This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa
File:                     3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          FC0A4kYMN+12KDsouBYRhnvcA+jC3RVPfkSzue4aikM=
Subject key identifier:   75:30:3A:FD:03:C2:ED:7B:2C:6C:89:15:36:29:24:FB:F7:FA:E7:6D
Certificate issuer:       /CN=089B798E1BD051786195E5F9D02238D550A5EAD7
Certificate serial:       60A7931DFDD09870741164894777544824629763
Authority key identifier: 08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:26:53 +0000
ROA not before:           Tue 06 Jan 2026 19:21:53 +0000
ROA not after:            Tue 05 Jan 2027 19:26:53 +0000
asID:                     52468
IP address blocks:        170.244.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 23:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a7:93:1d:fd:d0:98:70:74:11:64:89:47:77:54:48:24:62:97:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089B798E1BD051786195E5F9D02238D550A5EAD7
        Validity
            Not Before: Jan  6 19:21:53 2026 GMT
            Not After : Jan  5 19:26:53 2027 GMT
        Subject: CN=75303AFD03C2ED7B2C6C8915362924FBF7FAE76D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:26:82:8d:d3:ce:a3:cb:49:32:8d:3f:66:
                    89:a7:66:57:87:1a:4f:c6:57:7d:99:d9:b6:3f:37:
                    c4:8c:2b:62:b6:b4:00:a0:11:3c:c5:d3:f3:ec:fd:
                    8f:12:f0:91:e6:46:65:f7:3d:ac:ab:d5:95:21:b0:
                    e1:f1:c8:2b:ca:4f:71:9a:17:c5:cb:7c:05:70:39:
                    f9:6f:ca:f6:40:4c:10:38:f4:46:98:ff:29:6e:89:
                    47:cb:f2:b6:10:9a:51:c2:4b:ba:d1:5c:41:4c:17:
                    3e:f6:7f:82:40:ea:f6:61:8b:69:3a:29:c1:ad:b8:
                    4e:86:09:9f:6c:05:d1:44:ba:04:a2:ac:bf:c6:64:
                    54:75:50:d6:e4:9c:14:bc:65:26:11:d4:83:37:f5:
                    6f:af:11:fa:29:e4:45:c3:78:d6:a7:15:78:4d:51:
                    ff:4f:32:a1:12:92:b4:b9:3b:b6:c9:ca:b3:11:70:
                    c4:bf:c6:4e:c2:82:84:c4:f1:7a:d2:71:62:35:e9:
                    b2:94:92:2a:89:4d:7c:c3:25:af:9f:3a:cc:9c:79:
                    e5:90:e0:54:e2:94:f8:a6:5b:8b:69:1d:73:5a:bf:
                    da:9a:1c:75:1b:6c:47:e2:71:42:04:ff:ee:71:a2:
                    0a:4d:2b:e6:ef:e1:c1:08:22:53:f0:23:89:08:b5:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:30:3A:FD:03:C2:ED:7B:2C:6C:89:15:36:29:24:FB:F7:FA:E7:6D
            X509v3 Authority Key Identifier:
                keyid:08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:90:62:e0:15:7c:b1:4a:08:85:09:9a:6e:8f:47:d9:5e:fa:
         21:74:9e:8c:bc:61:a1:ad:97:bc:f7:4f:71:0c:b6:2e:d6:f4:
         31:47:b7:74:9e:c2:2a:78:0d:80:e0:5c:d0:cd:41:20:6f:c1:
         41:04:98:f3:c2:9f:fc:08:51:f4:66:de:63:b0:14:63:d3:97:
         4b:b0:3e:f1:b3:13:b2:cd:db:3a:c4:da:ae:d1:37:2e:8d:0c:
         18:34:9e:5b:3a:b9:0a:cb:49:1a:4c:ce:bb:8d:f6:1f:e0:69:
         5a:c8:02:10:12:cb:41:a2:24:71:e4:81:39:a4:64:88:15:c8:
         a0:f0:7c:08:89:5e:ad:c0:24:f0:91:5b:18:c6:0e:af:47:88:
         53:6a:fe:a3:d7:ef:62:d5:dd:22:44:38:4c:ee:f6:88:bf:cf:
         3b:c9:31:74:e7:44:e9:a0:c9:47:f1:b8:66:85:2b:4b:45:e1:
         49:81:a5:94:d3:e1:e5:7d:64:6d:00:4c:47:55:31:ca:ef:a3:
         c6:f1:ad:0e:30:c3:b4:ca:cc:d6:18:f5:b5:40:6e:70:12:47:
         8b:3f:18:c9:d9:ab:e3:56:4e:e2:de:f9:f2:39:3f:22:62:33:
         8a:d9:a2:19:87:1c:5c:c6:d7:f0:8d:e0:01:76:ec:a3:95:21:
         75:c5:cd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:36:54 2026 by rpki-client