This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/3137302e37382e34302e302f32322d3234203d3e20323634373936.roa
File:                     3137302e37382e34302e302f32322d3234203d3e20323634373936.roa (raw, json)
Hash identifier:          hgS4hbsSYIyz+G1qlosCk/EXLDS/TIPTgHnSbWkIuiU=
Subject key identifier:   ED:5E:98:59:4D:B6:16:7A:E5:FF:ED:1D:CA:5F:C7:AD:CE:08:6E:61
Certificate issuer:       /CN=7ED9ACC4C7390FB2C083BA37C144A9057A422D2D
Certificate serial:       71EA3D633DEB9B53733688F2DC25294F1115EBD3
Authority key identifier: 7E:D9:AC:C4:C7:39:0F:B2:C0:83:BA:37:C1:44:A9:05:7A:42:2D:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/3137302e37382e34302e302f32322d3234203d3e20323634373936.roa
Signing time:             Tue 06 Jan 2026 19:03:27 +0000
ROA not before:           Tue 06 Jan 2026 18:58:27 +0000
ROA not after:            Tue 05 Jan 2027 19:03:27 +0000
asID:                     264796
IP address blocks:        170.78.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ea:3d:63:3d:eb:9b:53:73:36:88:f2:dc:25:29:4f:11:15:eb:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED9ACC4C7390FB2C083BA37C144A9057A422D2D
        Validity
            Not Before: Jan  6 18:58:27 2026 GMT
            Not After : Jan  5 19:03:27 2027 GMT
        Subject: CN=ED5E98594DB6167AE5FFED1DCA5FC7ADCE086E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:fd:7c:a6:b2:96:0a:68:00:37:84:0d:d8:
                    b7:5a:16:4a:be:2a:55:14:96:e7:8f:a0:45:53:94:
                    c3:c8:52:77:19:e9:cc:a8:e0:34:d0:13:33:d4:35:
                    1a:cf:96:5b:a4:0c:06:8f:ea:bf:53:16:cd:98:94:
                    f0:45:7c:1a:77:98:73:af:0a:6b:4c:27:ac:82:0b:
                    42:2b:4f:18:92:51:98:59:db:7c:cb:6d:96:ad:7e:
                    e8:30:65:6f:f9:4c:45:60:5c:3f:6d:32:98:f6:8f:
                    88:56:ae:12:60:9d:20:a9:37:7d:3c:d2:ca:68:1e:
                    2e:b9:f0:ee:d8:8b:47:73:b8:9f:9b:d5:61:c3:fb:
                    0a:70:5a:0a:dd:a2:15:32:1b:58:bd:7f:de:3b:75:
                    78:94:1f:67:dc:e4:49:48:7e:e2:fd:a8:e0:40:db:
                    33:9f:d7:e0:fb:c7:6d:19:96:96:42:60:e8:ac:ba:
                    2b:90:dd:7c:8b:f3:f3:a7:b4:0a:0f:e5:f1:ed:70:
                    6f:66:99:11:d5:6f:52:e0:c1:c9:af:85:52:1c:75:
                    b4:18:53:40:95:41:f9:83:42:cb:28:1e:b0:62:24:
                    7d:53:45:62:5b:86:e1:5e:5d:bf:93:df:db:4e:f5:
                    34:64:e6:fe:1b:98:f9:63:27:5d:00:f4:5e:3b:b7:
                    e0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5E:98:59:4D:B6:16:7A:E5:FF:ED:1D:CA:5F:C7:AD:CE:08:6E:61
            X509v3 Authority Key Identifier:
                keyid:7E:D9:AC:C4:C7:39:0F:B2:C0:83:BA:37:C1:44:A9:05:7A:42:2D:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/3137302e37382e34302e302f32322d3234203d3e20323634373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:14:ae:24:7b:4a:b4:dc:d4:bc:f7:d5:10:47:b5:87:79:f3:
         04:0f:4d:94:8b:a1:09:cb:4d:59:e4:9f:ef:19:81:91:1b:5d:
         f4:8a:d4:54:6a:86:46:8f:f5:43:80:5c:76:e6:7d:cb:d2:57:
         96:2b:e7:65:c8:83:fa:7e:42:d2:83:7f:50:e0:18:75:6d:2b:
         67:40:8c:43:b1:5c:d8:b7:29:b4:55:cc:b3:f5:70:76:d7:bf:
         31:1b:2f:ee:0c:eb:88:b0:d9:5c:61:f0:1b:8e:e5:37:3d:af:
         78:9e:2f:e6:9f:82:22:a9:d0:2c:8e:2d:6c:06:01:93:1f:90:
         7f:e4:ed:d7:57:e4:cf:5d:54:34:3e:22:ad:f8:52:ec:37:0c:
         b2:8a:0a:95:fd:87:df:ea:85:48:18:2e:45:31:10:71:99:5e:
         38:63:34:45:bc:8a:81:5c:5a:17:7f:1a:79:72:a7:84:6c:ef:
         87:c7:83:21:96:0c:a5:78:f7:2c:44:2d:ee:e7:8e:e1:a0:d4:
         52:01:e6:21:c3:f8:23:18:5a:b5:94:36:1a:3d:47:b6:8e:43:
         0b:3f:7c:95:77:11:e4:dd:dd:2d:6d:48:03:33:16:c3:b0:71:
         1f:6d:f3:7f:26:a5:8b:b4:8a:9d:bf:a6:ba:c7:cd:d4:6b:46:
         4e:05:30:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:57 2026 by rpki-client