This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/3137302e3235342e3132382e302f32322d3234203d3e203238303933.roa
File:                     3137302e3235342e3132382e302f32322d3234203d3e203238303933.roa (raw, json)
Hash identifier:          1o/ovt+qOCiWxA2UqZW52rDqxZYnznxMA0RiOqfCBc0=
Subject key identifier:   36:BA:0F:F8:C1:AA:07:9C:FA:C9:00:4F:84:37:1E:4E:72:B2:1F:D9
Certificate issuer:       /CN=BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F
Certificate serial:       08A9D379B40CE51AC2695FA3EDFA29CB3944C7
Authority key identifier: BC:89:FE:48:C5:23:3A:2B:0F:2B:8D:47:6C:CF:52:FA:53:F5:B3:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/3137302e3235342e3132382e302f32322d3234203d3e203238303933.roa
Signing time:             Tue 06 Jan 2026 19:42:23 +0000
ROA not before:           Tue 06 Jan 2026 19:37:23 +0000
ROA not after:            Tue 05 Jan 2027 19:42:23 +0000
asID:                     28093
IP address blocks:        170.254.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a9:d3:79:b4:0c:e5:1a:c2:69:5f:a3:ed:fa:29:cb:39:44:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F
        Validity
            Not Before: Jan  6 19:37:23 2026 GMT
            Not After : Jan  5 19:42:23 2027 GMT
        Subject: CN=36BA0FF8C1AA079CFAC9004F84371E4E72B21FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f1:07:f3:fe:ad:fa:66:f6:52:09:ef:91:d0:
                    b2:de:5f:aa:3f:5b:19:41:e7:0c:4c:f1:c7:b3:5d:
                    63:be:cb:55:f9:a2:08:51:a6:1e:45:14:94:8c:b1:
                    ca:cc:25:3d:7f:d0:ac:18:7f:0f:70:bd:1c:af:50:
                    97:3a:04:10:a0:7f:f6:06:f0:51:79:8c:c7:42:51:
                    77:d3:cd:29:c7:af:1e:ee:69:8c:50:17:65:c3:78:
                    1d:0e:ec:9b:28:06:7a:e2:ee:73:20:d3:0f:aa:52:
                    b0:10:40:18:fe:8d:6b:60:65:1b:d3:e1:33:c5:79:
                    f3:ba:5d:dd:93:0f:5a:f5:0f:66:be:98:d4:f0:a2:
                    5b:e0:60:88:6f:dd:a9:5a:89:c7:de:26:80:46:af:
                    d8:79:0b:7d:00:c7:be:4f:1e:10:12:46:64:8b:b6:
                    d2:16:be:c7:2f:a0:8a:e1:d9:41:3a:35:22:4f:4f:
                    70:c7:22:b0:e8:a7:95:fb:4d:da:ce:be:af:1c:95:
                    e3:26:23:ae:23:d6:ab:ed:b0:8a:b9:13:49:c8:1a:
                    dc:21:5d:06:b4:57:0f:34:fb:b5:b9:a2:6e:96:27:
                    a5:45:7b:37:cf:85:76:f7:d0:4d:f3:6a:e0:02:cb:
                    a8:5e:58:5d:e8:21:75:40:3f:8c:cc:a6:9e:49:be:
                    b1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BA:0F:F8:C1:AA:07:9C:FA:C9:00:4F:84:37:1E:4E:72:B2:1F:D9
            X509v3 Authority Key Identifier:
                keyid:BC:89:FE:48:C5:23:3A:2B:0F:2B:8D:47:6C:CF:52:FA:53:F5:B3:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC89FE48C5233A2B0F2B8D476CCF52FA53F5B32F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4566E3F88E296C83E6744720DAAFD5029186ADCE7602ECB15635E353B831C85/0/3137302e3235342e3132382e302f32322d3234203d3e203238303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:05:c1:6a:65:75:77:68:21:19:ec:5d:4d:13:4f:55:fb:d7:
