This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/3137302e37382e3138392e302f32342d3234203d3e203132363834.roa
File:                     3137302e37382e3138392e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          CTXp9aU/ab4OX1WD0g5a5PnzpLO3nM9LPMiwHTYWVbk=
Subject key identifier:   C6:77:99:B4:38:50:7A:AF:2D:7A:D4:23:57:14:38:CD:2C:88:6A:6C
Certificate issuer:       /CN=CE9B6041658E7187B06A984F435470A36286EB73
Certificate serial:       5B0A8E82CE27362ECCFF50BD187C1321D724B642
Authority key identifier: CE:9B:60:41:65:8E:71:87:B0:6A:98:4F:43:54:70:A3:62:86:EB:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE9B6041658E7187B06A984F435470A36286EB73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/3137302e37382e3138392e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 06 Jan 2026 19:28:59 +0000
ROA not before:           Tue 06 Jan 2026 19:23:59 +0000
ROA not after:            Tue 05 Jan 2027 19:28:59 +0000
asID:                     12684
IP address blocks:        170.78.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/CE9B6041658E7187B06A984F435470A36286EB73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/CE9B6041658E7187B06A984F435470A36286EB73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE9B6041658E7187B06A984F435470A36286EB73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0a:8e:82:ce:27:36:2e:cc:ff:50:bd:18:7c:13:21:d7:24:b6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE9B6041658E7187B06A984F435470A36286EB73
        Validity
            Not Before: Jan  6 19:23:59 2026 GMT
            Not After : Jan  5 19:28:59 2027 GMT
        Subject: CN=C67799B438507AAF2D7AD423571438CD2C886A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4a:cb:3b:cc:fc:44:6b:52:4b:96:3c:bd:c4:
                    7c:cd:c8:ca:e7:6a:f0:b8:6d:ff:8c:c9:6a:9d:5a:
                    f6:34:fc:4b:e4:ef:12:44:b7:3b:65:8e:99:2c:6c:
                    2e:2a:9e:b8:fd:a5:fb:81:93:c5:09:99:dc:7e:af:
                    ba:2c:ba:87:79:d9:96:f6:46:8f:ce:f6:9a:0e:05:
                    18:aa:c8:26:a6:e1:a3:b9:f0:b1:64:5b:b1:60:c1:
                    66:ef:57:a7:cf:51:e5:22:c8:3c:88:0d:a0:a0:46:
                    dd:58:d1:eb:83:8a:97:69:84:0c:7c:81:c2:c8:8c:
                    f8:c3:92:44:d0:15:d7:26:1f:b8:d2:f1:63:eb:f8:
                    83:7a:26:99:6e:94:a9:dd:5b:f9:b3:08:50:c0:d5:
                    bd:d8:28:8d:70:bc:9f:b9:be:7f:99:ff:7b:5f:c5:
                    4f:a2:f6:de:be:29:5a:28:ef:dc:23:f8:82:94:d1:
                    fc:7d:dc:66:ea:55:2d:5f:4c:7f:59:95:3a:c1:72:
                    7f:5a:d4:92:4e:6e:36:5c:fd:7a:38:3f:6a:c1:2a:
                    5d:43:be:50:c4:b7:96:d7:21:e9:7c:a0:75:21:28:
                    d4:61:aa:1a:08:ab:5f:87:1e:9c:fd:67:a4:84:98:
                    77:0f:76:05:36:25:0e:9b:1f:f8:b5:79:9d:2c:d7:
                    d4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:77:99:B4:38:50:7A:AF:2D:7A:D4:23:57:14:38:CD:2C:88:6A:6C
            X509v3 Authority Key Identifier:
                keyid:CE:9B:60:41:65:8E:71:87:B0:6A:98:4F:43:54:70:A3:62:86:EB:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/CE9B6041658E7187B06A984F435470A36286EB73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE9B6041658E7187B06A984F435470A36286EB73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/3137302e37382e3138392e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:6a:25:5f:20:60:f6:a2:b6:90:37:ad:ca:b0:e0:98:d8:12:
         d0:5e:30:48:b9:53:0a:fb:d9:a6:45:87:01:95:91:b3:bc:c5:
         ee:53:25:d6:ce:83:05:27:50:1a:19:0d:ab:97:91:da:2f:76:
         91:cf:bd:67:09:d5:ae:30:68:b0:09:33:26:b8:0a:3c:70:21:
         65:21:54:f8:12:bf:99:b5:ca:4f:30:33:e2:2b:4b:02:d6:5a:
         7a:16:62:6e:d5:92:0f:a0:93:7e:20:99:59:a1:f6:79:74:74:
         db:f8:f9:ed:b4:0b:fd:67:9e:24:c4:18:45:0d:17:d5:cf:47:
         3e:c9:54:07:d2:de:af:ab:25:8b:55:eb:bd:14:ac:21:17:1f:
         9f:c7:ab:9d:89:b3:fe:12:e2:1d:9c:4c:23:43:1c:bb:a9:5b:
         7f:87:a7:8e:9f:48:57:e5:5f:7d:f5:a7:73:84:7f:f5:85:f2:
         5b:f6:2a:d2:f0:0c:8f:b7:23:eb:c5:21:23:e5:1d:39:1c:e2:
         c4:74:63:ad:74:fe:4c:c4:3c:3b:75:ce:2b:26:d1:47:97:4c:
         5e:be:96:45:82:64:ba:41:5e:14:1f:b4:fe:b3:44:46:1b:2a:
         76:c1:10:05:ba:53:68:86:c4:d5:0f:b6:02:ef:39:06:e8:61:
         36:c3:3a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:56:24 2026 by rpki-client