This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3137302e302e3234342e302f32322d3234203d3e20323633323232.roa
File:                     3137302e302e3234342e302f32322d3234203d3e20323633323232.roa (raw, json)
Hash identifier:          iRnoxYKDqE6zZJt/Lzx415E7yt+gDAh91KIAsbAi/Gk=
Subject key identifier:   3D:B4:F8:8F:D1:1A:74:69:BB:E2:EB:AC:25:16:32:FF:4E:35:75:A9
Certificate issuer:       /CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
Certificate serial:       76E0FDA206DBFC6C4E23EB7F8774D41F32545921
Authority key identifier: C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3137302e302e3234342e302f32322d3234203d3e20323633323232.roa
Signing time:             Tue 06 Jan 2026 19:30:18 +0000
ROA not before:           Tue 06 Jan 2026 19:25:18 +0000
ROA not after:            Tue 05 Jan 2027 19:30:18 +0000
asID:                     263222
IP address blocks:        170.0.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e0:fd:a2:06:db:fc:6c:4e:23:eb:7f:87:74:d4:1f:32:54:59:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
        Validity
            Not Before: Jan  6 19:25:18 2026 GMT
            Not After : Jan  5 19:30:18 2027 GMT
        Subject: CN=3DB4F88FD11A7469BBE2EBAC251632FF4E3575A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:74:72:b8:79:fd:0b:8e:1a:d7:8b:3a:00:
                    81:52:1b:6a:9a:cf:36:a1:32:e1:dc:24:bc:cb:11:
                    33:a7:26:4a:1b:c1:4f:90:b9:de:50:4d:bf:7a:40:
                    d4:07:2f:42:7e:65:85:c5:31:e3:b8:72:00:4b:70:
                    bf:dd:56:79:ac:fc:86:06:a2:ab:f8:68:e7:60:a2:
                    93:e7:7d:b3:c5:4e:41:3d:b4:46:b2:6d:3e:b3:ca:
                    54:79:e5:89:8e:a5:99:95:a2:6d:a7:25:ad:2e:10:
                    3a:03:36:0a:3f:55:fc:80:03:80:b7:81:13:c3:5c:
                    f5:ef:f2:9b:5c:bd:cc:f3:01:03:f4:36:57:a0:e4:
                    85:f7:e3:de:2c:c4:14:6c:c6:89:57:53:f7:2a:b3:
                    39:9a:a9:f0:c4:3a:8c:71:f7:a5:bc:0c:81:94:e7:
                    74:fb:80:21:96:de:ab:57:f6:17:ba:9c:19:af:8e:
                    96:94:0f:5f:4a:73:a5:a3:52:47:ce:00:4c:f1:9b:
                    9e:b2:56:78:db:0f:d6:84:a8:6c:23:aa:58:9c:cc:
                    71:94:52:bf:c1:0d:8e:08:23:29:42:ef:a8:5e:52:
                    06:58:fb:32:bb:c9:ef:8b:a6:49:f6:6a:e1:18:94:
                    d0:62:3f:ab:bc:b7:b3:96:58:c0:2d:dd:e6:f9:14:
                    5f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B4:F8:8F:D1:1A:74:69:BB:E2:EB:AC:25:16:32:FF:4E:35:75:A9
            X509v3 Authority Key Identifier:
                keyid:C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3137302e302e3234342e302f32322d3234203d3e20323633323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:9d:6c:5e:cc:73:d7:e2:e7:20:92:27:65:5c:87:0e:4b:85:
