This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/3137302e3235342e31362e302f32322d3234203d3e20323633383234.roa
File:                     3137302e3235342e31362e302f32322d3234203d3e20323633383234.roa (raw, json)
Hash identifier:          fR8hNb8PkVl2Qa5/ElF08UcyZEkpQLXsVnh7FsacYHA=
Subject key identifier:   21:FC:89:33:5A:AE:09:98:38:9A:84:25:4D:70:60:FC:61:22:4E:4D
Certificate issuer:       /CN=E2930E0E37A0FC0020E88ADC7667FBA37A6DB802
Certificate serial:       7401D2D14C02B19E9D7CF15CECC7965B9CC378E3
Authority key identifier: E2:93:0E:0E:37:A0:FC:00:20:E8:8A:DC:76:67:FB:A3:7A:6D:B8:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/3137302e3235342e31362e302f32322d3234203d3e20323633383234.roa
Signing time:             Tue 06 Jan 2026 19:00:52 +0000
ROA not before:           Tue 06 Jan 2026 18:55:52 +0000
ROA not after:            Tue 05 Jan 2027 19:00:52 +0000
asID:                     263824
IP address blocks:        170.254.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.crl
                          rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:01:d2:d1:4c:02:b1:9e:9d:7c:f1:5c:ec:c7:96:5b:9c:c3:78:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2930E0E37A0FC0020E88ADC7667FBA37A6DB802
        Validity
            Not Before: Jan  6 18:55:52 2026 GMT
            Not After : Jan  5 19:00:52 2027 GMT
        Subject: CN=21FC89335AAE0998389A84254D7060FC61224E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:17:8a:e9:75:93:f2:3f:81:a0:35:3c:3d:
                    b7:a0:fe:2b:8d:16:75:68:d8:21:aa:cf:1f:db:ab:
                    ba:1d:9d:db:28:e1:f2:6a:12:33:75:f3:9c:27:9c:
                    0d:03:91:08:96:02:96:2c:28:9d:02:64:18:a3:59:
                    5d:96:96:74:3e:af:68:83:c8:9b:91:0d:1f:13:3d:
                    b6:4b:32:05:ba:bf:fe:83:97:69:2e:a4:69:ec:8e:
                    c3:1e:64:4c:32:04:ef:59:6c:34:f8:0d:c8:d0:27:
                    21:c8:7e:81:8f:c7:2e:8b:f7:e2:75:6c:3b:0d:33:
                    e4:21:f8:d3:5a:78:eb:50:49:63:11:85:05:2e:22:
                    e7:41:a7:95:44:7a:52:5e:c4:2d:07:d3:11:13:64:
                    b5:19:cc:b1:5d:07:12:b7:7c:ac:a1:d9:b5:f8:4b:
                    04:c1:fd:ee:db:94:02:c9:8e:21:3f:5a:a8:cc:61:
                    c3:b6:ed:5f:d1:a5:f6:dc:28:c5:1f:67:e7:22:50:
                    c8:96:f0:03:f1:73:29:d5:5b:b4:cf:b4:27:0c:eb:
                    87:88:09:40:fa:f6:15:93:7b:74:23:66:b9:b5:d3:
                    df:1b:4a:b5:48:78:e8:3b:7b:f7:a3:92:58:23:ba:
                    39:3f:dc:a4:91:26:19:e6:98:d1:42:0e:da:85:2f:
                    35:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FC:89:33:5A:AE:09:98:38:9A:84:25:4D:70:60:FC:61:22:4E:4D
            X509v3 Authority Key Identifier:
                keyid:E2:93:0E:0E:37:A0:FC:00:20:E8:8A:DC:76:67:FB:A3:7A:6D:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/3137302e3235342e31362e302f32322d3234203d3e20323633383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:21:a0:76:fa:e5:5c:73:11:1e:22:aa:06:e0:34:bc:fa:39:
         15:e7:e0:64:b1:58:19:f7:f5:3d:8f:51:19:59:49:a0:f5:92:
         85:95:73:71:d1:b8:f1:b1:32:8a:6e:c1:48:e3:ab:63:45:bb:
         c4:ba:6e:3b:dd:eb:e1:79:b5:89:f8:e7:2b:79:fc:a2:de:65:
         f5:96:94:31:a6:85:0f:62:af:c4:2b:d3:cd:e2:2f:01:de:ee:
         97:1c:72:3e:fe:09:5e:30:24:fc:7f:b9:4f:6c:79:b6:ed:02:
         58:f8:b5:80:8e:24:f2:d2:01:76:2f:3e:0e:88:df:71:6e:fc:
         50:26:c0:7c:e1:f0:bd:33:67:35:b0:20:86:54:0b:4c:da:46:
         93:60:78:74:1b:6d:1f:1c:3b:b3:a7:67:22:37:4d:ae:a5:5c:
         75:14:58:cb:ac:4e:11:66:37:06:33:54:5e:ce:1b:7a:1f:69:
         92:1d:8b:1a:e6:1e:7f:8f:dd:39:1d:e7:fb:ef:f1:1a:22:b7:
         39:d0:33:54:f9:34:3a:2f:f4:1a:7e:ea:95:00:1c:d7:ed:84:
         f6:7c:31:ed:e2:5d:65:86:c0:96:bd:5a:23:e0:67:f3:17:b1:
         ff:4e:99:13:eb:27:ff:45:48:51:8c:ef:f1:52:07:b3:e3:c7:
         70:14:3f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:59:22 2026 by rpki-client