This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/3137302e3234342e35322e302f32322d3234203d3e20323635363333.roa
File:                     3137302e3234342e35322e302f32322d3234203d3e20323635363333.roa (raw, json)
Hash identifier:          UEXkXHEc5HwI3mSq5uf8fmxUMUz1DkhLOW94lrz9ocw=
Subject key identifier:   CC:36:AE:22:92:27:6F:2B:1D:DE:75:34:CD:83:50:92:C0:61:67:E1
Certificate issuer:       /CN=64CA902FE672A198EBE9410C4C09F2FFF81502BB
Certificate serial:       14E2A72D2C65F57F105546EC109842E58ED0D657
Authority key identifier: 64:CA:90:2F:E6:72:A1:98:EB:E9:41:0C:4C:09:F2:FF:F8:15:02:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/3137302e3234342e35322e302f32322d3234203d3e20323635363333.roa
Signing time:             Tue 06 Jan 2026 20:51:45 +0000
ROA not before:           Tue 06 Jan 2026 20:46:45 +0000
ROA not after:            Tue 05 Jan 2027 20:51:45 +0000
asID:                     265633
IP address blocks:        170.244.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e2:a7:2d:2c:65:f5:7f:10:55:46:ec:10:98:42:e5:8e:d0:d6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64CA902FE672A198EBE9410C4C09F2FFF81502BB
        Validity
            Not Before: Jan  6 20:46:45 2026 GMT
            Not After : Jan  5 20:51:45 2027 GMT
        Subject: CN=CC36AE2292276F2B1DDE7534CD835092C06167E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:77:93:e6:00:03:6c:08:0e:10:54:d0:78:43:
                    53:35:b7:43:b0:65:6b:6f:86:c6:40:4c:1b:37:b7:
                    c6:16:6b:7b:9b:b8:2b:33:7a:ac:01:e8:f9:0f:63:
                    2a:1c:af:28:fe:91:4a:b4:0a:6c:ce:d6:d1:b2:8b:
                    ea:b7:4e:cf:83:64:c6:37:28:74:61:7b:9c:ed:16:
                    9e:56:03:4d:40:c9:46:8c:89:0d:6f:42:be:b1:b1:
                    93:80:58:d2:a5:ee:07:30:76:b8:0c:2d:d3:67:2b:
                    a6:7a:08:84:ae:ba:e5:f3:3d:d8:33:3a:48:56:b2:
                    5f:c8:f9:73:89:e1:d0:51:92:84:0b:4b:41:dc:c9:
                    2f:06:e7:0c:db:10:fd:97:ef:d0:41:0b:bf:2c:c7:
                    1c:5e:ca:91:5c:49:c4:fe:d7:f7:da:94:44:5b:b2:
                    4d:67:19:1e:11:15:08:2a:9c:dd:b7:d1:37:ae:e9:
                    c8:23:65:e3:e2:49:e2:16:24:b6:1b:86:cf:b3:f4:
                    83:4c:6b:f7:d9:ee:71:94:56:f1:74:64:a3:24:c3:
                    56:ea:54:d9:74:0b:2d:6f:a7:0d:bd:7e:ce:00:f5:
                    49:6d:58:f6:de:95:bf:8e:d5:8a:1f:d9:9a:06:8e:
                    ed:d0:5c:46:69:57:2a:f1:36:6a:fa:c1:e6:38:15:
                    11:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:36:AE:22:92:27:6F:2B:1D:DE:75:34:CD:83:50:92:C0:61:67:E1
            X509v3 Authority Key Identifier:
                keyid:64:CA:90:2F:E6:72:A1:98:EB:E9:41:0C:4C:09:F2:FF:F8:15:02:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/3137302e3234342e35322e302f32322d3234203d3e20323635363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:c6:38:b4:9c:fe:55:86:aa:97:98:86:96:97:41:48:24:86:
