This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3137302e38342e3233322e302f32342d3234203d3e203634313030.roa
File:                     3137302e38342e3233322e302f32342d3234203d3e203634313030.roa (raw, json)
Hash identifier:          BMdsY32+WDDNwrJrgNEVT9GxYrvHlvtPxLL0YkeY+KQ=
Subject key identifier:   80:3A:29:62:AA:CD:25:D3:1A:B4:2D:5D:2C:6A:62:54:88:A4:C8:F7
Certificate issuer:       /CN=3CB23E6FBC1B568FD478F82218A2B5A9A90EC844
Certificate serial:       15D4C4206EA148F2E1B36ED44F49E5CA1608B81A
Authority key identifier: 3C:B2:3E:6F:BC:1B:56:8F:D4:78:F8:22:18:A2:B5:A9:A9:0E:C8:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3137302e38342e3233322e302f32342d3234203d3e203634313030.roa
Signing time:             Mon 19 Jan 2026 18:35:00 +0000
ROA not before:           Mon 19 Jan 2026 18:30:00 +0000
ROA not after:            Mon 18 Jan 2027 18:35:00 +0000
asID:                     64100
IP address blocks:        170.84.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d4:c4:20:6e:a1:48:f2:e1:b3:6e:d4:4f:49:e5:ca:16:08:b8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CB23E6FBC1B568FD478F82218A2B5A9A90EC844
        Validity
            Not Before: Jan 19 18:30:00 2026 GMT
            Not After : Jan 18 18:35:00 2027 GMT
        Subject: CN=803A2962AACD25D31AB42D5D2C6A625488A4C8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:55:a7:80:01:8d:c8:2c:2c:10:d1:70:53:74:
                    0f:6c:0d:bd:b5:01:6e:f8:50:54:4c:09:f2:34:5b:
                    27:14:ce:61:4e:29:c0:00:f6:90:8e:81:83:e9:a3:
                    39:06:3d:f1:81:b3:ed:2a:3d:7e:7b:d3:d1:19:be:
                    21:e3:a5:37:02:f0:5a:a2:65:3e:57:45:a8:a5:f6:
                    d8:87:69:45:65:71:04:c4:d4:5d:57:d9:f4:e1:e1:
                    3e:b4:c7:ce:ff:ab:b5:d1:38:e6:0d:da:ec:f0:43:
                    60:d1:83:6e:a3:b9:fa:bd:bd:56:cd:8c:1a:6f:e5:
                    1c:4d:10:9c:0a:cd:63:f0:25:1a:68:2a:98:85:e6:
                    f8:9f:a8:3d:f8:63:fc:97:97:1c:9d:01:98:e0:23:
                    8d:31:0b:c7:24:c3:63:89:b7:d3:ad:ae:65:20:b8:
                    9a:05:93:7c:a3:5a:7f:50:2e:a5:fc:51:84:7c:a9:
                    4f:44:af:51:61:47:1a:d4:48:d9:32:bf:44:f3:d8:
                    d9:c3:96:60:1d:90:c2:8c:5f:bc:e5:05:3b:ff:10:
                    eb:09:fc:7e:69:6f:d1:41:01:dc:48:73:4e:1b:47:
                    f1:cb:d1:cb:69:f7:2c:d0:a1:69:b9:7e:b3:34:6f:
                    b9:ab:43:ef:c5:37:46:3d:87:e9:33:a5:0f:b8:74:
                    47:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3A:29:62:AA:CD:25:D3:1A:B4:2D:5D:2C:6A:62:54:88:A4:C8:F7
            X509v3 Authority Key Identifier:
                keyid:3C:B2:3E:6F:BC:1B:56:8F:D4:78:F8:22:18:A2:B5:A9:A9:0E:C8:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3137302e38342e3233322e302f32342d3234203d3e203634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:12:16:31:06:ab:a0:a2:dd:ca:d5:27:e6:18:fd:cb:70:e2:
         a8:68:4b:c0:da:21:ed:54:6b:26:7e:9c:82:09:d1:e3:3b:b9:
         a6:62:6b:64:f1:b9:4b:31:52:aa:e6:31:78:4d:3a:f1:09:70:
         b8:82:87:88:4d:f1:1d:b2:5f:c9:84:c7:d8:ac:75:1c:f3:83:
         83:16:14:d3:7c:2c:a3:8a:7d:30:62:78:3a:7d:75:d5:8b:7b:
         59:b8:2a:1c:b8:fe:fd:b1:4b:80:8c:f8:a3:58:f3:64:56:60:
         e2:d5:fe:50:b0:99:8b:0d:4a:53:42:cb:6b:03:b4:04:dd:c1:
         29:49:21:bc:0b:9d:28:e4:d9:e5:f8:e8:4a:a4:22:4b:09:b8:
         11:67:aa:02:09:08:d0:1c:da:fb:d7:fb:3d:69:4e:98:85:f9:
         9d:c9:f1:44:a0:d3:18:b0:a7:ec:b6:44:04:ce:0e:0b:cb:4a:
         d8:ff:1b:31:8c:76:1b:51:c4:f0:a4:0e:df:37:ae:af:5d:b1:
         ad:a0:fa:bf:a9:51:cd:9e:62:94:23:98:88:24:a6:a1:31:52:
         5f:42:7d:6d:b4:ed:a9:a1:1d:24:4f:53:fe:0d:11:39:ad:e0:
         71:ca:a3:d0:64:42:95:c5:4d:6d:45:52:8d:c6:ff:ef:97:92:
         f7:2b:4c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:28:10 2026 by rpki-client