This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/3137302e3234342e3136382e302f32342d3234203d3e20323637383538.roa
File:                     3137302e3234342e3136382e302f32342d3234203d3e20323637383538.roa (raw, json)
Hash identifier:          iY6Uwx4qzC3K5GDeVD82dmtnnEUmiqBgRcG492glzNs=
Subject key identifier:   9F:C3:67:4A:84:21:22:D6:98:A2:49:A2:D7:81:24:D9:96:1E:E6:0F
Certificate issuer:       /CN=5FAC4FA89218203214573AEA6EC449BC4CFD9640
Certificate serial:       1FEF2ED0D4BC9CC77040746468385553747EFD86
Authority key identifier: 5F:AC:4F:A8:92:18:20:32:14:57:3A:EA:6E:C4:49:BC:4C:FD:96:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/3137302e3234342e3136382e302f32342d3234203d3e20323637383538.roa
Signing time:             Tue 06 Jan 2026 19:08:21 +0000
ROA not before:           Tue 06 Jan 2026 19:03:21 +0000
ROA not after:            Tue 05 Jan 2027 19:08:21 +0000
asID:                     267858
IP address blocks:        170.244.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ef:2e:d0:d4:bc:9c:c7:70:40:74:64:68:38:55:53:74:7e:fd:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FAC4FA89218203214573AEA6EC449BC4CFD9640
        Validity
            Not Before: Jan  6 19:03:21 2026 GMT
            Not After : Jan  5 19:08:21 2027 GMT
        Subject: CN=9FC3674A842122D698A249A2D78124D9961EE60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:a9:4b:a8:0f:3b:bb:39:8b:44:c2:09:c6:
                    28:f4:2a:64:71:f9:3f:98:15:1f:37:8e:bb:38:cd:
                    ff:05:a7:2e:4f:8f:ae:e7:b7:d2:1c:e5:6d:d8:f6:
                    ee:e6:d0:ea:4c:5a:ce:03:a0:9e:87:2b:fa:6e:10:
                    aa:7d:28:58:bb:3b:a2:c8:aa:25:00:0d:e7:48:c5:
                    a4:49:96:f4:ff:39:be:a8:ac:49:66:32:51:67:8e:
                    3c:4b:2e:04:25:31:94:03:fc:c4:3d:a5:29:93:c7:
                    2d:78:6a:9e:0f:94:60:29:a2:44:db:8e:3a:08:08:
                    58:23:c3:f6:c3:3c:9f:a0:dc:3f:c3:65:7c:0f:72:
                    36:b5:d3:be:1c:f2:a3:dc:05:58:ed:54:24:90:b9:
                    3f:1d:95:90:f9:b1:4e:0c:fe:e4:79:8c:77:63:08:
                    ca:7c:3b:aa:8a:22:cf:3e:5f:0d:c8:cc:65:a0:26:
                    cf:fe:18:5b:77:c9:80:49:b1:14:07:c1:1b:3e:4b:
                    14:4d:1d:c9:cc:de:d6:58:ff:cc:57:62:25:c0:dc:
                    d5:1f:ee:de:ba:b9:60:b5:f6:e4:8e:35:95:8e:af:
                    93:6c:86:34:a8:8a:91:55:06:85:67:97:2c:e1:93:
                    6b:f5:97:69:d6:0c:71:33:d0:2f:e3:e2:02:00:9f:
                    af:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C3:67:4A:84:21:22:D6:98:A2:49:A2:D7:81:24:D9:96:1E:E6:0F
            X509v3 Authority Key Identifier:
                keyid:5F:AC:4F:A8:92:18:20:32:14:57:3A:EA:6E:C4:49:BC:4C:FD:96:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/3137302e3234342e3136382e302f32342d3234203d3e20323637383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:34:1c:12:c9:0f:52:20:b0:32:c4:07:1d:c2:2b:b7:81:c6:
         6c:31:15:2e:51:37:1d:43:12:ec:d3:34:b6:3d:36:29:87:03:
         0f:03:87:d9:3b:6b:b6:4d:7d:f8:19:71:18:c8:9f:97:bf:2c:
         02:17:db:5e:78:f7:c9:39:20:86:26:25:5d:98:a3:db:c7:b3:
         86:59:48:7b:4f:0b:8a:43:2f:52:f5:63:63:dc:b3:d3:55:dd:
         8a:04:a8:9b:e5:c4:a8:26:fc:c4:ce:ba:75:60:6f:12:9d:88:
         a6:c7:0c:9c:f8:e4:e9:2c:f6:6d:16:cc:33:5c:0d:e2:7a:d3:
         44:63:c0:9a:24:ee:5e:75:e4:dd:ec:50:63:78:8a:b2:0e:60:
         c6:55:8c:99:66:ff:b8:6a:35:4b:91:59:6a:d6:9d:0a:c3:a1:
         3c:d6:34:be:05:62:b3:75:15:20:29:23:0f:2d:85:ac:c0:02:
         c7:e5:ce:34:f1:1a:0c:8e:79:02:22:b8:29:4e:fc:d0:ad:67:
         20:d5:09:58:b0:5c:51:50:b5:21:8c:d1:c4:b7:d2:13:4f:09:
         44:67:93:4d:db:36:aa:89:7e:9b:d4:c8:5d:e5:4d:da:ca:6e:
         c5:46:e6:87:be:27:cb:e7:cb:fd:24:0c:b7:15:be:ed:a7:30:
         a6:13:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:15:23 2026 by rpki-client