This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3131322e302f32312d3234203d3e203631343936.roa
File:                     3137302e3231302e3131322e302f32312d3234203d3e203631343936.roa (raw, json)
Hash identifier:          3AoVJRmR6ctmVvcL6XKCAvYiony4O6cLh7+804rw2hU=
Subject key identifier:   89:0E:D9:05:25:E5:BB:4C:D1:1F:C3:F3:C6:5B:38:35:51:D2:F8:1B
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       7B18E017C8FD6A51B543D3612676441EA8750C5E
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3131322e302f32312d3234203d3e203631343936.roa
Signing time:             Tue 06 Jan 2026 19:22:11 +0000
ROA not before:           Tue 06 Jan 2026 19:17:11 +0000
ROA not after:            Tue 05 Jan 2027 19:22:11 +0000
asID:                     61496
IP address blocks:        170.210.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:18:e0:17:c8:fd:6a:51:b5:43:d3:61:26:76:44:1e:a8:75:0c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Jan  6 19:17:11 2026 GMT
            Not After : Jan  5 19:22:11 2027 GMT
        Subject: CN=890ED90525E5BB4CD11FC3F3C65B383551D2F81B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bf:0e:33:b4:6a:40:6f:37:40:88:f3:34:e7:
                    13:b5:f8:a3:00:e9:d9:cc:f1:9b:28:69:b5:7a:60:
                    56:e1:0a:f1:e0:04:7f:1c:d2:46:2f:a0:14:ce:ed:
                    3b:8a:f2:ff:4f:7f:02:5a:58:4d:12:7b:13:bb:15:
                    87:ce:18:e9:bc:78:47:0b:db:3b:29:b2:66:ca:81:
                    b7:bd:23:97:fc:93:57:de:13:8f:25:8f:26:12:c3:
                    41:46:c1:59:84:10:01:28:d6:ce:47:07:92:af:42:
                    34:26:11:31:fd:db:0f:5e:50:5c:ad:65:72:d5:7e:
                    06:58:50:d5:d9:69:8c:3d:82:cf:8b:fb:45:df:a9:
                    50:26:96:6f:72:7e:7d:a4:02:c9:1c:74:a2:b9:68:
                    84:60:e0:8d:36:5d:b5:72:4c:c3:4c:4e:c0:50:a4:
                    c7:4f:6c:be:7b:97:7a:bc:e6:02:d6:d7:35:7e:d3:
                    f0:09:4a:8c:f3:d3:83:4a:08:46:cd:eb:3c:90:38:
                    da:26:9f:8e:30:b4:5e:66:05:4e:cc:d9:0d:4b:02:
                    be:64:15:3f:24:5c:96:2d:22:f8:18:39:f5:ba:b2:
                    16:77:3e:76:6b:4a:af:0e:3a:0d:b2:e6:c5:bb:03:
                    9c:ae:a3:5b:6f:73:7e:dd:12:d5:f8:1a:c2:7a:58:
                    c1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0E:D9:05:25:E5:BB:4C:D1:1F:C3:F3:C6:5B:38:35:51:D2:F8:1B
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3131322e302f32312d3234203d3e203631343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:1e:5d:30:d8:37:6f:3b:cf:51:f6:de:02:2a:e6:e6:dd:ec:
         bb:2f:7f:2c:1d:22:9d:98:15:17:0e:bf:36:47:7e:d9:26:06:
         1c:e2:64:a2:e2:85:8d:07:30:cd:e5:10:25:ac:b9:b2:41:fb:
         11:f3:ea:87:47:0c:ff:fe:8f:0b:ed:fd:8e:fb:38:3b:d9:31:
         a7:11:70:83:67:d3:a9:fc:75:f5:7f:0b:ab:e1:2e:62:29:43:
         01:5d:e4:2b:7c:5c:27:c9:26:f6:b6:f6:ad:27:04:47:87:66:
         b6:cb:50:79:52:12:5f:46:26:27:ea:4f:e9:d2:a8:34:42:f0:
         0e:66:76:61:4d:fe:59:82:bc:cc:26:2c:4e:8b:74:04:6d:e9:
         ea:76:14:4f:8c:df:05:c3:83:2c:81:9f:b0:7d:ce:51:22:9d:
         10:95:38:39:d8:bb:32:b9:5b:aa:74:1d:b5:9d:82:b3:2f:0e:
         ff:b0:6f:11:1d:5a:d1:d1:f6:03:0d:50:7a:33:83:15:07:b0:
         59:c1:f0:1d:eb:c4:43:fa:b6:1b:03:ea:39:e4:23:28:d1:f9:
         01:20:18:71:39:3c:03:c9:f6:ba:67:bf:95:97:c0:4f:b7:8e:
         3c:a6:82:5f:79:2f:87:fb:37:2d:4a:30:15:57:1d:39:7d:c2:
         32:2a:2e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:21 2026 by rpki-client