This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/3137302e3234342e34382e302f32322d3234203d3e203631343837.roa
File:                     3137302e3234342e34382e302f32322d3234203d3e203631343837.roa (raw, json)
Hash identifier:          PC5nR5SSXWV+8b/evsw1md4nXhcnu7B5lupKsqLEmr4=
Subject key identifier:   DF:D7:FA:45:75:BE:A2:02:6D:EA:E9:96:CD:B0:F8:B6:F4:3D:40:E1
Certificate issuer:       /CN=1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE
Certificate serial:       4FBFFCC14DEF728C57060C42DC568CA6D9A73F60
Authority key identifier: 1F:23:04:7C:7E:B6:E1:CE:F1:8D:DE:AF:82:09:86:08:FD:96:EF:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/3137302e3234342e34382e302f32322d3234203d3e203631343837.roa
Signing time:             Tue 06 Jan 2026 19:18:24 +0000
ROA not before:           Tue 06 Jan 2026 19:13:24 +0000
ROA not after:            Tue 05 Jan 2027 19:18:24 +0000
asID:                     61487
IP address blocks:        170.244.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:bf:fc:c1:4d:ef:72:8c:57:06:0c:42:dc:56:8c:a6:d9:a7:3f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE
        Validity
            Not Before: Jan  6 19:13:24 2026 GMT
            Not After : Jan  5 19:18:24 2027 GMT
        Subject: CN=DFD7FA4575BEA2026DEAE996CDB0F8B6F43D40E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1b:10:32:e6:0b:8f:ad:dd:da:af:72:19:1f:
                    75:13:7e:6d:e8:1b:6b:f7:78:f9:da:40:65:40:8b:
                    7e:2d:82:92:ca:3b:a9:69:11:f3:64:71:b4:00:96:
                    87:db:bb:f3:50:0d:db:c7:8a:37:e5:28:80:a0:05:
                    a3:72:8f:06:bf:8d:a4:57:0f:6a:1a:a5:44:b2:60:
                    34:7d:21:bd:0a:c5:be:5b:66:81:eb:44:15:d8:b2:
                    b0:64:35:af:76:08:1c:45:4b:1e:13:ec:2d:82:9a:
                    4f:30:c3:a9:ee:91:da:16:77:c0:04:75:f7:2b:d3:
                    ba:cb:f9:11:23:57:05:07:91:58:cb:98:a1:ac:97:
                    b3:6d:7f:18:4a:1c:9a:d5:78:97:95:41:40:c3:4d:
                    62:89:bf:d9:d6:0f:1c:ae:43:cb:76:56:41:3b:0a:
                    74:91:d9:32:43:25:da:40:46:22:4b:2e:3c:61:21:
                    8f:74:a2:c4:74:68:63:25:3a:ad:14:f0:3e:62:f9:
                    04:12:b7:f1:25:32:e2:da:62:ef:ea:83:59:50:a3:
                    7f:6d:a9:72:b5:c5:2c:af:a9:19:3c:cc:1f:18:8b:
                    13:e1:26:68:c8:d0:af:76:7e:85:1f:d9:6b:e1:b6:
                    c4:83:98:5a:85:c6:8c:73:31:ed:de:83:ed:58:73:
                    f9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D7:FA:45:75:BE:A2:02:6D:EA:E9:96:CD:B0:F8:B6:F4:3D:40:E1
            X509v3 Authority Key Identifier:
                keyid:1F:23:04:7C:7E:B6:E1:CE:F1:8D:DE:AF:82:09:86:08:FD:96:EF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/3137302e3234342e34382e302f32322d3234203d3e203631343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:2f:5b:35:59:94:8f:4f:72:fe:d6:d0:35:1e:62:e7:06:88:
         e1:46:cd:dd:ee:c2:58:90:56:b0:74:cc:bc:0a:e2:11:41:a2:
         a9:0e:81:c1:58:6c:ff:3a:a4:96:05:c6:43:2c:6f:97:8c:ce:
         71:0f:07:fa:ec:8e:c6:6e:b0:38:b9:00:42:ed:17:da:66:4c:
         9e:17:65:2f:aa:5f:07:3f:03:ba:cf:d4:a8:85:66:07:0f:0d:
         43:dd:fd:fb:01:dc:6b:96:55:3b:d9:c9:da:41:76:0b:b3:97:
         f9:0f:6b:a6:76:7c:4f:27:74:1c:11:4a:9b:dc:aa:fb:7d:92:
         17:ad:ec:9c:66:3b:d0:cb:68:ee:09:95:7e:d6:96:06:ad:cd:
         49:86:ca:50:68:1e:df:b9:7c:23:7f:ff:05:9f:71:91:7b:95:
         a7:32:45:87:75:af:9a:6e:94:72:ab:32:e2:2c:8c:4a:df:6b:
         75:01:05:87:f1:51:da:e8:55:b4:5a:79:16:c4:0c:6d:9b:5f:
         99:49:3b:04:6e:dc:da:31:8b:b2:91:58:77:6f:1c:29:3e:3e:
         45:34:fa:d6:21:04:13:c1:db:03:76:36:1c:a7:9e:7e:73:8f:
         e0:92:1a:a4:a7:d7:79:79:49:20:82:44:93:8d:08:cc:54:b9:
         ad:2b:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:59:27 2026 by rpki-client