TubFCToBSNBUL0ijGM4cx4RFPnp+E=
Subject key identifier:   8E:38:0D:1F:20:8A:76:77:9F:C6:F0:8C:2E:B1:79:ED:CD:1B:0B:31
Certificate issuer:       /CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
Certificate serial:       7D5ACA815A8D9378AE8EC2F4DDC5332CC8A28554
Authority key identifier: D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3137302e302f32342d3234203d3e20323635373436.roa
Signing time:             Tue 06 Jan 2026 19:28:49 +0000
ROA not before:           Tue 06 Jan 2026 19:23:49 +0000
ROA not after:            Tue 05 Jan 2027 19:28:49 +0000
asID:                     265746
IP address blocks:        128.201.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5a:ca:81:5a:8d:93:78:ae:8e:c2:f4:dd:c5:33:2c:c8:a2:85:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
        Validity
            Not Before: Jan  6 19:23:49 2026 GMT
            Not After : Jan  5 19:28:49 2027 GMT
        Subject: CN=8E380D1F208A76779FC6F08C2EB179EDCD1B0B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6d:80:08:1f:8a:a6:fd:69:19:6f:78:8e:82:
                    92:73:41:7a:9b:6a:5e:e2:dc:18:0f:95:2d:e1:52:
                    2c:e1:6b:24:ff:c6:11:8f:a7:c8:29:b2:7c:cb:97:
                    0a:99:d0:38:10:5a:28:84:16:18:d7:11:d8:71:96:
                    be:e5:18:28:05:c2:44:c3:3d:a2:c8:8a:f8:44:ed:
                    aa:1b:a8:45:3f:ee:20:5d:f6:38:da:c5:49:8b:4b:
                    2e:39:e8:e2:9e:36:d5:50:c8:ce:4e:5f:96:2a:81:
                    47:5d:d6:52:a4:6d:70:a0:55:12:ed:2b:c6:7f:51:
                    d5:b9:44:0a:49:a6:1c:80:e9:25:22:cc:59:38:4b:
                    8a:6a:c4:58:f1:15:40:5a:f1:55:0f:7f:31:da:21:
                    97:b7:04:db:20:a5:b5:a0:f8:f0:97:e8:8f:55:15:
                    61:50:24:39:c4:93:38:0c:cc:e1:c2:c9:7d:bb:dd:
                    05:08:8f:5b:82:7d:2a:1f:ea:98:9b:4e:98:75:76:
                    47:c7:61:0d:db:70:76:38:6d:ca:41:98:9e:9d:58:
                    8c:28:9a:ca:15:5d:62:ff:1e:c0:9f:37:84:e3:af:
                    1c:5b:c5:48:bf:63:d3:a8:4d:6b:d7:43:18:27:a7:
                    7c:c7:e5:28:c3:44:e8:a7:78:67:0c:b1:f2:b5:fe:
                    89:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:38:0D:1F:20:8A:76:77:9F:C6:F0:8C:2E:B1:79:ED:CD:1B:0B:31
            X509v3 Authority Key Identifier:
                keyid:D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3137302e302f32342d3234203d3e20323635373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:5a:09:02:ee:46:39:97:95:f3:f3:16:f4:72:e3:a0:30:b6:
         a8:65:19:65:fa:db:16:3a:6e:67:42:bd:ee:c6:7a:85:5a:80:
         1f:64:44:6f:16:9e:23:08:6f:cc:3c:a7:4d:0b:4f:43:dd:29:
