This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3137302e302e3233322e302f32322d3234203d3e203237383433.roa
File:                     3137302e302e3233322e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier:          h5YsVNyNYFIx/x8QJSvnfAhQA6VKZNnDpzpRe1JEERI=
Subject key identifier:   4F:86:41:CE:B9:3C:23:D0:69:D3:70:01:1F:C7:4C:C0:D3:33:EC:79
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       78F23697B06A1375812ACDCB356FB4ED1264C0EE
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3137302e302e3233322e302f32322d3234203d3e203237383433.roa
Signing time:             Tue 06 Jan 2026 19:03:48 +0000
ROA not before:           Tue 06 Jan 2026 18:58:48 +0000
ROA not after:            Tue 05 Jan 2027 19:03:48 +0000
asID:                     27843
IP address blocks:        170.0.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f2:36:97:b0:6a:13:75:81:2a:cd:cb:35:6f:b4:ed:12:64:c0:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Jan  6 18:58:48 2026 GMT
            Not After : Jan  5 19:03:48 2027 GMT
        Subject: CN=4F8641CEB93C23D069D370011FC74CC0D333EC79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fe:e0:b7:cc:24:b8:b4:77:b9:44:c2:3f:38:
                    f7:57:08:6d:45:83:30:2a:73:db:21:d4:1a:cf:12:
                    a5:db:a5:be:8a:f2:ce:40:b3:cc:15:e7:7e:dd:04:
                    c2:b4:1f:3a:b2:ed:e9:92:73:40:b4:d5:d4:ac:e0:
                    51:ed:44:17:35:da:5f:2e:af:23:be:91:4a:56:75:
                    6f:48:8a:96:12:df:86:8c:4d:77:f0:ba:18:52:fb:
                    b8:60:8e:e9:2b:8b:ce:7a:55:9f:5d:00:cd:15:33:
                    ac:08:5a:46:ba:9d:16:25:d3:ee:13:7f:7f:8d:80:
                    37:f4:6b:97:bf:ec:7b:7e:75:99:5c:ac:45:02:a1:
                    bc:23:74:14:82:5f:6f:48:3c:bd:47:73:9d:a4:58:
                    b0:80:ea:df:2a:f1:fd:d0:ab:af:59:0a:8a:b1:87:
                    d7:b7:45:da:df:e8:d9:e7:5f:5b:94:c2:36:0c:24:
                    22:e0:26:50:39:6a:57:6b:aa:3b:fe:67:f5:e8:ed:
                    60:c9:51:fe:3d:45:e6:ad:dc:d8:d4:d5:45:20:d5:
                    14:65:90:47:42:fe:11:47:f4:82:d1:cf:1c:68:a8:
                    49:fe:4c:a3:7e:0a:45:43:e3:8f:61:ae:5f:e2:90:
                    70:a5:45:3f:57:b8:82:5a:f2:78:16:ed:74:41:b4:
                    23:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:86:41:CE:B9:3C:23:D0:69:D3:70:01:1F:C7:4C:C0:D3:33:EC:79
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3137302e302e3233322e302f32322d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:09:10:31:f8:63:81:99:83:a9:1a:8a:26:b4:eb:1a:87:41:
         18:8b:d6:48:61:09:07:d2:bb:d9:68:cf:74:93:31:ec:05:95:
         50:9e:57:43:91:b5:44:84:74:53:f7:c9:ee:e0:ee:cb:a8:26:
         22:04:15:62:68:e7:ba:71:5b:2a:62:e3:01:f5:fc:3c:1a:7f:
         1b:aa:e2:8a:3f:c3:63:bc:9a:b7:b1:ac:6c:f9:28:80:cb:ec:
         b3:81:bc:f6:89:b5:15:fc:b6:0e:05:6a:c5:ab:3a:29:98:cf:
         15:52:81:ab:eb:c8:ea:a2:c7:5c:56:a5:13:fa:f3:ff:98:05:
         cb:08:55:a3:07:d3:41:41:80:da:9c:d3:e4:75:50:f3:03:85:
         cf:a2:f5:18:6f:31:97:74:5a:5d:9c:0e:a2:ca:eb:9d:8d:48:
         a0:bb:0a:8c:58:45:88:7d:66:57:da:28:f8:0e:fd:07:d5:1f:
         17:40:8c:ab:a0:1e:7f:b1:89:68:5a:73:29:72:10:2c:d7:65:
         f3:5b:2d:9a:88:cd:49:88:b6:bb:a8:f6:86:16:97:37:88:f7:
         fc:d4:4b:50:c8:27:13:d6:d0:8f:62:af:b9:45:35:59:ac:60:
         32:48:e4:7a:29:88:06:8d:81:2d:3c:9e:3c:1b:a8:57:fc:f4:
         07:e8:9f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:06 2026 by rpki-client