This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e392e302f32342d3234203d3e20323730303838.roa
File:                     3137302e302e392e302f32342d3234203d3e20323730303838.roa (raw, json)
Hash identifier:          wLz81f1NN0UZXbZ+C3hFoZ9R3uP2W6izLNpgBukabag=
Subject key identifier:   79:09:5C:EB:A3:BD:E6:21:19:A2:62:52:A6:6C:6F:08:35:72:2D:AE
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       7CE856E303A97C5032D19DF6AC267F448B0BDB13
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e392e302f32342d3234203d3e20323730303838.roa
Signing time:             Wed 31 Dec 2025 15:56:52 +0000
ROA not before:           Wed 31 Dec 2025 15:51:52 +0000
ROA not after:            Wed 30 Dec 2026 15:56:52 +0000
asID:                     270088
IP address blocks:        170.0.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e8:56:e3:03:a9:7c:50:32:d1:9d:f6:ac:26:7f:44:8b:0b:db:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: Dec 31 15:51:52 2025 GMT
            Not After : Dec 30 15:56:52 2026 GMT
        Subject: CN=79095CEBA3BDE62119A26252A66C6F0835722DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e4:a4:6e:33:e9:fe:27:13:e0:e6:ea:39:11:
                    14:bd:18:7c:2a:ce:ee:c7:cf:e6:9c:cf:73:df:b7:
                    c2:4d:78:f0:09:39:8d:34:1e:c0:a5:05:6c:b3:34:
                    b3:ab:6c:fa:f8:ed:40:78:fd:3d:9a:53:84:31:cf:
                    e5:5f:2e:2e:89:4f:b5:53:3e:f9:76:72:b8:ac:b1:
                    a4:6f:17:1e:a9:b3:d7:d2:8a:64:31:4f:dd:5a:52:
                    ef:ee:c9:1f:db:45:1e:8e:ea:76:18:8b:00:37:ec:
                    00:3e:86:2d:dd:c4:b5:3e:a3:8c:43:2e:01:4a:78:
                    c8:b0:5d:00:e9:7c:e8:d3:dd:6b:23:12:9f:12:05:
                    4b:a4:22:80:c4:d4:83:52:1e:1f:62:4f:64:1e:33:
                    a0:d6:d7:60:62:eb:c7:3c:9a:0d:f5:e2:aa:09:0b:
                    15:8e:32:a9:c2:15:16:31:04:dd:27:55:3a:f6:86:
                    b9:3a:7f:eb:1a:56:af:1e:12:75:0c:d8:61:51:1f:
                    88:58:a4:7c:6f:8d:02:a2:69:a7:56:3b:50:6a:c1:
                    a2:a1:34:de:a3:31:9a:72:3b:f2:65:55:f5:18:61:
                    ee:b5:49:0d:ac:00:95:30:3d:3b:58:bf:2a:14:c5:
                    13:0a:77:7d:da:68:9f:7f:58:b1:06:65:49:6f:a4:
                    7b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:09:5C:EB:A3:BD:E6:21:19:A2:62:52:A6:6C:6F:08:35:72:2D:AE
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e392e302f32342d3234203d3e20323730303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:b7:b2:ef:4e:ea:3e:75:69:a3:c0:97:1f:0a:52:7e:93:61:
         1d:38:56:51:6b:d1:91:da:b6:24:56:03:58:79:ff:39:5b:13:
         6d:ed:9a:5c:34:04:9a:66:27:8d:e1:a8:90:8f:d8:00:9a:2d:
         13:24:57:49:7b:4f:cc:5b:f5:0c:46:9b:49:ca:29:37:18:5c:
         84:a5:11:5c:c2:d0:4f:81:58:b1:a4:51:de:a3:33:f0:84:30:
         1f:2f:3b:7e:09:b8:d5:50:ad:8f:7b:6a:6f:db:16:25:3c:4b:
         0d:6c:fd:df:67:17:15:c6:12:81:fe:6d:47:fe:75:3d:f9:a5:
         74:c0:8f:3a:97:50:84:6f:8a:8f:1a:9d:0f:fd:45:9b:6c:fb:
         4d:a1:38:75:49:28:e0:28:bd:ad:5e:4d:09:40:16:77:c3:92:
         39:9e:3d:cf:73:68:55:38:76:7d:92:28:8c:9f:15:1a:ca:48:
         68:1a:ab:63:fc:c3:9f:70:95:89:9b:d9:ef:41:95:e5:93:ac:
         d3:9c:7b:e4:c5:24:ce:4f:b8:5c:25:97:9b:27:12:77:22:26:
         10:04:0d:95:bf:c9:87:7d:6f:b1:b8:db:e8:bc:a5:7b:d7:68:
         75:4a:67:b6:bd:3b:a0:44:5b:1a:79:f4:4c:50:de:20:35:a4:
         79:62:92:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:01 2026 by rpki-client