This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3231362e302f32322d3234203d3e20323633323034.roa
File:                     3137302e3231302e3231362e302f32322d3234203d3e20323633323034.roa (raw, json)
Hash identifier:          LSpTaUyKoqASEyQCB9XnqGxZu3a+CrdFwQ/c6piRE8I=
Subject key identifier:   0C:91:6D:EB:9F:9A:C4:5E:67:CA:AC:09:42:57:C2:0F:FC:C0:30:4A
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       13794183A8B8B6BE8AB94E56A933E5599DF6104D
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3231362e302f32322d3234203d3e20323633323034.roa
Signing time:             Tue 06 Jan 2026 19:22:06 +0000
ROA not before:           Tue 06 Jan 2026 19:17:06 +0000
ROA not after:            Tue 05 Jan 2027 19:22:06 +0000
asID:                     263204
IP address blocks:        170.210.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 15:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:79:41:83:a8:b8:b6:be:8a:b9:4e:56:a9:33:e5:59:9d:f6:10:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Jan  6 19:17:06 2026 GMT
            Not After : Jan  5 19:22:06 2027 GMT
        Subject: CN=0C916DEB9F9AC45E67CAAC094257C20FFCC0304A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:7e:f8:d4:83:63:1c:91:1d:42:b6:be:ef:
                    d1:ca:2a:29:a6:13:1a:14:23:89:1a:5a:ed:51:f1:
                    b7:d0:61:6e:d9:9d:0d:f5:3c:90:89:4c:e6:8b:f5:
                    49:a0:15:f0:30:9b:64:e4:d6:64:49:76:14:08:66:
                    68:dc:13:fc:03:86:23:2e:49:c3:d1:50:08:cd:20:
                    d2:f2:8f:56:2d:3d:ec:82:92:36:63:72:0a:17:c7:
                    5f:87:3f:ab:f5:b8:ed:25:94:24:60:e1:fe:d2:14:
                    97:15:f8:f9:4d:e6:09:db:29:c4:0e:c5:4f:b7:8f:
                    a0:61:0d:cd:03:7e:3b:48:1f:45:2a:d8:bf:a0:2c:
                    12:bd:ec:0f:ee:41:80:50:b6:d9:32:4b:89:54:77:
                    e1:21:8a:e0:3c:13:6e:52:b5:2f:39:96:f6:96:bc:
                    35:d3:f4:11:55:8f:20:38:78:53:40:01:04:48:31:
                    eb:a3:04:1a:36:e8:a7:8d:f0:b3:65:b0:d6:cd:0f:
                    76:c4:0a:00:b7:e1:9e:26:bb:ec:6d:7e:c5:d6:a7:
                    a3:96:24:02:62:f1:41:d0:0b:b2:18:11:98:51:ca:
                    36:4d:fa:de:c9:3c:8f:1c:05:d4:53:d4:5b:ff:c3:
                    ef:cc:48:5a:d5:1e:37:9b:d4:fd:c8:b5:49:d1:9d:
                    cc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:91:6D:EB:9F:9A:C4:5E:67:CA:AC:09:42:57:C2:0F:FC:C0:30:4A
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3231362e302f32322d3234203d3e20323633323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:fe:3a:8a:87:ea:93:9b:47:1b:d2:b0:77:83:50:88:bb:7f:
         b3:e3:12:d3:78:7c:96:85:0a:8f:a3:1a:93:ac:8d:36:c1:f5:
         6f:9c:6e:78:5a:2d:fc:49:0a:54:95:36:b6:e3:c0:23:65:ea:
         91:5f:07:d4:e0:2b:ca:22:1f:23:9c:a2:9d:31:96:69:62:14:
         3d:eb:a7:a4:a4:fc:08:d5:28:af:56:bf:8d:fb:be:9e:60:b4:
         60:c7:6d:9d:44:c8:61:b8:9b:20:e2:a5:d5:e3:7a:0e:df:d3:
         e9:90:9d:45:7a:85:01:5f:9e:2a:a3:40:0a:00:0c:aa:8a:66:
         b3:69:02:6d:19:56:37:d1:21:3e:db:b2:5b:df:e1:1a:2e:16:
         ae:7a:fb:aa:be:40:fa:fe:65:d2:f3:ec:67:31:b7:60:91:9a:
         6d:26:2f:36:f6:b7:74:c7:1a:43:41:96:27:fe:bd:07:3c:95:
         b5:ba:cf:0c:69:f6:b7:6f:6a:58:18:43:05:58:3c:2c:05:72:
         38:5f:86:7f:4d:49:99:5a:9d:a0:9a:52:3c:80:0f:24:4c:4b:
         eb:9d:5e:98:3a:7f:f3:43:21:88:79:a2:79:cd:6e:b1:1d:4b:
         ea:16:66:67:f5:da:0b:ec:6b:9d:23:e3:06:cc:f6:8f:09:aa:
         b0:c3:8e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:37:22 2026 by rpki-client