         e5:e0:6e:cc:19:29:9a:a4:d6:40:67:7e:90:79:2f:cd:32:00:
         82:1e:b9:94:fc:d9:e0:08:91:bb:c3:36:01:48:f3:f8:2e:22:
         79:17:c2:07:8c:8f:28:47:77:4b:1e:4f:8a:ca:08:62:f2:c9:
         8c:d8:77:45:c0:6d:0f:ce:8d:dc:34:55:b3:e7:b0:5f:e8:ae:
         d1:47:24:ae:ee:e0:0d:4a:59:37:06:89:b6:a3:eb:16:1c:26:
         c5:d5:b5:03:65:a5:a4:62:af:cc:12:da:99:24:d8:ad:ef:41:
         5c:99:bc:76:04:ff:b3:17:cd:56:09:2d:a5:b8:a2:53:49:ac:
         40:11:c1:fc:00:72:5a:d8:2a:01:d6:4b:05:e1:52:31:9f:ac:
         c8:76:1e:e3:bb:2a:c2:95:1d:b1:ff:aa:d6:ac:4c:bc:a6:17:
         92:4d:fb:ad:98:b6:04:2d:6f:ea:16:1e:53:f3:b5:3f:74:e4:
         89:40:b7:5d:b6:d0:12:93:32:a5:11:30:a2:b7:38:bd:a0:c6:
         03:d4:06:91
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUfVrKgVqNk3iujsL03cUzLMiihVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0OTBBQzY5M0IwMEMxQkY1MTU4MkIxNjkxRkMyREM0
NkI3MUZBOTAeFw0yNjAxMDYxOTIzNDlaFw0yNzAxMDUxOTI4NDlaMDMxMTAvBgNV
BAMTKDhFMzgwRDFGMjA4QTc2Nzc5RkM2RjA4QzJFQjE3OUVEQ0QxQjBCMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkbYAIH4qm/WkZb3iOgpJzQXqb
al7i3BgPlS3hUizhayT/xhGPp8gpsnzLlwqZ0DgQWiiEFhjXEdhxlr7lGCgFwkTD
PaLIivhE7aobqEU/7iBd9jjaxUmLSy456OKeNtVQyM5OX5YqgUdd1lKkbXCgVRLt
K8Z/UdW5RApJphyA6SUizFk4S4pqxFjxFUBa8VUPfzHaIZe3BNsgpbWg+PCX6I9V
FWFQJDnEkzgMzOHCyX273QUIj1uCfSof6pibTph1dkfHYQ3bcHY4bcpBmJ6dWIwo
msoVXWL/HsCfN4TjrxxbxUi/Y9OoTWvXQxgnp3zH5SjDROineGcMsfK1/onvAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUjjgNHyCKdnefxvCMLrF57c0bCzEwHwYDVR0j
BBgwFoAU1UkKxpOwDBv1FYKxaR/C3Ea3H6kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NTNFOTE1Qzc4QjExNUVEMUVGNkI4RDYxMzRBMkQ2NERC
NjUxNTIyM0IwODJGRDRGQjI3QUI4MTQ2QUE4OEEyLzAvRDU0OTBBQzY5M0IwMEMx
QkY1MTU4MkIxNjkxRkMyREM0NkI3MUZBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENTQ5MEFDNjkzQjAwQzFCRjUx
NTgyQjE2OTFGQzJEQzQ2QjcxRkE5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTUzRTkxNUM3OEIxMTVFRDFFRjZCOEQ2MTM0QTJENjREQjY1MTUyMjNC
MDgyRkQ0RkIyN0FCODE0NkFBODhBMi8wLzMxMzIzODJlMzIzMDMxMmUzMTM3MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNzM0MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACA
yaowDQYJKoZIhvcNAQELBQADggEBAJNaCQLuRjmXlfPzFvRy46AwtqhlGWX62xY6
bmdCve7GeoVagB9kRG8WniMIb8w8p00LT0PdKeXgbswZKZqk1kBnfpB5L80yAIIe
uZT82eAIkbvDNgFI8/guInkXwgeMjyhHd0seT4rKCGLyyYzYd0XAbQ/Ojdw0VbPn
sF/ortFHJK7u4A1KWTcGibaj6xYcJsXVtQNlpaRir8wS2pkk2K3vQVyZvHYE/7MX
zVYJLaW4olNJrEARwfwAclrYKgHWSwXhUjGfrMh2HuO7KsKVHbH/qtasTLymF5JN
+62YtgQtb+oWHlPztT905IlAt1220BKTMqURMKK3OL2gxgPUBpE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:05 2026 by rpki-client