This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37302e302f32342d3234203d3e20323634383336.roa
File:                     3135372e3130302e37302e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          1DsWNkOO1QXAI9jd5guDlzQxYmNdp0jlU0/dxAId7b4=
Subject key identifier:   31:32:A2:6F:2C:81:64:46:04:87:8F:93:D6:83:60:3C:F0:6A:0F:93
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       7FD9EC4837876F1588680A485206640EDA789488
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37302e302f32342d3234203d3e20323634383336.roa
Signing time:             Tue 06 Jan 2026 20:58:44 +0000
ROA not before:           Tue 06 Jan 2026 20:53:44 +0000
ROA not after:            Tue 05 Jan 2027 20:58:44 +0000
asID:                     264836
IP address blocks:        157.100.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d9:ec:48:37:87:6f:15:88:68:0a:48:52:06:64:0e:da:78:94:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Jan  6 20:53:44 2026 GMT
            Not After : Jan  5 20:58:44 2027 GMT
        Subject: CN=3132A26F2C81644604878F93D683603CF06A0F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:f4:ef:1b:38:fd:79:40:82:74:7a:ce:a7:
                    2e:b6:2b:da:7e:48:3a:06:df:5c:21:ab:a2:91:a6:
                    5c:db:3d:de:b9:02:fc:74:fd:74:00:3c:79:a1:32:
                    dc:61:2c:d8:01:c2:fb:a8:fc:82:6c:2a:46:c1:c7:
                    71:9e:f9:1f:b7:47:ce:ad:6c:59:88:d9:d1:c1:39:
                    43:59:a8:9e:93:6d:3e:b3:d3:6a:22:db:be:9e:a2:
                    20:f3:77:e5:b2:4c:7f:1c:60:f3:62:1a:30:d3:1b:
                    ad:b0:3f:3e:1a:d9:a0:ef:d5:f9:bc:80:94:b3:01:
                    f5:e1:58:d3:2a:f1:f9:75:86:f4:ff:8c:fc:8f:2b:
                    79:22:57:19:f8:4f:9d:c6:d2:fb:07:ba:0a:0a:68:
                    05:0f:59:35:fa:21:19:bb:e1:ec:d6:6e:60:55:06:
                    56:e2:de:16:19:7e:7e:73:cc:f5:40:1e:63:27:09:
                    3b:eb:a4:0b:23:9d:cc:d3:de:f4:83:16:da:1b:b1:
                    22:c7:3f:ea:ee:92:ca:e4:fc:ac:b0:9a:72:7c:6d:
                    b1:5f:1e:b9:43:46:d3:af:f4:61:c9:e8:09:4e:42:
                    4b:aa:bb:97:6d:1c:94:13:d7:55:05:64:64:ba:d3:
                    6a:d4:1f:89:d3:6a:6a:b5:4c:db:db:71:ab:5a:ca:
                    3f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:32:A2:6F:2C:81:64:46:04:87:8F:93:D6:83:60:3C:F0:6A:0F:93
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e37302e302f32342d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:69:de:ae:0e:3b:90:4b:2c:72:17:6b:aa:fc:8f:21:01:45:
         3e:6c:28:8f:09:8f:87:fa:d7:9c:1a:19:f5:29:9b:39:14:73:
