This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135332e302f32342d3234203d3e20323634373330.roa
File:                     3137302e3233332e3135332e302f32342d3234203d3e20323634373330.roa (raw, json)
Hash identifier:          TeZBr+C8VrG2gQLth2lA2lygiOCgcnsIUqGQ5sLikhs=
Subject key identifier:   C2:70:AF:1B:4D:0C:FC:D2:32:AC:FA:BE:89:C1:D0:E2:3B:59:AA:17
Certificate issuer:       /CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
Certificate serial:       6CDC177D978E51631FDE175590913940C75A208B
Authority key identifier: 2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135332e302f32342d3234203d3e20323634373330.roa
Signing time:             Tue 06 Jan 2026 19:06:19 +0000
ROA not before:           Tue 06 Jan 2026 19:01:19 +0000
ROA not after:            Tue 05 Jan 2027 19:06:19 +0000
asID:                     264730
IP address blocks:        170.233.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 23:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:dc:17:7d:97:8e:51:63:1f:de:17:55:90:91:39:40:c7:5a:20:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
        Validity
            Not Before: Jan  6 19:01:19 2026 GMT
            Not After : Jan  5 19:06:19 2027 GMT
        Subject: CN=C270AF1B4D0CFCD232ACFABE89C1D0E23B59AA17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:be:31:e0:71:46:aa:9e:9b:f7:67:10:30:
                    5e:ed:04:5a:9a:fe:9b:b3:59:45:5f:68:70:16:5b:
                    93:ad:1f:44:8f:01:cd:c6:48:44:6e:c2:72:4b:d6:
                    32:39:5a:2d:09:ac:9d:e0:a0:05:b8:17:dc:70:24:
                    82:76:56:71:d4:08:81:7f:31:aa:d4:66:a2:4f:12:
                    d8:52:3a:a0:71:e9:cf:82:1e:af:83:fa:58:54:e2:
                    d6:e7:de:57:1e:bd:62:74:d6:94:4c:f0:9a:91:bb:
                    70:21:25:75:e6:73:79:a2:ea:0f:3d:53:57:dd:38:
                    09:56:49:17:0f:1f:cd:3f:a5:3f:3e:19:35:a7:7c:
                    29:6d:3d:e9:b0:67:61:cb:d9:38:27:bb:35:80:7c:
                    e8:02:e8:86:3f:99:05:fe:2f:ac:8b:9e:4e:d9:33:
                    a6:01:62:f6:f7:73:bb:87:72:38:03:b9:ad:f7:6e:
                    36:d2:05:60:25:ad:e0:e1:5b:5c:78:87:ad:a1:c1:
                    00:7a:fb:e2:00:43:15:24:4e:fc:ac:1f:a3:89:36:
                    ef:76:d2:ba:32:f2:ba:9d:38:88:ba:ed:3f:81:02:
                    07:4a:70:7c:95:0b:e9:9b:9d:6d:41:12:2f:43:31:
                    4d:1f:74:d5:85:f4:58:07:d6:ae:38:34:ab:2f:e0:
                    69:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:70:AF:1B:4D:0C:FC:D2:32:AC:FA:BE:89:C1:D0:E2:3B:59:AA:17
            X509v3 Authority Key Identifier:
                keyid:2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135332e302f32342d3234203d3e20323634373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:b6:08:6a:7a:aa:97:17:86:8c:13:b9:4e:b4:1a:71:91:fe:
         ed:78:ae:85:8a:45:88:38:68:9e:ac:f9:37:e7:5d:ba:c2:90:
         9c:9d:b6:ed:77:8e:79:c1:df:b1:2b:c5:1c:f0:4a:92:c1:72:
         2c:01:d6:b3:7e:84:e2:80:ca:3c:8b:f6:cc:7b:7b:aa:d5:42:
         92:8d:e4:f4:43:d0:be:f8:32:28:6c:05:f6:67:49:c8:ef:68:
         fe:24:d0:37:60:dc:25:e8:27:4e:cf:34:79:ac:15:a4:be:16:
         14:a0:4a:48:82:f9:90:c3:54:2c:b1:9c:68:53:21:df:87:39:
         74:20:da:3d:3a:ca:e5:54:96:87:c8:5d:95:0f:96:13:91:6a:
         5c:66:94:f3:f8:8e:7f:de:00:fb:e8:38:96:11:fa:4b:d3:6b:
         d5:9d:03:ef:2e:79:02:12:99:08:c2:6d:88:6d:0f:3c:0c:45:
         a4:eb:2e:29:19:4a:c6:a9:f1:a7:68:70:aa:f1:4b:c2:6e:54:
         92:04:e1:a3:1f:7a:73:f9:3e:d4:b5:d0:6a:d7:c6:13:9c:d4:
         d9:22:02:4d:45:7c:b1:ae:b6:89:d1:d6:63:98:35:7b:08:8d:
         a6:e4:1f:93:da:20:16:e4:f2:b7:48:76:aa:b7:6b:59:e2:b9:
         e8:14:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:43:55 2026 by rpki-client