         e5:fe:56:44:4c:8d:72:9c:01:47:76:88:73:fa:fe:c7:55:b2:
         77:8f:89:df:41:21:19:a4:5d:80:41:e1:60:cb:80:91:26:58:
         39:b0:ae:be:cb:ae:b1:fc:ee:30:7f:a8:a8:7b:09:6b:f1:14:
         63:3b:96:02:bf:93:61:8f:97:33:ee:5f:29:33:a0:56:27:2d:
         f9:e8:13:0c:88:71:f2:26:e4:c9:d9:2f:f5:98:62:eb:6c:f1:
         61:48:bf:91:a8:29:08:14:13:43:9d:1f:24:ea:5b:bf:72:ab:
         8c:a5:b8:ef:d6:0d:0d:ff:da:00:50:e6:dc:e7:9f:e7:19:19:
         a5:16:bf:e5:ad:94:55:98:78:d5:74:69:26:ab:65:1d:96:59:
         60:2f:6a:c7:d7:23:f1:f9:2e:77:0a:0f:d1:67:60:74:6b:c5:
         72:90:16:88:bf:be:7b:d4:b0:d1:d5:9b:97:6e:cb:65:8f:aa:
         64:54:3a:d2:31:41:67:06:a5:75:5d:1a:4d:84:9d:41:b3:d6:
         ff:fa:23:a9:66:77:7f:12:69:2a:54:25:36:4b:b3:f1:f8:d5:
         02:bf:ad:8f:60:c6:49:d8:06:a7:fa:9d:61:18:a5:9b:7c:ff:
         7f:11:19:18
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFOKnLSxl9X8QVUbsEJhC5Y7Q1lcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRDQTkwMkZFNjcyQTE5OEVCRTk0MTBDNEMwOUYyRkZG
ODE1MDJCQjAeFw0yNjAxMDYyMDQ2NDVaFw0yNzAxMDUyMDUxNDVaMDMxMTAvBgNV
BAMTKENDMzZBRTIyOTIyNzZGMkIxRERFNzUzNENEODM1MDkyQzA2MTY3RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgd5PmAANsCA4QVNB4Q1M1t0Ow
ZWtvhsZATBs3t8YWa3ubuCszeqwB6PkPYyocryj+kUq0CmzO1tGyi+q3Ts+DZMY3
KHRhe5ztFp5WA01AyUaMiQ1vQr6xsZOAWNKl7gcwdrgMLdNnK6Z6CISuuuXzPdgz
OkhWsl/I+XOJ4dBRkoQLS0HcyS8G5wzbEP2X79BBC78sxxxeypFcScT+1/falERb
sk1nGR4RFQgqnN230Teu6cgjZePiSeIWJLYbhs+z9INMa/fZ7nGUVvF0ZKMkw1bq
VNl0Cy1vpw29fs4A9UltWPbelb+O1Yof2ZoGju3QXEZpVyrxNmr6weY4FRG3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUzDauIpInbysd3nU0zYNQksBhZ+EwHwYDVR0j
BBgwFoAUZMqQL+ZyoZjr6UEMTAny//gVArswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82M0I5OEY5M0QwMUU5MEJGRTVENTZCRkJENDVEMkE0NDFC
RTNCNzkwNjk1QTk4REQ4QkRGNkJCRjNDQzNEQzJELzAvNjRDQTkwMkZFNjcyQTE5
OEVCRTk0MTBDNEMwOUYyRkZGODE1MDJCQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NENBOTAyRkU2NzJBMTk4RUJF
OTQxMEM0QzA5RjJGRkY4MTUwMkJCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjNCOThGOTNEMDFFOTBCRkU1RDU2QkZCRDQ1RDJBNDQxQkUzQjc5MDY5
NUE5OEREOEJERjZCQkYzQ0MzREMyRC8wLzMxMzczMDJlMzIzNDM0MmUzNTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzMzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqvQ0
MA0GCSqGSIb3DQEBCwUAA4IBAQBWxji0nP5VhqqXmIaWl0FIJIbl/lZETI1ynAFH
dohz+v7HVbJ3j4nfQSEZpF2AQeFgy4CRJlg5sK6+y66x/O4wf6ioewlr8RRjO5YC
v5Nhj5cz7l8pM6BWJy356BMMiHHyJuTJ2S/1mGLrbPFhSL+RqCkIFBNDnR8k6lu/
cquMpbjv1g0N/9oAUObc55/nGRmlFr/lrZRVmHjVdGkmq2UdlllgL2rH1yPx+S53
Cg/RZ2B0a8VykBaIv7571LDR1ZuXbstlj6pkVDrSMUFnBqV1XRpNhJ1Bs9b/+iOp
Znd/EmkqVCU2S7Px+NUCv62PYMZJ2Aan+p1hGKWbfP9/ERkY
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:42 2026 by rpki-client