This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e38382e302f32322d3234203d3e20323635363339.roa
File:                     3137302e3234362e38382e302f32322d3234203d3e20323635363339.roa (raw, json)
Hash identifier:          1r51XrLSM+wAbuBKAWM84Xe/ryC5hZCFAW3m1cVhZlY=
Subject key identifier:   62:5E:EC:99:21:CF:0C:0A:E7:0F:A0:B7:86:51:CF:BE:8C:7E:50:20
Certificate issuer:       /CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
Certificate serial:       03A10E3D4C15DC1029FCBAF5B831881B54FD36C8
Authority key identifier: 97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e38382e302f32322d3234203d3e20323635363339.roa
Signing time:             Tue 06 Jan 2026 19:21:27 +0000
ROA not before:           Tue 06 Jan 2026 19:16:27 +0000
ROA not after:            Tue 05 Jan 2027 19:21:27 +0000
asID:                     265639
IP address blocks:        170.246.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a1:0e:3d:4c:15:dc:10:29:fc:ba:f5:b8:31:88:1b:54:fd:36:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
        Validity
            Not Before: Jan  6 19:16:27 2026 GMT
            Not After : Jan  5 19:21:27 2027 GMT
        Subject: CN=625EEC9921CF0C0AE70FA0B78651CFBE8C7E5020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c0:1c:ce:78:df:4f:7e:a6:8d:82:27:95:2a:
                    e7:04:75:d1:da:23:28:c6:02:fb:06:83:24:e5:b4:
                    68:02:7f:22:1f:37:0a:a9:2f:1c:69:81:ea:5a:64:
                    db:98:77:8a:bf:a2:f5:87:06:47:d9:68:03:fc:2e:
                    0f:73:99:e7:e8:3f:57:3b:24:07:31:de:d4:b4:29:
                    71:9a:d1:e4:da:9a:af:c2:0f:ca:8d:0e:6a:df:ea:
                    f1:c8:41:53:2e:4f:ad:32:ad:09:29:5f:df:2b:95:
                    47:ab:ea:96:26:db:e9:36:4a:9b:ec:bc:05:33:c3:
                    2e:63:0a:67:ef:12:b4:c5:2e:d7:17:60:3a:a1:5f:
                    55:74:fd:cf:a4:6d:7e:b6:a5:68:28:26:86:9b:0a:
                    68:1e:79:4c:d8:9a:e5:bd:2d:f6:0a:7e:82:9d:78:
                    16:47:63:05:ff:d1:75:b6:f6:7a:08:65:29:a2:8f:
                    55:0b:64:02:da:c9:e6:06:de:34:70:bc:84:15:a2:
                    81:05:6d:a7:6f:1d:b8:5a:e1:c2:ce:cd:94:3a:cc:
                    23:d3:b8:f2:0e:e9:94:43:02:9f:72:38:2d:7e:95:
                    f3:18:c7:2b:25:96:a7:a2:2f:54:82:f2:fd:ff:67:
                    03:c4:1b:e2:23:57:08:08:09:29:10:0b:db:1e:6e:
                    e4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5E:EC:99:21:CF:0C:0A:E7:0F:A0:B7:86:51:CF:BE:8C:7E:50:20
            X509v3 Authority Key Identifier:
                keyid:97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e38382e302f32322d3234203d3e20323635363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:77:73:69:5e:92:83:7b:8a:3f:0b:92:d1:18:c6:95:04:bb:
         8a:4f:c7:45:0b:c1:c4:e6:01:76:58:eb:0c:5c:ce:a6:b4:7f:
         61:ff:2f:3a:e5:87:3e:c0:93:26:cd:11:92:75:dd:c2:96:f2:
         e4:09:99:28:2c:dd:c9:07:a7:08:0e:f1:82:3f:76:8d:fe:eb:
         54:cf:1c:0a:92:d3:0b:52:12:10:1d:a0:ea:12:c5:a9:0d:a9:
         49:cc:f6:4d:39:25:fb:88:e2:24:0c:6f:17:41:b1:3d:37:93:
         c6:be:8b:db:66:09:d7:80:51:fb:f4:f2:85:16:e3:fc:47:4e:
         a4:b0:16:61:99:93:0f:5a:91:35:63:53:1a:33:e0:53:4a:84:
         a2:07:21:73:b5:3c:10:86:bd:0b:78:23:a1:c0:6b:c7:68:bc:
         29:cc:85:79:00:e3:77:9c:3d:e9:96:38:d3:22:2e:cc:28:4c:
         7b:e4:16:03:c2:16:59:2b:a4:2a:5a:75:cc:40:96:8c:94:bb:
         d9:61:f9:bb:a7:2b:bd:2d:89:3a:20:c5:bd:1c:30:d1:9a:39:
         c9:b4:f7:cb:53:68:61:41:21:1e:1e:aa:94:ca:00:e2:ec:fc:
         d0:f0:62:3a:18:b7:61:ff:9a:e2:00:b0:04:06:be:bd:a0:48:
         07:2c:9f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:41 2026 by rpki-client