This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3234302e302f32322d3234203d3e20323634363330.roa
File:                     3137302e3231302e3234302e302f32322d3234203d3e20323634363330.roa (raw, json)
Hash identifier:          l5SgdQW/7L7gN1dJUG3ULGVzsfxrr+F+HjPhnd3HnoQ=
Subject key identifier:   B7:BC:77:DC:EF:2A:90:D3:8F:82:E8:22:4E:9A:8D:D3:50:BB:85:EF
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       72CA1A2280A736F952F9A1ABA30B8C3A289D6603
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3234302e302f32322d3234203d3e20323634363330.roa
Signing time:             Tue 06 Jan 2026 19:22:12 +0000
ROA not before:           Tue 06 Jan 2026 19:17:12 +0000
ROA not after:            Tue 05 Jan 2027 19:22:12 +0000
asID:                     264630
IP address blocks:        170.210.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 15:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ca:1a:22:80:a7:36:f9:52:f9:a1:ab:a3:0b:8c:3a:28:9d:66:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Jan  6 19:17:12 2026 GMT
            Not After : Jan  5 19:22:12 2027 GMT
        Subject: CN=B7BC77DCEF2A90D38F82E8224E9A8DD350BB85EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:3a:8d:c6:7f:81:ae:11:e2:bd:fe:36:f2:
                    36:4f:14:ec:b2:ae:98:0a:4f:34:b2:c2:8a:37:a6:
                    f2:22:25:03:86:5c:13:fe:06:fe:bf:5e:cb:1e:7f:
                    ae:1b:fe:c7:36:c0:46:09:3f:0c:da:f8:a8:04:97:
                    db:8b:39:6a:3a:e1:36:7f:fa:06:1f:c5:29:62:a6:
                    7d:2b:01:b5:0b:1e:83:15:6f:45:48:6a:11:3f:1b:
                    29:1f:8e:8b:28:79:f2:78:c0:63:0f:c2:65:2f:85:
                    fd:67:5b:09:31:55:17:96:b5:6d:ca:de:96:9b:d3:
                    cc:d7:65:2a:36:1c:1a:b9:3f:6f:6a:b5:c9:28:ee:
                    d0:45:37:23:86:ca:bd:79:91:26:1a:c7:8b:af:9c:
                    a6:21:ee:1f:e2:88:e6:b1:2b:e2:71:ef:ef:ea:31:
                    43:62:ba:f3:1f:00:f1:dc:a7:a9:30:b3:38:f3:a2:
                    98:c7:a9:4b:80:7c:7e:74:43:4a:f6:22:5d:c2:96:
                    9d:5b:69:f4:10:b9:c0:de:37:55:c2:9c:83:0d:ee:
                    ed:46:99:3b:f1:ea:ee:43:b6:bd:92:c4:46:5d:3b:
                    64:e9:0b:b7:d0:32:27:c0:80:8f:21:13:47:1f:a4:
                    bd:82:9d:60:99:f9:03:23:c1:20:93:43:b5:b3:74:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BC:77:DC:EF:2A:90:D3:8F:82:E8:22:4E:9A:8D:D3:50:BB:85:EF
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3234302e302f32322d3234203d3e20323634363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:2e:5c:d3:03:e6:e0:5f:9a:91:20:b0:95:76:55:8d:59:f8:
         9b:90:53:ad:47:b9:ba:c7:c6:a3:f4:66:70:16:b2:3a:07:dd:
         2a:0d:f0:9a:6d:03:6b:74:f3:5a:eb:f9:68:0e:79:59:db:5e:
         fa:b9:42:ab:98:26:8e:30:2c:08:e8:5f:24:0f:3f:43:c4:6b:
         72:4c:dc:94:3d:d2:0a:c2:03:6f:cc:b0:a4:f0:7a:cc:45:fe:
         7f:dd:30:c1:f3:34:01:17:62:bd:a5:97:31:26:0f:32:ed:fd:
         6f:5c:fa:cc:38:e7:3f:4f:67:b1:a3:7b:11:9b:49:8c:cb:d1:
         5a:5a:97:3a:02:47:5c:c9:27:9a:98:09:c3:57:19:1d:33:2a:
         65:cc:18:0d:85:0f:b2:12:d1:80:23:5e:df:de:e3:29:f6:28:
         8e:db:45:e5:35:11:74:47:66:22:ba:9b:36:67:f1:74:73:17:
         b6:f9:12:ee:50:2d:32:3f:a6:a2:1e:b5:7d:df:b8:a3:d7:83:
         11:98:dd:36:6f:2f:ce:8e:3a:d7:27:8d:d6:fe:53:3d:26:c9:
         3e:2a:ad:1b:63:a7:e5:2c:5d:04:56:8a:05:57:c1:f1:88:9b:
         1c:46:a3:f6:87:e4:71:8c:c7:d5:22:84:13:bf:bb:b3:80:b5:
         e7:70:8e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:14:27 2026 by rpki-client