This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/3137302e38322e3230382e302f32322d3234203d3e203237383030.roa
File:                     3137302e38322e3230382e302f32322d3234203d3e203237383030.roa (raw, json)
Hash identifier:          IHvoBfPD1wUZw1HBJ7cGHD1pJXXzbLT1fDKRbzSnyHM=
Subject key identifier:   65:30:C6:C9:93:CC:47:F0:CE:30:ED:6F:8B:64:F6:21:EA:8C:A9:A4
Certificate issuer:       /CN=2CE426DCE116C2FC2D07BDD209BC070F6D233D1C
Certificate serial:       7AC12E40C91D0EDC602A3F0321A6910C64D1AA44
Authority key identifier: 2C:E4:26:DC:E1:16:C2:FC:2D:07:BD:D2:09:BC:07:0F:6D:23:3D:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/3137302e38322e3230382e302f32322d3234203d3e203237383030.roa
Signing time:             Tue 06 Jan 2026 20:50:11 +0000
ROA not before:           Tue 06 Jan 2026 20:45:11 +0000
ROA not after:            Tue 05 Jan 2027 20:50:11 +0000
asID:                     27800
IP address blocks:        170.82.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c1:2e:40:c9:1d:0e:dc:60:2a:3f:03:21:a6:91:0c:64:d1:aa:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE426DCE116C2FC2D07BDD209BC070F6D233D1C
        Validity
            Not Before: Jan  6 20:45:11 2026 GMT
            Not After : Jan  5 20:50:11 2027 GMT
        Subject: CN=6530C6C993CC47F0CE30ED6F8B64F621EA8CA9A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:16:6b:8b:45:0a:de:0a:c5:ce:41:ed:2b:6c:
                    59:cd:96:1c:1c:5e:dc:26:f5:84:cb:c4:0c:ae:91:
                    a1:eb:b4:17:5a:cc:98:32:2a:5d:81:c0:6a:80:2e:
                    0c:a4:8b:cf:8d:7e:4b:0c:cd:dd:ee:26:83:48:95:
                    f8:fa:b6:17:75:78:7c:f9:39:b7:cf:ee:21:7e:ed:
                    a2:4d:25:a6:d6:0a:0e:65:fc:77:8f:91:d6:84:02:
                    12:eb:a9:15:0f:f5:eb:03:f7:4b:ce:ac:dd:c8:02:
                    e6:17:ad:69:bb:db:4d:1d:a0:bd:61:3e:8e:37:a8:
                    c6:ad:35:cf:2f:1f:bf:b4:81:da:38:10:5a:61:67:
                    88:49:da:b7:83:13:af:73:27:59:61:f1:d3:61:9f:
                    88:de:16:7b:ed:70:02:5c:52:0c:26:c5:96:f9:97:
                    a3:d4:6b:e5:3e:4b:5a:bd:8e:49:79:ef:7d:b0:36:
                    c0:a3:8c:7a:bc:2e:e2:6c:0b:83:ed:d5:e3:01:3e:
                    84:db:20:dd:87:ff:41:ac:c3:5b:34:96:3e:34:d3:
                    31:b0:4b:87:3b:1d:b1:d4:82:b6:a4:c3:f7:8c:81:
                    73:c9:00:59:6c:c0:51:f8:ba:ee:cd:0d:19:9a:7d:
                    1c:66:c6:14:31:60:d3:d3:93:0c:66:dc:01:3e:d8:
                    ca:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:30:C6:C9:93:CC:47:F0:CE:30:ED:6F:8B:64:F6:21:EA:8C:A9:A4
            X509v3 Authority Key Identifier:
                keyid:2C:E4:26:DC:E1:16:C2:FC:2D:07:BD:D2:09:BC:07:0F:6D:23:3D:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/3137302e38322e3230382e302f32322d3234203d3e203237383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:5b:b7:dd:8a:c2:06:50:1b:fd:3c:72:83:2c:93:d9:5a:00:
         0c:36:6d:85:80:b7:73:95:9a:79:c6:8d:d7:e6:66:90:53:3e:
         73:97:ab:27:f2:4a:99:a6:04:1d:08:c1:d4:93:63:16:30:5b:
         b4:b2:91:d0:8e:0c:e1:54:66:f2:07:15:96:03:af:f7:78:0e:
         46:11:db:e5:71:09:83:f8:b5:ff:2f:3d:c4:f3:6d:f2:45:02:
         b5:f7:25:da:82:a8:cd:e9:02:66:59:8e:27:4c:6f:3d:f7:01:
         a2:b6:57:0f:4e:e0:33:be:fc:18:9e:1c:e0:95:04:7f:ea:9f:
         c1:36:25:1c:08:9c:6d:8d:ae:e3:6f:48:7b:b0:d4:a4:b6:60:
         70:51:ad:19:f5:0e:6e:18:45:46:63:38:9e:99:0b:25:fe:29:
         28:fc:ee:62:16:5f:6c:b4:cf:42:49:9e:3a:74:f9:7a:0b:1e:
         ec:27:9f:92:69:97:3d:e0:db:0e:60:f6:1c:fb:77:0f:6e:26:
         f9:f3:73:67:99:f5:38:33:33:ac:4f:bc:a3:54:cd:c8:1d:e0:
         3f:5f:cd:dd:ad:26:ee:e3:ff:39:62:45:84:b6:72:de:60:99:
         7d:17:cd:ac:0c:c5:9a:97:5c:59:53:1e:36:57:92:1b:a8:e8:
         69:da:2c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:45:43 2026 by rpki-client