This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/3137302e37382e34342e302f32322d3234203d3e20323634373931.roa
File:                     3137302e37382e34342e302f32322d3234203d3e20323634373931.roa (raw, json)
Hash identifier:          YSZTwM5c85XMwPt2P1sBCLYGevzOTU0yTFBCze3cfw8=
Subject key identifier:   73:A7:21:F8:40:0E:0E:21:8B:3B:F4:C5:A5:7B:91:02:88:1E:39:4A
Certificate issuer:       /CN=331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E
Certificate serial:       379460FC8F18A17D12F8A49BD083990761A2BA13
Authority key identifier: 33:16:61:CC:26:33:A6:AD:3E:DD:09:BF:EE:41:C8:33:7A:4D:5C:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/3137302e37382e34342e302f32322d3234203d3e20323634373931.roa
Signing time:             Tue 06 Jan 2026 19:36:21 +0000
ROA not before:           Tue 06 Jan 2026 19:31:21 +0000
ROA not after:            Tue 05 Jan 2027 19:36:21 +0000
asID:                     264791
IP address blocks:        170.78.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:94:60:fc:8f:18:a1:7d:12:f8:a4:9b:d0:83:99:07:61:a2:ba:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E
        Validity
            Not Before: Jan  6 19:31:21 2026 GMT
            Not After : Jan  5 19:36:21 2027 GMT
        Subject: CN=73A721F8400E0E218B3BF4C5A57B9102881E394A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:28:96:37:cf:80:c9:e1:ae:72:0a:91:9e:
                    73:d4:30:9c:ad:77:fc:c2:ba:f6:80:5f:14:4d:84:
                    04:ec:cb:57:43:85:7b:b5:c2:ac:52:9a:df:2c:e2:
                    2e:62:f8:7a:29:fd:f2:d5:01:15:98:42:4e:96:77:
                    1d:be:86:5e:3d:c0:34:59:84:fd:61:8e:32:7f:50:
                    7e:ec:96:02:4e:3e:89:ab:38:fe:cf:2b:79:67:6a:
                    30:09:d6:d0:56:a5:cc:e1:83:db:cb:5e:d2:ab:ad:
                    43:10:4c:ed:73:e2:d7:43:ad:c4:20:fa:0f:c6:0b:
                    22:4b:72:24:c7:2f:ff:29:9b:9f:d4:32:23:ab:24:
                    3b:f4:9f:64:c3:f5:f6:1a:29:d0:f2:73:0e:15:f4:
                    ee:c3:5b:d3:ef:1b:81:96:90:00:aa:60:26:d5:43:
                    51:b9:78:c8:48:9b:5c:41:bc:a8:89:93:f7:3a:07:
                    c2:9d:cc:a2:8d:8f:77:5a:30:8d:e4:f5:f7:e8:ff:
                    bb:11:f3:20:a8:40:51:d1:4b:95:8a:57:e6:fa:31:
                    d9:15:70:78:12:b5:dd:31:52:b7:d2:47:d3:76:1a:
                    e2:33:e8:eb:4d:ff:fd:f7:ad:43:12:5a:cf:63:ee:
                    8e:e3:fe:e0:f5:14:96:66:e4:32:f9:48:71:89:74:
                    82:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A7:21:F8:40:0E:0E:21:8B:3B:F4:C5:A5:7B:91:02:88:1E:39:4A
            X509v3 Authority Key Identifier:
                keyid:33:16:61:CC:26:33:A6:AD:3E:DD:09:BF:EE:41:C8:33:7A:4D:5C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/3137302e37382e34342e302f32322d3234203d3e20323634373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:ce:65:b8:85:49:cd:a8:96:77:01:ab:43:18:a7:17:7f:28:
         b2:2f:14:3e:57:e4:4d:28:95:f9:7b:49:2f:2e:28:af:d9:89:
         cb:8b:ea:f7:50:c7:d3:f2:04:3a:38:2c:63:1c:02:f2:d4:b6:
         63:0a:34:a7:fc:ea:7a:ec:65:a4:ea:b9:e2:d0:66:09:70:42:
         27:e6:4d:11:16:7c:bc:89:d8:6d:af:68:5f:d5:46:a8:c5:7b:
         aa:93:28:36:59:41:70:65:eb:57:1e:86:7f:5e:14:f0:47:84:
         b0:6b:48:47:47:d8:62:ca:fd:70:0f:66:8e:12:ff:81:0a:38:
         67:74:e6:04:6e:33:67:a8:21:fa:48:98:e7:60:f0:67:0e:d2:
         ab:a9:b6:52:18:a1:29:2f:4b:4f:bd:a7:62:14:2b:81:4b:d2:
         46:d6:75:75:d4:d2:1d:6c:5a:e7:a7:ee:2a:53:0c:a2:f8:0c:
         3b:40:10:f8:ea:ae:20:ff:26:63:00:c6:41:99:1e:22:75:f0:
         61:06:9b:86:c6:6e:1b:54:12:8d:4d:bc:d7:16:43:0f:9e:c8:
         52:84:5f:68:80:25:a5:29:63:16:f2:7b:83:3c:b3:61:af:36:
         49:a7:af:01:72:f3:8e:3a:b4:0c:9e:4b:de:e5:50:33:83:24:
         e8:d8:36:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:26:13 2026 by rpki-client