         52:ac:37:74:42:93:a4:83:85:e9:85:c7:18:7a:9e:56:92:72:
         a5:1d:a9:4f:d0:9c:b5:e3:b9:64:ab:29:4a:de:5e:1f:63:f2:
         68:b5:98:9d:98:0a:08:1a:88:35:37:3f:71:cd:c1:ee:b1:ed:
         7e:54:f3:e6:b4:f9:21:4c:00:b1:b8:33:02:1c:fe:f9:20:c8:
         b8:d6:d4:52:41:0f:5d:9d:28:bb:9b:0a:bb:ac:f1:b5:4c:1d:
         56:e1:be:14:d0:27:c1:ad:3d:cd:b9:53:fe:f3:df:ae:e0:79:
         5c:19:16:7d:6a:5c:d4:61:75:0e:bf:40:22:8b:8c:f2:98:0f:
         b7:42:c3:9b:55:87:f7:a4:41:d4:78:b4:68:21:f4:06:8a:16:
         f7:fc:d7:42:58:0b:b3:cd:23:20:e4:80:0e:7d:fa:1d:41:c9:
         41:2a:a7:8f:57:04:c1:d6:d1:0c:3a:d0:81:00:59:59:20:f8:
         f8:3c:84:e3:c8:a9:14:95:f9:c0:6a:f2:f9:c0:0e:c5:0e:5a:
         d3:4c:74:be:76:be:75:8f:1b:b0:07:e1:b9:c3:bb:33:05:22:
         ce:8f:69:a6:a6:b0:4b:6f:fe:02:e3:65:99:8d:bd:14:48:5f:
         bf:31:46:94
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUduD9ogbb/GxOI+t/h3TUHzJUWSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYyMjlDRTU0Q0QwMzYyRTUyMzA0RjcxQzc3OTlDM0FE
MkIyRUZEMzAeFw0yNjAxMDYxOTI1MThaFw0yNzAxMDUxOTMwMThaMDMxMTAvBgNV
BAMTKDNEQjRGODhGRDExQTc0NjlCQkUyRUJBQzI1MTYzMkZGNEUzNTc1QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVo3RyuHn9C44a14s6AIFSG2qa
zzahMuHcJLzLETOnJkobwU+Qud5QTb96QNQHL0J+ZYXFMeO4cgBLcL/dVnms/IYG
oqv4aOdgopPnfbPFTkE9tEaybT6zylR55YmOpZmVom2nJa0uEDoDNgo/VfyAA4C3
gRPDXPXv8ptcvczzAQP0Nleg5IX3494sxBRsxolXU/cqszmaqfDEOoxx96W8DIGU
53T7gCGW3qtX9he6nBmvjpaUD19Kc6WjUkfOAEzxm56yVnjbD9aEqGwjqliczHGU
Ur/BDY4IIylC76heUgZY+zK7ye+Lpkn2auEYlNBiP6u8t7OWWMAt3eb5FF/vAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPbT4j9EadGm74uusJRYy/041dakwHwYDVR0j
BBgwFoAUxiKc5UzQNi5SME9xx3mcOtKy79MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NUQzNzY4N0I0RUJEQ0Y0MjU5ODIzMTkzMDM5RDVCNEI5
RDEwN0ZDMzExRjMzMUNCQkVBRTIzNTExRTQzMEVGLzAvQzYyMjlDRTU0Q0QwMzYy
RTUyMzA0RjcxQzc3OTlDM0FEMkIyRUZEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNjIyOUNFNTRDRDAzNjJFNTIz
MDRGNzFDNzc5OUMzQUQyQjJFRkQzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzVEMzc2ODdCNEVCRENGNDI1OTgyMzE5MzAzOUQ1QjRCOUQxMDdGQzMx
MUYzMzFDQkJFQUUyMzUxMUU0MzBFRi8wLzMxMzczMDJlMzAyZTMyMzQzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMzMyMzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqoA9DAN
BgkqhkiG9w0BAQsFAAOCAQEAFp1sXsxz1+LnIJInZVyHDkuFUqw3dEKTpIOF6YXH
GHqeVpJypR2pT9CcteO5ZKspSt5eH2PyaLWYnZgKCBqINTc/cc3B7rHtflTz5rT5
IUwAsbgzAhz++SDIuNbUUkEPXZ0ou5sKu6zxtUwdVuG+FNAnwa09zblT/vPfruB5
XBkWfWpc1GF1Dr9AIouM8pgPt0LDm1WH96RB1Hi0aCH0BooW9/zXQlgLs80jIOSA
Dn36HUHJQSqnj1cEwdbRDDrQgQBZWSD4+DyE48ipFJX5wGry+cAOxQ5a00x0vna+
dY8bsAfhucO7MwUizo9ppqawS2/+AuNlmY29FEhfvzFGlA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:14 2026 by rpki-client