This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3137302e302f32332d3234203d3e20333934333533.roa
File:                     3137302e3234372e3137302e302f32332d3234203d3e20333934333533.roa (raw, json)
Hash identifier:          7t18dmUZAHbAHQannT7e75oDxkEVZr2L/C4mGXHdG2g=
Subject key identifier:   FA:3A:51:E8:CE:BF:C3:B4:90:FB:2C:BF:8B:24:77:9E:CB:E1:C5:29
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       7D3E7ADAD3DD3C89CC62EE767FB85B4E3506EF0B
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3137302e302f32332d3234203d3e20333934333533.roa
Signing time:             Tue 06 Jan 2026 19:15:30 +0000
ROA not before:           Tue 06 Jan 2026 19:10:30 +0000
ROA not after:            Tue 05 Jan 2027 19:15:30 +0000
asID:                     394353
IP address blocks:        170.247.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3e:7a:da:d3:dd:3c:89:cc:62:ee:76:7f:b8:5b:4e:35:06:ef:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Jan  6 19:10:30 2026 GMT
            Not After : Jan  5 19:15:30 2027 GMT
        Subject: CN=FA3A51E8CEBFC3B490FB2CBF8B24779ECBE1C529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:17:44:25:5b:6e:8c:b7:01:14:d8:cc:99:64:
                    5b:40:bc:88:46:2f:08:fd:50:36:93:b8:f3:d4:20:
                    85:06:2d:2b:dc:52:fd:a8:f8:f9:75:89:a5:d1:41:
                    70:39:eb:83:78:37:3b:1f:64:62:7e:71:17:03:1f:
                    25:be:37:61:14:e9:92:d3:69:56:74:97:f7:6b:60:
                    e5:c3:2c:8b:49:6f:61:47:3c:a0:25:cd:27:f9:1b:
                    02:d0:b3:16:1a:14:54:26:3d:e2:0d:ed:8b:fb:f9:
                    86:52:8c:82:07:83:88:c4:a3:31:83:8d:e2:c8:48:
                    9f:d9:25:9e:f0:5e:78:4c:c3:4e:15:2b:5c:cc:72:
                    a1:fb:ce:d6:5c:ca:f1:02:2f:1b:82:55:7b:d7:7a:
                    7b:d0:05:9e:68:68:0d:8f:06:2b:f7:45:3d:65:bf:
                    5b:4e:79:8c:78:ba:79:c2:53:15:2f:d6:6c:81:ef:
                    2a:07:59:13:56:59:0f:cd:1f:a7:4b:45:d1:9e:a1:
                    32:5f:5b:4f:e3:c1:3d:5e:63:00:4d:df:fc:13:97:
                    f5:c6:51:b5:3e:9c:41:03:d6:5f:9a:54:40:b9:6b:
                    90:48:69:7e:41:ce:c9:19:58:5d:36:65:ab:f1:f9:
                    16:a6:7c:9f:ba:34:e8:7b:02:08:09:7a:6d:43:ac:
                    5f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3A:51:E8:CE:BF:C3:B4:90:FB:2C:BF:8B:24:77:9E:CB:E1:C5:29
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3137302e302f32332d3234203d3e20333934333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:28:50:2a:8b:2f:8c:a9:1b:2a:7a:54:74:eb:29:39:85:a2:
         75:ec:0c:a5:b3:95:d7:43:81:16:e8:bf:3b:f1:94:09:34:15:
         db:bd:7a:14:c2:96:57:e9:f1:0b:26:e4:5d:ae:bf:bf:31:0c:
         39:5b:f3:ac:33:79:f1:e4:95:f8:b3:3c:86:1d:06:ec:cb:77:
         c9:8b:c8:7e:88:7e:87:45:fd:2c:68:69:92:7b:52:c4:47:a4:
         76:f3:93:9d:3c:a8:e9:6c:b9:b6:76:e8:51:27:d9:42:bf:df:
         1c:07:3e:11:71:17:fe:44:9c:fa:aa:6d:5f:57:77:d8:e2:60:
         41:77:b4:d9:95:8a:a9:e8:ce:4d:ad:2b:26:27:97:0d:1d:1c:
         57:e9:1d:3f:6d:ce:6f:3e:87:90:41:78:1d:07:5b:8d:02:a9:
         57:42:03:a1:c3:44:9a:ba:a7:92:41:2a:e1:b2:7f:09:7a:0e:
         9a:2d:ec:75:91:86:79:c6:b4:bf:00:32:d0:5d:76:4f:3b:8b:
         3e:9e:61:f4:cb:f2:1a:4d:df:3f:c3:f8:33:c1:ff:da:0f:70:
         41:1a:92:a8:d0:75:aa:9b:b3:c0:6b:78:68:a6:77:8e:d9:08:
         db:9d:16:46:4f:3d:2b:60:ac:50:c6:68:d3:a4:af:0f:79:3d:
         2b:35:05:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:47:40 2026 by rpki-client