This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3137302e3234352e33342e302f32342d3234203d3e203131353632.roa
File:                     3137302e3234352e33342e302f32342d3234203d3e203131353632.roa (raw, json)
Hash identifier:          W0fbw53NHGvo7Do2B8Wx1D7BwAbYwslLNBxzWf1tG80=
Subject key identifier:   1C:2C:BE:82:0E:B1:29:1B:A3:AD:FF:EC:13:E8:7F:39:74:D4:3A:FC
Certificate issuer:       /CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Certificate serial:       27D48FEF5ABBCD1889C689582340A72C5FD1D664
Authority key identifier: 8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3137302e3234352e33342e302f32342d3234203d3e203131353632.roa
Signing time:             Tue 06 Jan 2026 18:59:16 +0000
ROA not before:           Tue 06 Jan 2026 18:54:16 +0000
ROA not after:            Tue 05 Jan 2027 18:59:16 +0000
asID:                     11562
IP address blocks:        170.245.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d4:8f:ef:5a:bb:cd:18:89:c6:89:58:23:40:a7:2c:5f:d1:d6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
        Validity
            Not Before: Jan  6 18:54:16 2026 GMT
            Not After : Jan  5 18:59:16 2027 GMT
        Subject: CN=1C2CBE820EB1291BA3ADFFEC13E87F3974D43AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:3e:05:15:bf:21:4c:a2:47:fe:63:2e:15:
                    f2:80:91:4a:62:c3:00:9f:c6:31:5d:c7:35:47:53:
                    fd:e9:31:d7:ca:07:e0:e9:6b:7b:b3:d4:c4:e3:c3:
                    4d:58:d8:9d:c7:ad:43:b8:37:f8:9b:ae:a1:88:d8:
                    d1:ac:0f:a4:f4:d5:cc:22:2a:52:81:74:86:45:ea:
                    0d:43:36:a7:d7:f5:80:62:ee:b5:66:5d:d3:02:df:
                    df:95:93:05:58:08:5e:92:07:70:5e:1a:a4:0a:24:
                    34:42:f5:20:94:d0:71:9d:b9:e7:66:8f:3c:88:ae:
                    7c:1f:8e:a1:ae:b0:f5:31:12:fb:6a:a7:c2:62:69:
                    4c:ca:b1:d9:b4:4c:46:3a:0d:7d:e2:70:47:45:f2:
                    cf:23:a2:54:f5:f4:7a:74:c6:f1:5b:91:1c:2f:3e:
                    c2:c9:70:34:7a:58:80:fa:7b:2b:2f:2a:3e:dd:ad:
                    2c:a0:3d:11:fd:1e:cf:7a:40:dd:dd:cf:ef:0f:7c:
                    98:e8:f2:cf:69:49:82:fd:e9:d2:bd:b7:08:c6:ea:
                    3f:df:1a:53:2b:98:09:3f:a2:f0:92:84:ad:a7:37:
                    c1:86:42:fb:e2:65:66:e9:81:c6:35:3c:20:4a:e2:
                    6c:78:00:68:db:3f:3a:7d:76:55:8c:58:78:ed:d3:
                    f8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2C:BE:82:0E:B1:29:1B:A3:AD:FF:EC:13:E8:7F:39:74:D4:3A:FC
            X509v3 Authority Key Identifier:
                keyid:8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3137302e3234352e33342e302f32342d3234203d3e203131353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:ba:e6:d9:ea:d9:00:73:94:19:d7:71:18:d9:bd:44:2d:ee:
         e1:53:4d:09:64:ec:cd:65:27:1f:8a:ea:5d:6d:b1:d1:75:0e:
         2c:51:c7:43:35:d7:2e:1c:ee:0a:b7:39:f7:8b:36:8e:ba:2a:
         b2:46:ad:0a:04:c3:e5:eb:b3:be:a6:90:ea:75:85:f0:66:4e:
         aa:90:4b:70:8b:fd:34:b4:c4:4d:10:36:77:59:ed:f8:9f:f1:
         de:5f:85:e7:24:13:36:05:46:08:b9:5b:c0:c9:8d:cf:1c:bf:
         58:a8:b2:f4:61:20:f6:24:3d:99:ae:c1:89:65:1a:c8:3f:f6:
         f1:36:09:4c:cc:d4:c8:e9:8d:d7:47:ad:26:08:69:42:0f:28:
         f5:ec:ef:4a:ae:20:dc:03:33:77:fd:86:78:89:6a:af:2e:18:
         d3:6a:5c:aa:be:07:7a:2d:8a:57:bb:ae:4f:06:c6:33:1a:36:
         1a:a9:52:87:4e:2c:25:e1:3f:48:d1:e4:e7:f1:77:d1:86:b3:
         80:ad:6a:64:01:f7:58:69:25:32:82:d9:72:c0:f1:ce:e6:dc:
         39:b8:61:c5:da:98:a7:1a:fc:a1:a8:99:8b:4d:e0:7d:04:2a:
         9a:b9:85:a9:a5:16:cf:88:33:c5:35:34:81:71:67:3f:bc:2b:
         3f:48:01:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:07:33 2026 by rpki-client