         8e:9f:1d:ff:c4:3d:bb:8e:cb:85:40:2b:a8:c1:78:71:2a:13:
         99:5a:6f:52:ee:d7:52:62:a4:02:93:b6:9a:aa:fc:7e:1f:66:
         25:d3:10:91:f9:67:5a:07:f6:d1:5c:55:8e:7e:22:ab:43:04:
         f7:34:70:5c:56:3b:98:c3:c5:d1:d6:5c:70:8b:03:33:0a:d5:
         25:5a:5d:ff:e1:4b:c6:aa:b6:26:7a:14:7c:77:52:d9:c5:00:
         82:0b:f8:d8:0e:e4:85:c3:33:24:a3:4c:45:53:4f:3a:ed:8d:
         ef:8e:70:13:98:8c:eb:45:53:68:92:91:73:fb:6a:99:53:66:
         66:21:82:dc:0b:b2:7a:e1:60:09:9a:0b:1b:70:d9:81:f9:05:
         42:7b:06:15:e9:51:77:86:6f:4d:16:65:a8:5e:0d:2f:86:1f:
         38:94:eb:8a:03:87:3d:98:18:1b:e2:0e:8f:26:69:69:1a:1f:
         ae:66:c7:8f:46:8d:fb:56:3f:c5:27:c2:b0:ad:78:d5:79:2e:
         2b:5c:7f:7b:77:cb:54:e3:bf:06:fa:50:c4:44:07:b2:74:fe:
         ee:db:3e:18
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUf9nsSDeHbxWIaApIUgZkDtp4lIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc1NzA1MTFENkNGNTFFM0FCQUZCMkY3NTZGRTE3RjUy
OTFEODY0ODAeFw0yNjAxMDYyMDUzNDRaFw0yNzAxMDUyMDU4NDRaMDMxMTAvBgNV
BAMTKDMxMzJBMjZGMkM4MTY0NDYwNDg3OEY5M0Q2ODM2MDNDRjA2QTBGOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7vTvGzj9eUCCdHrOpy62K9p+
SDoG31whq6KRplzbPd65Avx0/XQAPHmhMtxhLNgBwvuo/IJsKkbBx3Ge+R+3R86t
bFmI2dHBOUNZqJ6TbT6z02oi276eoiDzd+WyTH8cYPNiGjDTG62wPz4a2aDv1fm8
gJSzAfXhWNMq8fl1hvT/jPyPK3kiVxn4T53G0vsHugoKaAUPWTX6IRm74ezWbmBV
Blbi3hYZfn5zzPVAHmMnCTvrpAsjnczT3vSDFtobsSLHP+ruksrk/KywmnJ8bbFf
HrlDRtOv9GHJ6AlOQkuqu5dtHJQT11UFZGS602rUH4nTamq1TNvbcatayj//AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUMTKibyyBZEYEh4+T1oNgPPBqD5MwHwYDVR0j
BBgwFoAUd1cFEdbPUeOrr7L3Vv4X9SkdhkgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODM4NjlERjlENkE4Q0Q2Njg2RjExQzJBMTA0MEY3RkU4
QUI2ODZBQjI2N0QyODcxQkU5NzI5MUIzOThGMUNBLzAvNzc1NzA1MTFENkNGNTFF
M0FCQUZCMkY3NTZGRTE3RjUyOTFEODY0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NzU3MDUxMUQ2Q0Y1MUUzQUJB
RkIyRjc1NkZFMTdGNTI5MUQ4NjQ4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTgzODY5REY5RDZBOENENjY4NkYxMUMyQTEwNDBGN0ZFOEFCNjg2QUIy
NjdEMjg3MUJFOTcyOTFCMzk4RjFDQS8wLzMxMzUzNzJlMzEzMDMwMmUzNzMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0MzgzMzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnWRG
MA0GCSqGSIb3DQEBCwUAA4IBAQB1ad6uDjuQSyxyF2uq/I8hAUU+bCiPCY+H+tec
Ghn1KZs5FHOOnx3/xD27jsuFQCuowXhxKhOZWm9S7tdSYqQCk7aaqvx+H2Yl0xCR
+WdaB/bRXFWOfiKrQwT3NHBcVjuYw8XR1lxwiwMzCtUlWl3/4UvGqrYmehR8d1LZ
xQCCC/jYDuSFwzMko0xFU0867Y3vjnATmIzrRVNokpFz+2qZU2ZmIYLcC7J64WAJ
mgsbcNmB+QVCewYV6VF3hm9NFmWoXg0vhh84lOuKA4c9mBgb4g6PJmlpGh+uZseP
Ro37Vj/FJ8KwrXjVeS4rXH97d8tU478G+lDERAeydP7u2z4Y
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:06:27 2026 by rpki-client