This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3137302e38312e33322e302f32322d3234203d3e203238333137.roa
File:                     3137302e38312e33322e302f32322d3234203d3e203238333137.roa (raw, json)
Hash identifier:          2cheudWjSd11o7KDxZ0h1dEwCHVkgNh2fYIpLXQ9Sek=
Subject key identifier:   FD:4F:AF:60:3F:F6:8B:E9:94:C4:32:68:49:6B:6F:14:9B:CE:A3:66
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       120BB367633D873721CF906AF5C9F7A833283654
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3137302e38312e33322e302f32322d3234203d3e203238333137.roa
Signing time:             Tue 06 Jan 2026 19:34:55 +0000
ROA not before:           Tue 06 Jan 2026 19:29:55 +0000
ROA not after:            Tue 05 Jan 2027 19:34:55 +0000
asID:                     28317
IP address blocks:        170.81.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0b:b3:67:63:3d:87:37:21:cf:90:6a:f5:c9:f7:a8:33:28:36:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Jan  6 19:29:55 2026 GMT
            Not After : Jan  5 19:34:55 2027 GMT
        Subject: CN=FD4FAF603FF68BE994C43268496B6F149BCEA366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1b:86:64:da:20:de:0b:d5:03:21:6d:bc:cb:
                    54:93:dd:7b:f7:ff:be:92:3a:02:d0:10:7a:8c:45:
                    74:03:0a:fb:46:bf:d1:54:68:fc:64:ff:fe:f6:d2:
                    e6:9a:bf:cc:90:a5:9f:24:bc:6f:bd:35:e7:d0:e9:
                    9a:50:18:bf:52:81:a3:ab:1a:b1:ac:9f:cb:de:23:
                    aa:b9:9e:09:cb:21:84:ff:99:63:18:f0:2a:4d:74:
                    82:08:c1:fa:6b:86:fb:17:9e:a2:76:f3:35:77:39:
                    97:dd:21:64:5d:92:a9:74:6d:85:4d:b2:12:86:ad:
                    6e:fe:0f:c0:43:3a:c6:89:80:b0:87:f5:98:e8:89:
                    3a:91:43:44:5c:48:8e:8c:f0:41:0a:64:68:fb:b0:
                    e1:fb:f2:34:25:96:94:6b:2a:c8:fb:5e:6e:0c:14:
                    8b:5c:a3:10:a8:41:69:f2:95:5d:e7:63:18:3b:76:
                    96:6b:af:07:af:81:38:52:d9:39:f0:6c:bc:28:96:
                    4d:90:c8:c2:a0:3d:81:27:8c:3d:4b:84:a7:e9:bd:
                    37:36:5b:20:11:c6:75:22:73:63:bb:57:bc:83:8c:
                    a7:eb:cd:1f:83:31:67:7f:fc:3e:c8:b6:b8:76:fc:
                    7d:06:4f:b7:86:d6:08:45:6e:81:ef:78:cf:e6:2b:
                    6b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4F:AF:60:3F:F6:8B:E9:94:C4:32:68:49:6B:6F:14:9B:CE:A3:66
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3137302e38312e33322e302f32322d3234203d3e203238333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:dd:fd:2b:76:43:58:17:82:c7:0b:40:8a:82:c9:7a:a4:4d:
         cf:f4:41:3b:2a:9a:c5:64:3a:8a:3a:0a:32:33:88:49:43:89:
         36:d6:26:e0:f6:bd:d1:7f:3a:54:71:83:c7:c3:d1:68:69:c1:
         51:ef:84:67:5d:b6:12:10:88:37:91:0d:b4:0b:40:14:81:98:
         08:4e:08:b9:83:b6:d2:8e:58:13:89:09:07:60:f0:81:72:7b:
         f5:13:2b:f7:ea:ae:75:cd:fd:b1:11:d4:a4:1e:6a:b7:cf:bd:
         35:79:f7:ef:eb:47:aa:e7:36:1b:3a:15:32:07:b3:2b:dd:4f:
         d6:83:cd:cb:3e:08:2b:57:7a:54:89:3f:ab:9e:78:61:57:f5:
         82:d0:4d:93:62:67:6e:c4:f8:1b:45:89:f1:11:a1:83:15:14:
         78:07:61:63:42:4a:fb:5a:99:25:74:64:54:3e:fd:fd:a1:05:
         7f:e9:9d:1e:a9:53:7f:9e:c7:00:d8:63:17:00:24:58:66:0d:
         a6:34:ed:07:3d:2d:1c:70:ad:00:fd:06:2d:08:d1:89:17:05:
         a7:50:18:67:86:90:75:91:1e:97:03:2b:a4:b4:80:8c:7a:da:
         68:41:9c:4d:7a:46:87:5a:5b:45:8b:1f:3c:b9:2f:96:d9:ac:
         2f:51:f2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:59 2026 by rpki-client