This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3137302e3234362e3131322e302f32322d3234203d3e203237393531.roa
File:                     3137302e3234362e3131322e302f32322d3234203d3e203237393531.roa (raw, json)
Hash identifier:          ppyOBxqDWX6VepJ1aRWt5ZmtJhsohJ0R4e3s6hgVAvE=
Subject key identifier:   2C:B5:C4:DA:44:E9:60:08:35:C9:91:34:16:2E:92:EA:4F:4D:66:70
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       0D7F5903699E30842F1D5AB265091D9B5849A6F3
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3137302e3234362e3131322e302f32322d3234203d3e203237393531.roa
Signing time:             Tue 06 Jan 2026 20:48:35 +0000
ROA not before:           Tue 06 Jan 2026 20:43:35 +0000
ROA not after:            Tue 05 Jan 2027 20:48:35 +0000
asID:                     27951
IP address blocks:        170.246.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7f:59:03:69:9e:30:84:2f:1d:5a:b2:65:09:1d:9b:58:49:a6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Jan  6 20:43:35 2026 GMT
            Not After : Jan  5 20:48:35 2027 GMT
        Subject: CN=2CB5C4DA44E9600835C99134162E92EA4F4D6670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:8e:dc:ff:9d:1c:52:4d:e0:9e:e4:c4:83:
                    99:9d:6f:87:97:46:3e:37:23:4c:ca:49:4e:dc:f9:
                    48:d9:f4:09:4f:d1:a9:96:ee:26:1b:07:8a:de:92:
                    b6:2c:b9:e7:09:23:c0:02:ac:0b:c5:8f:b2:1d:90:
                    02:01:11:8a:33:c5:99:ba:38:a9:db:6e:f9:25:80:
                    cb:b2:b8:9f:2c:1a:93:97:da:2c:89:e3:0a:ec:67:
                    b8:bc:f6:ec:b6:5f:a4:86:58:04:d6:97:0c:bb:46:
                    28:b5:d6:1a:03:ab:d4:98:8e:ab:eb:d7:9b:85:bd:
                    0f:a7:90:ee:3a:43:0d:8d:94:d5:0f:ff:75:f4:db:
                    c0:f0:d4:b4:1b:cb:91:9a:16:c7:3e:82:58:c4:d0:
                    13:bc:b1:e5:be:bf:c4:40:c6:2d:81:33:ff:06:98:
                    44:29:57:37:c2:f2:8f:e6:4a:57:16:a2:91:ff:80:
                    c7:4b:2b:db:74:1a:4d:6f:b3:22:de:1a:d2:66:09:
                    94:ae:9b:86:8c:e1:9c:a0:31:35:f8:34:b2:01:75:
                    82:63:6c:91:95:1a:12:4a:a0:f3:d9:57:03:6b:fa:
                    b4:fa:b9:0b:b3:26:ce:8b:d3:93:6e:29:15:c5:5b:
                    3f:7e:4f:b4:45:08:28:52:76:4b:9c:dd:5d:bc:59:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B5:C4:DA:44:E9:60:08:35:C9:91:34:16:2E:92:EA:4F:4D:66:70
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3137302e3234362e3131322e302f32322d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:f8:59:48:92:6e:cd:db:c7:b0:86:a8:84:98:2b:72:e9:52:
         12:a7:97:1d:db:e3:4b:ac:e5:7d:6f:18:d3:1a:4e:09:56:aa:
         bd:cd:c3:73:2c:c7:8b:cb:98:f7:08:56:25:2e:60:8f:59:fc:
         09:c2:7d:f8:3c:4a:8b:7b:33:d6:3a:3d:10:4e:fd:d8:ba:f9:
         ec:2d:c4:b2:4f:fb:95:93:ab:30:d2:ef:7d:00:c5:91:b6:83:
         25:51:c8:52:c8:55:1d:50:a8:bd:b2:9f:bb:1c:5f:09:82:85:
         4b:ae:e2:ce:59:5d:f7:89:d1:6b:e7:1d:ca:41:c3:a7:c9:f0:
         fd:9b:c7:be:08:56:47:d6:0c:d5:1f:d1:ee:5e:65:f1:d8:c3:
         a9:d9:8e:e7:64:6c:0a:ff:d3:bd:8e:02:c0:bc:51:0b:31:74:
         ca:42:ac:c0:73:c3:36:66:99:e4:56:af:f6:01:62:32:50:97:
         76:42:84:d2:db:41:6e:94:9e:4d:d7:9d:24:76:4a:f7:a6:97:
         75:6b:a1:e1:d7:4d:b4:28:65:a0:16:c4:6f:7e:4d:8e:ee:90:
         42:52:f2:09:7d:13:4b:78:7e:82:1a:af:95:cd:72:37:49:e6:
         39:c1:b1:70:95:6f:06:a7:4a:0d:57:e3:cc:7c:41:6e:94:15:
         ff:0e:1e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:09 2026 by rpki-client