This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/3137302e3233312e3132342e302f32322d3234203d3e20323634373233.roa
File:                     3137302e3233312e3132342e302f32322d3234203d3e20323634373233.roa (raw, json)
Hash identifier:          h2AA7NK3w0r01pCjL4BmXy/CUmRsyV9lcix4cwQ3TUE=
Subject key identifier:   BB:9D:F4:7B:69:41:42:42:60:63:35:9D:F3:93:5B:9B:EA:E7:9B:7B
Certificate issuer:       /CN=2BCED2F951C98C8D5F6B21981C644766FAFFD808
Certificate serial:       72E8C12E1B96A1984CB49D564592FC775D549D31
Authority key identifier: 2B:CE:D2:F9:51:C9:8C:8D:5F:6B:21:98:1C:64:47:66:FA:FF:D8:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/3137302e3233312e3132342e302f32322d3234203d3e20323634373233.roa
Signing time:             Tue 06 Jan 2026 19:27:55 +0000
ROA not before:           Tue 06 Jan 2026 19:22:55 +0000
ROA not after:            Tue 05 Jan 2027 19:27:55 +0000
asID:                     264723
IP address blocks:        170.231.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e8:c1:2e:1b:96:a1:98:4c:b4:9d:56:45:92:fc:77:5d:54:9d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BCED2F951C98C8D5F6B21981C644766FAFFD808
        Validity
            Not Before: Jan  6 19:22:55 2026 GMT
            Not After : Jan  5 19:27:55 2027 GMT
        Subject: CN=BB9DF47B694142426063359DF3935B9BEAE79B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2c:ab:2a:56:e1:46:8a:1d:7f:d2:b4:2e:9f:
                    1a:47:12:9b:7f:82:55:d6:13:5d:02:67:e7:7a:26:
                    a7:be:50:98:41:d7:e3:91:74:d3:be:2d:e2:72:73:
                    1f:40:a5:b6:f8:4d:00:8a:56:ba:57:e1:66:41:35:
                    1f:7f:a3:90:6a:26:32:8a:6b:83:08:34:cb:2d:00:
                    ee:e1:83:c9:40:b0:fc:bd:7d:d8:a0:b2:4c:88:a0:
                    48:00:3c:97:83:83:d3:87:ba:e6:70:e9:79:b3:96:
                    9f:56:97:9d:f4:13:cd:f2:67:7a:62:ee:7a:fb:0b:
                    58:f8:99:a5:af:55:97:d1:da:3e:e4:a5:65:ce:44:
                    ed:81:bc:45:c2:30:ac:1c:87:87:c9:8d:61:d3:d7:
                    24:bf:8b:a2:3f:d6:fc:f0:d9:6c:d3:b7:0e:fb:0a:
                    bf:4b:24:ac:75:76:3e:62:ae:b4:77:d1:67:0d:3d:
                    cb:eb:9f:02:71:69:85:c6:57:2f:ec:24:9e:06:71:
                    45:08:54:4f:c6:c3:95:33:12:c7:82:c6:cd:d2:52:
                    32:f2:69:06:26:5f:80:72:a0:22:f7:46:2f:ed:c8:
                    2e:0c:1b:76:b1:1f:cd:15:92:dc:18:8d:86:af:57:
                    78:b8:84:45:02:52:9b:e1:f4:a2:b0:5a:38:70:d4:
                    0f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9D:F4:7B:69:41:42:42:60:63:35:9D:F3:93:5B:9B:EA:E7:9B:7B
            X509v3 Authority Key Identifier:
                keyid:2B:CE:D2:F9:51:C9:8C:8D:5F:6B:21:98:1C:64:47:66:FA:FF:D8:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/3137302e3233312e3132342e302f32322d3234203d3e20323634373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:35:b6:81:4a:4f:94:dc:7b:5c:14:ae:82:f7:03:4e:ed:3a:
