This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e32342e302f32312d3234203d3e203532343234.roa
File:                     3137302e3231302e32342e302f32312d3234203d3e203532343234.roa (raw, json)
Hash identifier:          5VnaqAjGKMeJ2BvbK+IXXv0XzAevSXlox2EtQTniR5E=
Subject key identifier:   1B:31:74:20:4E:25:4B:53:6B:28:18:12:5B:25:85:C8:49:6B:13:26
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       1746D81BF5A20EC4760D727BC413B5C3380C9706
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e32342e302f32312d3234203d3e203532343234.roa
Signing time:             Tue 06 Jan 2026 19:22:14 +0000
ROA not before:           Tue 06 Jan 2026 19:17:14 +0000
ROA not after:            Tue 05 Jan 2027 19:22:14 +0000
asID:                     52424
IP address blocks:        170.210.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:46:d8:1b:f5:a2:0e:c4:76:0d:72:7b:c4:13:b5:c3:38:0c:97:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Jan  6 19:17:14 2026 GMT
            Not After : Jan  5 19:22:14 2027 GMT
        Subject: CN=1B3174204E254B536B2818125B2585C8496B1326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:32:e2:82:2d:7c:da:71:45:83:c9:6c:80:20:
                    fa:31:9d:14:21:d0:85:f0:c2:0e:1b:93:f7:d3:a4:
                    b0:8e:17:eb:35:47:c3:aa:15:c3:a5:84:99:33:48:
                    cf:81:3e:96:ee:cb:5b:53:12:70:89:76:a4:6b:e6:
                    90:ef:a1:2f:af:25:a2:41:9d:d0:42:07:fc:b0:18:
                    87:f3:62:04:f4:4c:21:1b:b4:fa:af:10:94:d2:14:
                    fe:9f:3d:49:1a:49:cd:50:29:5e:de:1a:92:f2:91:
                    a2:e6:47:2d:b0:dd:60:30:84:5e:ad:d9:01:8e:92:
                    d9:00:22:e0:b2:31:39:ca:dd:88:c5:85:0c:e7:b8:
                    fa:d8:0c:0f:1e:e9:1e:28:89:8d:24:ad:ea:47:c1:
                    3a:90:91:54:43:fd:8d:5c:c8:1b:d7:1e:7a:bc:87:
                    09:0d:9b:27:d7:c9:24:a7:57:20:46:7b:b4:bd:3c:
                    21:11:ed:07:b7:03:06:cc:c4:fe:07:3d:6d:31:b0:
                    91:78:64:a2:35:0c:1f:62:fe:e8:86:e5:fd:15:38:
                    60:4e:b3:cb:c7:2b:94:f9:99:80:a1:aa:bb:11:42:
                    ef:e6:d2:92:db:92:4c:a1:0e:41:4b:45:eb:78:8e:
                    d5:21:46:6e:44:e6:0c:2e:10:59:03:a9:c7:b4:ba:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:31:74:20:4E:25:4B:53:6B:28:18:12:5B:25:85:C8:49:6B:13:26
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e32342e302f32312d3234203d3e203532343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:e7:66:a2:df:81:dc:b1:18:f7:8f:cd:5e:96:ae:0a:5d:ac:
         1f:e6:3c:be:94:58:bf:24:c9:6c:39:7b:b3:b2:68:7a:ec:03:
         43:b5:98:f2:1e:8c:50:cf:da:c7:7e:ff:42:fc:94:3a:84:3f:
         21:43:11:e2:35:1d:a0:af:17:4c:49:27:8f:6c:a9:85:04:ab:
         7f:b6:a5:b4:e5:f6:9f:c0:93:36:1c:36:3e:d2:9d:35:f9:0c:
         38:d0:59:c0:8a:29:a9:d2:ed:0d:ae:32:d0:a3:4e:e7:eb:22:
         b9:fd:43:92:af:2a:e3:8c:d4:2d:a5:85:66:fc:bb:27:f1:d7:
         f4:5d:21:3c:c6:c1:cd:82:0d:6d:5f:b1:3b:91:4c:05:9b:f8:
         6a:d3:f1:05:97:64:99:3b:15:3e:e0:16:39:70:21:01:a6:63:
         33:41:00:04:d3:8c:03:1d:8a:24:c8:08:5a:8b:6d:9c:5f:36:
         8a:6e:23:b6:56:e0:b7:ea:5b:32:42:bb:29:dc:29:ad:dd:bf:
         44:8a:07:6f:e8:64:59:9d:9e:95:b5:25:c8:9b:f4:1f:c8:59:
         83:0b:f6:20:e4:2d:39:88:4d:74:6f:b2:80:5c:39:2c:fd:b2:
         23:b0:07:b9:d7:69:e1:b3:92:ca:15:6b:ba:80:e5:8b:24:30:
         71:60:3a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:12 2026 by rpki-client