This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e322e31372e302f32342d3234203d3e20323634363338.roa
File:                     3139302e322e31372e302f32342d3234203d3e20323634363338.roa (raw, json)
Hash identifier:          SlpK0gvFiJ+017Q9WYUrhsRdBXhGb/k/BxumpU7q/kM=
Subject key identifier:   19:62:BC:4B:DE:6C:85:EF:9C:0F:80:B3:AA:12:05:37:53:15:98:20
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       42129D8AA0F034826049D65A4E8A45CAE6377720
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e322e31372e302f32342d3234203d3e20323634363338.roa
Signing time:             Tue 06 Jan 2026 20:55:03 +0000
ROA not before:           Tue 06 Jan 2026 20:50:03 +0000
ROA not after:            Tue 05 Jan 2027 20:55:03 +0000
asID:                     264638
IP address blocks:        190.2.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:12:9d:8a:a0:f0:34:82:60:49:d6:5a:4e:8a:45:ca:e6:37:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Jan  6 20:50:03 2026 GMT
            Not After : Jan  5 20:55:03 2027 GMT
        Subject: CN=1962BC4BDE6C85EF9C0F80B3AA12053753159820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:27:e4:84:31:9c:c7:c8:ca:56:7d:73:6c:44:
                    7c:00:f7:2b:86:c4:ee:99:3b:3d:79:e4:e7:cb:7e:
                    3d:93:b2:ae:f9:8a:cf:00:9a:50:eb:1f:d9:7f:89:
                    88:6a:ea:16:5e:fa:d9:f9:ec:ab:45:66:d1:cd:6b:
                    06:8c:18:28:0e:57:73:eb:3b:9e:36:b4:c6:c2:6e:
                    34:c3:4b:86:1b:f4:05:94:c2:7f:ba:b8:91:6c:ce:
                    d3:2e:bd:85:23:ef:67:ff:82:ee:d4:14:8e:c1:f5:
                    e3:9a:ac:04:8f:92:2d:76:96:2b:48:80:a7:f2:63:
                    df:ff:71:12:b1:84:69:64:d7:66:71:f7:41:b0:6d:
                    b0:24:c8:74:df:37:ba:63:df:56:47:e4:cf:83:cf:
                    8c:37:1d:2f:eb:2b:5c:36:86:af:29:91:77:87:9a:
                    84:9f:8a:e4:62:c0:ec:e1:c6:c7:db:cd:76:52:cf:
                    70:d6:4f:a8:ec:08:ee:41:42:a9:1f:1e:32:42:3b:
                    90:cf:4b:3a:0e:4e:ce:ee:d1:c3:69:0f:e6:78:e8:
                    74:81:75:0b:3b:38:01:3f:c3:5a:de:c5:cd:35:de:
                    ca:fe:a9:b0:25:a3:f7:55:34:75:30:70:d9:a1:34:
                    01:8a:6f:19:88:e8:50:6c:93:47:1d:34:83:7a:28:
                    8c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:62:BC:4B:DE:6C:85:EF:9C:0F:80:B3:AA:12:05:37:53:15:98:20
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e322e31372e302f32342d3234203d3e20323634363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:07:f5:da:b1:9a:de:9b:93:62:1e:ac:52:df:c6:ca:26:48:
         a7:a6:72:b1:36:33:77:40:e4:64:ff:6c:b3:ac:6e:d9:dd:99:
         2c:6f:12:50:61:6e:b3:6f:13:68:c9:f9:ef:f3:98:6f:36:95:
         28:08:58:da:4e:75:39:56:fd:e9:6b:4d:91:b1:f4:7a:8c:50:
         0e:0e:66:d8:64:bc:50:57:a7:d8:c0:49:81:56:6c:1b:7c:a3:
         12:3b:1e:3b:63:09:49:8d:eb:95:ab:13:95:d7:c2:4a:45:d1:
         ff:b3:50:e0:d2:79:fa:22:c7:8c:a0:a2:59:86:b1:8b:c4:a0:
         e8:d0:bd:3c:ff:e7:80:88:b9:2c:d3:50:61:65:61:62:4e:08:
         58:02:2d:de:a2:ad:e5:13:bc:7b:d6:2d:ae:ea:fd:8a:d3:59:
         e9:93:17:04:08:8c:f3:f9:7b:3b:ed:6f:6f:51:2f:0a:ba:f6:
         e2:6b:43:ed:6c:37:5a:5c:2c:04:6a:e3:58:a0:d2:94:ea:a0:
         6e:ee:01:cc:15:35:3e:2b:fa:7b:0d:0c:fe:a0:e9:a0:d7:3b:
         a0:05:45:56:d6:70:16:9d:1e:f3:a5:bc:49:4c:b8:c6:5e:18:
         76:6e:d1:89:d3:e5:49:2d:36:a0:8c:4a:60:e1:d0:ed:c2:a4:
         f6:b0:64:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:23 2026 by rpki-client