         0e:18:61:76:c9:bc:41:eb:3e:bd:87:eb:7a:b2:39:74:b0:99:
         ba:ad:19:ee:65:37:96:72:8c:c4:fe:7d:0c:14:d7:64:1f:5f:
         6f:f8:11:af:20:9f:66:9e:62:09:98:e1:10:a4:6b:dc:80:5b:
         ce:ed:cc:78:67:22:61:8b:cf:e9:30:bd:b4:5c:6b:b4:1d:34:
         63:1f:91:5c:87:30:c4:18:56:f0:27:cc:0d:13:9c:e7:d3:11:
         58:e6:82:6c:78:5d:38:e3:0d:60:24:e8:7d:d9:a5:81:54:34:
         81:c8:50:25:91:1c:a5:87:ef:3c:b2:75:c2:00:f7:14:e1:7a:
         85:4c:36:29:8b:59:2f:bb:07:06:dc:25:82:2b:1e:eb:67:1b:
         ee:e3:91:a0:4b:01:a0:8a:98:75:64:9c:0f:af:5e:0a:0c:12:
         5b:3d:c9:9b:83:58:8e:f2:66:12:66:39:b7:d7:16:02:23:38:
         e1:ea:d8:67:64:c6:ba:77:5a:ad:03:56:a7:65:1c:32:7e:33:
         5b:dd:ed:bd:d8:7e:cb:2e:fc:a3:b2:c1:dd:28:9a:1a:a7:08:
         15:cc:82:ca:5a:71:d1:0c:5b:09:d0:e5:42:df:18:7f:fe:be:
         53:54:64:ba
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgITCKnTebQM5RrCaV+j7fopyzlExzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhCQzg5RkU0OEM1MjMzQTJCMEYyQjhENDc2Q0NGNTJGQTUz
RjVCMzJGMB4XDTI2MDEwNjE5MzcyM1oXDTI3MDEwNTE5NDIyM1owMzExMC8GA1UE
AxMoMzZCQTBGRjhDMUFBMDc5Q0ZBQzkwMDRGODQzNzFFNEU3MkIyMUZEOTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANPxB/P+rfpm9lIJ75HQst5fqj9b
GUHnDEzxx7NdY77LVfmiCFGmHkUUlIyxyswlPX/QrBh/D3C9HK9QlzoEEKB/9gbw
UXmMx0JRd9PNKcevHu5pjFAXZcN4HQ7smygGeuLucyDTD6pSsBBAGP6Na2BlG9Ph
M8V587pd3ZMPWvUPZr6Y1PCiW+BgiG/dqVqJx94mgEav2HkLfQDHvk8eEBJGZIu2
0ha+xy+giuHZQTo1Ik9PcMcisOinlftN2s6+rxyV4yYjriPWq+2wirkTScga3CFd
BrRXDzT7tbmibpYnpUV7N8+FdvfQTfNq4ALLqF5YXeghdUA/jMymnkm+sYMCAwEA
AaOCAsowggLGMB0GA1UdDgQWBBQ2ug/4waoHnPrJAE+ENx5OcrIf2TAfBgNVHSME
GDAWgBS8if5IxSM6Kw8rjUdsz1L6U/WzLzAOBgNVHQ8BAf8EBAMCB4AwgbAGA1Ud
HwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0
L3Jwa2kvbGFjbmljL0I0NTY2RTNGODhFMjk2QzgzRTY3NDQ3MjBEQUFGRDUwMjkx
ODZBRENFNzYwMkVDQjE1NjM1RTM1M0I4MzFDODUvMC9CQzg5RkU0OEM1MjMzQTJC
MEYyQjhENDc2Q0NGNTJGQTUzRjVCMzJGLmNybDCBuQYIKwYBBQUHAQEEgawwgakw
gaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBr
aS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3MDlBQzBEMjU1Q0YyNzlDNDc3MTZE
MkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8wL0JDODlGRTQ4QzUyMzNBMkIwRjJC
OEQ0NzZDQ0Y1MkZBNTNGNUIzMkYuY2VyMIHJBggrBgEFBQcBCwSBvDCBuTCBtgYI
KwYBBQUHMAuGgalyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9CNDU2NkUzRjg4RTI5NkM4M0U2NzQ0NzIwREFBRkQ1MDI5MTg2QURDRTc2
MDJFQ0IxNTYzNUUzNTNCODMxQzg1LzAvMzEzNzMwMmUzMjM1MzQyZTMxMzIzODJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzgzMDM5MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKq/oAw
DQYJKoZIhvcNAQELBQADggEBACIFwWpldXdoIRnsXU0TT1X71w4YYXbJvEHrPr2H
63qyOXSwmbqtGe5lN5ZyjMT+fQwU12QfX2/4Ea8gn2aeYgmY4RCka9yAW87tzHhn
ImGLz+kwvbRca7QdNGMfkVyHMMQYVvAnzA0TnOfTEVjmgmx4XTjjDWAk6H3ZpYFU
NIHIUCWRHKWH7zyydcIA9xTheoVMNimLWS+7BwbcJYIrHutnG+7jkaBLAaCKmHVk
nA+vXgoMEls9yZuDWI7yZhJmObfXFgIjOOHq2Gdkxrp3Wq0DVqdlHDJ+M1vd7b3Y
fssu/KOywd0omhqnCBXMgspacdEMWwnQ5ULfGH/+vlNUZLo=
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:54:26 2026 by rpki-client