This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3137302e3234362e35322e302f32322d3232203d3e20323633373430.roa
File:                     3137302e3234362e35322e302f32322d3232203d3e20323633373430.roa (raw, json)
Hash identifier:          wRX3j3JoxUN6436GjfVQLq7NwsPX/ylLkvfvc0QSltA=
Subject key identifier:   50:5D:1D:E3:85:C1:AC:FE:A9:BD:D3:F9:87:6F:85:B1:71:FC:3F:56
Certificate issuer:       /CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
Certificate serial:       36C642E8F260CBBE7FCCF493D309D627C7594C01
Authority key identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3137302e3234362e35322e302f32322d3232203d3e20323633373430.roa
Signing time:             Tue 06 Jan 2026 19:41:59 +0000
ROA not before:           Tue 06 Jan 2026 19:36:59 +0000
ROA not after:            Tue 05 Jan 2027 19:41:59 +0000
asID:                     263740
IP address blocks:        170.246.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c6:42:e8:f2:60:cb:be:7f:cc:f4:93:d3:09:d6:27:c7:59:4c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
        Validity
            Not Before: Jan  6 19:36:59 2026 GMT
            Not After : Jan  5 19:41:59 2027 GMT
        Subject: CN=505D1DE385C1ACFEA9BDD3F9876F85B171FC3F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:ee:4a:c4:6a:04:94:b8:f5:e1:9d:3a:a4:
                    6f:21:29:f3:02:f1:bf:53:e8:0d:20:7a:0e:4b:22:
                    c3:84:02:17:62:5d:3d:73:e8:c1:a0:6a:fe:4d:70:
                    6b:ba:1e:eb:6f:1b:6f:fb:05:0d:96:ff:ce:59:88:
                    24:3e:3f:54:57:ad:1d:15:61:42:b9:a8:18:03:91:
                    37:4b:b4:bb:21:cc:2b:9c:b0:80:df:11:42:15:c4:
                    96:7d:f4:69:7b:48:e0:09:7e:76:a7:22:1c:5b:c2:
                    d7:be:54:9e:f2:ad:fe:6c:08:ee:df:ab:63:c9:57:
                    31:43:c0:37:ce:43:6a:a6:17:12:b8:ea:ea:ed:c0:
                    e8:5f:f8:3d:d1:b5:77:6d:8a:98:fe:60:0c:b5:47:
                    d5:27:ad:19:f0:2d:7a:62:0b:89:2a:7c:36:ff:b6:
                    9c:76:e7:a9:38:65:b1:5d:3b:77:37:80:28:b3:e3:
                    85:0d:21:b7:e4:55:42:6b:fb:f5:8d:2e:ad:21:02:
                    ea:ea:1c:fb:94:c4:6a:48:43:03:b5:51:58:50:07:
                    f1:0b:e0:b0:b3:de:c9:0e:5b:0b:50:24:78:34:21:
                    b5:71:7d:74:52:fc:9e:e4:69:4b:b5:5d:94:71:fa:
                    6b:c8:5a:20:68:c6:c8:97:94:a1:a8:20:7c:40:e5:
                    fe:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5D:1D:E3:85:C1:AC:FE:A9:BD:D3:F9:87:6F:85:B1:71:FC:3F:56
            X509v3 Authority Key Identifier:
                keyid:30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3137302e3234362e35322e302f32322d3232203d3e20323633373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:1e:d2:0d:e6:57:2c:13:45:df:44:77:2f:a0:84:ec:28:f7:
         11:0b:38:21:0e:b0:0b:64:32:cb:3a:c0:a5:84:ae:59:e1:46:
         7c:8b:08:9f:0f:1d:6e:e1:2f:fd:7e:da:75:62:00:9e:ea:e2:
         c5:9c:1a:92:05:5d:1f:f0:e7:56:78:5a:17:23:d6:c2:aa:5b:
         f8:65:64:af:6d:22:42:03:ef:f1:c3:0f:f7:ba:09:30:b2:42:
         79:df:0a:64:a0:1c:ad:4c:ec:7d:b8:48:0b:b7:22:90:9f:54:
         46:90:7b:eb:c2:92:d8:18:c2:24:c8:a9:b4:bb:93:19:90:57:
         44:f3:d9:d5:b5:f3:10:ab:57:d3:26:92:f6:78:7f:6a:4c:54:
         7c:da:3f:23:af:5b:70:b0:25:25:77:ae:da:e5:29:7e:d4:c8:
         74:2d:50:21:12:05:9b:2a:10:8f:46:61:c0:5a:a6:28:aa:2f:
         c3:b0:2d:92:8d:4c:48:9b:df:2b:e6:1b:66:db:42:94:dd:3f:
         af:ce:bd:d4:58:12:41:af:8b:e5:e9:a8:96:7b:cd:1a:9f:a9:
         a6:0b:24:7b:bd:ea:89:1c:11:77:1a:58:04:c2:72:68:b4:18:
         11:58:cf:a8:d0:23:66:52:2f:21:02:d7:a7:7b:be:93:9a:f7:
         a4:45:65:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:15 2026 by rpki-client