This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/3137302e3234372e38382e302f32322d3234203d3e20323634373431.roa
File:                     3137302e3234372e38382e302f32322d3234203d3e20323634373431.roa (raw, json)
Hash identifier:          5hqYIArsIIlFrbKGkkbK0yvcQf/0cB9s/fUs7+NyzUk=
Subject key identifier:   87:C4:5D:F9:EA:97:1D:28:6E:FD:C9:7D:69:D2:C2:C1:C5:8E:53:74
Certificate issuer:       /CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
Certificate serial:       47D94F0FA917F84B08A5B51395913E3CC7DB0153
Authority key identifier: E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/3137302e3234372e38382e302f32322d3234203d3e20323634373431.roa
Signing time:             Tue 06 Jan 2026 19:14:32 +0000
ROA not before:           Tue 06 Jan 2026 19:09:32 +0000
ROA not after:            Tue 05 Jan 2027 19:14:32 +0000
asID:                     264741
IP address blocks:        170.247.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:25:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d9:4f:0f:a9:17:f8:4b:08:a5:b5:13:95:91:3e:3c:c7:db:01:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
        Validity
            Not Before: Jan  6 19:09:32 2026 GMT
            Not After : Jan  5 19:14:32 2027 GMT
        Subject: CN=87C45DF9EA971D286EFDC97D69D2C2C1C58E5374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:d4:9b:ec:f3:ae:99:fe:93:bf:3a:27:ca:
                    97:a0:d4:6e:a3:dd:a7:80:42:cd:88:6e:ac:59:19:
                    db:e8:24:65:6e:69:89:b4:21:0a:6a:c0:64:5c:62:
                    4a:1e:74:7f:d5:79:20:e4:fa:eb:b7:a5:e3:0c:b2:
                    c2:52:20:82:c9:92:70:a9:4c:0d:f8:e9:95:12:4d:
                    46:d0:5d:93:13:83:bc:dd:02:73:73:a9:70:84:18:
                    4e:8a:ec:20:86:72:9a:0b:99:ff:dc:1c:d2:b9:82:
                    d7:df:e0:cd:a5:69:f9:6c:15:b4:b0:35:98:f9:b9:
                    51:b3:5e:44:95:01:04:39:7a:77:30:08:5b:70:c1:
                    1d:f6:c6:c3:6e:89:cd:a9:e3:a0:e0:26:cc:e3:15:
                    73:07:ee:b9:75:34:35:ad:da:91:7a:e8:78:fb:9b:
                    8a:11:67:3f:6c:45:2f:32:55:c3:7f:de:ab:9b:42:
                    99:0c:bb:2e:b9:1f:eb:4d:48:5d:87:98:85:2c:a6:
                    76:af:8d:c8:74:be:28:24:1b:8f:b1:83:63:e8:47:
                    92:be:a1:66:42:1d:05:da:c3:52:27:cf:fd:69:71:
                    ec:e5:32:9c:3e:5b:40:28:8f:35:6e:95:e1:4f:3e:
                    82:8c:cc:a4:cb:18:be:89:4c:f5:42:d9:84:12:91:
                    9e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C4:5D:F9:EA:97:1D:28:6E:FD:C9:7D:69:D2:C2:C1:C5:8E:53:74
            X509v3 Authority Key Identifier:
                keyid:E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/3137302e3234372e38382e302f32322d3234203d3e20323634373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:f9:48:7d:12:33:07:70:36:83:ae:6f:a0:ca:51:e6:52:48:
         e1:0d:4b:27:ae:0f:02:fe:1b:ce:fc:1d:07:db:23:cf:b4:66:
         3f:60:4b:b7:76:6c:47:e4:17:f6:29:dc:9b:ee:99:b9:cd:6c:
         96:a6:cb:72:e9:0d:ef:d5:b4:bd:5f:66:1e:73:bc:eb:9d:6c:
         18:71:89:33:b1:ba:c7:f7:12:8d:6b:5c:d8:46:8b:1f:9f:5e:
         99:12:0f:72:06:8a:3d:00:a7:1e:de:ca:c9:23:64:4d:99:ae:
         b5:e6:39:36:04:e5:b0:db:de:96:15:89:d1:26:97:b6:72:1a:
         bc:b7:e7:01:98:c3:75:34:ed:50:86:a1:50:83:ca:fa:6c:d9:
         0a:ae:6c:b4:1b:ab:2c:64:14:d8:70:e5:62:68:66:45:80:57:
         ab:13:95:80:c4:c6:99:aa:a2:3a:d7:09:c8:2e:e2:bf:38:7d:
         25:ba:e5:51:ca:e9:21:99:88:49:ba:6b:cc:a3:57:eb:ce:ca:
         5f:fb:94:29:3e:54:5b:a9:a8:35:58:d5:61:8f:8d:5e:d2:02:
         92:75:f1:b0:d5:b1:0d:7a:ce:5f:0b:0b:0c:29:8d:0a:1d:ec:
         4c:66:39:0c:f6:5e:ec:00:63:48:34:c7:38:3f:04:fa:3e:63:
         d8:51:24:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:23 2026 by rpki-client