         fc:e7:00:52:ca:f4:eb:e9:24:bc:d0:6d:70:92:8d:26:60:28:
         88:c6:5b:03:6e:59:85:54:d1:ff:3d:6c:86:b2:c7:a7:3f:b7:
         44:24:5c:86:17:43:d8:43:ed:d4:3d:07:bf:71:1a:00:1d:1d:
         09:36:bc:ee:d9:35:8d:30:d8:3f:6f:87:e2:04:8f:88:6e:56:
         41:8b:be:70:60:a6:de:1a:e1:a1:d6:41:3c:06:8e:de:fb:f9:
         68:2f:41:99:4b:e3:db:23:24:8c:8e:84:75:d6:d6:b3:51:cd:
         ef:89:4a:65:b4:11:20:64:ca:d3:52:f7:e3:2a:89:bc:5f:25:
         d6:fb:30:7a:e5:72:a1:6b:28:61:31:0a:3e:a1:bb:9c:43:63:
         0d:72:6a:b0:92:01:8c:4b:30:c0:9b:74:e9:c5:7a:48:6c:5c:
         64:7d:67:3a:13:6e:09:3e:cc:e2:7b:44:31:46:3f:c4:1f:64:
         4e:5b:8b:45:7e:18:c7:e1:5d:a1:53:47:e4:e0:35:08:18:3b:
         dd:c1:13:8f:45:e5:e7:48:9b:81:9e:06:76:5f:bd:39:5b:ff:
         88:aa:15:96:7b:24:d5:64:b0:42:fe:18:3c:aa:2b:aa:3b:1b:
         04:3a:12:7e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUcujBLhuWoZhMtJ1WRZL8d11UnTEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJDRUQyRjk1MUM5OEM4RDVGNkIyMTk4MUM2NDQ3NjZG
QUZGRDgwODAeFw0yNjAxMDYxOTIyNTVaFw0yNzAxMDUxOTI3NTVaMDMxMTAvBgNV
BAMTKEJCOURGNDdCNjk0MTQyNDI2MDYzMzU5REYzOTM1QjlCRUFFNzlCN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcLKsqVuFGih1/0rQunxpHEpt/
glXWE10CZ+d6Jqe+UJhB1+ORdNO+LeJycx9Apbb4TQCKVrpX4WZBNR9/o5BqJjKK
a4MINMstAO7hg8lAsPy9fdigskyIoEgAPJeDg9OHuuZw6Xmzlp9Wl530E83yZ3pi
7nr7C1j4maWvVZfR2j7kpWXORO2BvEXCMKwch4fJjWHT1yS/i6I/1vzw2WzTtw77
Cr9LJKx1dj5irrR30WcNPcvrnwJxaYXGVy/sJJ4GcUUIVE/Gw5UzEseCxs3SUjLy
aQYmX4ByoCL3Ri/tyC4MG3axH80VktwYjYavV3i4hEUCUpvh9KKwWjhw1A9JAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUu530e2lBQkJgYzWd85Nbm+rnm3swHwYDVR0j
BBgwFoAUK87S+VHJjI1fayGYHGRHZvr/2AgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NTQ0RkVEQjgxNEUyRDJCMEVFRUYwRDNGQkNFQzA0MTE4
RDc3QzhCRkM1QTY2QUZBRTU3NkQwNTI2NjY4MzAxLzAvMkJDRUQyRjk1MUM5OEM4
RDVGNkIyMTk4MUM2NDQ3NjZGQUZGRDgwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQkNFRDJGOTUxQzk4QzhENUY2
QjIxOTgxQzY0NDc2NkZBRkZEODA4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODU0NEZFREI4MTRFMkQyQjBFRUVGMEQzRkJDRUMwNDExOEQ3N0M4QkZD
NUE2NkFGQUU1NzZEMDUyNjY2ODMwMS8wLzMxMzczMDJlMzIzMzMxMmUzMTMyMzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNzMyMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKq
53wwDQYJKoZIhvcNAQELBQADggEBAFg1toFKT5Tce1wUroL3A07tOvznAFLK9Ovp
JLzQbXCSjSZgKIjGWwNuWYVU0f89bIayx6c/t0QkXIYXQ9hD7dQ9B79xGgAdHQk2
vO7ZNY0w2D9vh+IEj4huVkGLvnBgpt4a4aHWQTwGjt77+WgvQZlL49sjJIyOhHXW
1rNRze+JSmW0ESBkytNS9+MqibxfJdb7MHrlcqFrKGExCj6hu5xDYw1yarCSAYxL
MMCbdOnFekhsXGR9ZzoTbgk+zOJ7RDFGP8QfZE5bi0V+GMfhXaFTR+TgNQgYO93B
E49F5edIm4GeBnZfvTlb/4iqFZZ7JNVksEL+GDyqK6o7GwQ6En4=
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:40:09 2026 by rpki-client