This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/3137302e38302e32372e302f32342d3234203d3e203237393831.roa
File:                     3137302e38302e32372e302f32342d3234203d3e203237393831.roa (raw, json)
Hash identifier:          R7LMlaOq5haeKfVTnO1Xf9gVvTwYA3VF31w3L+BcEPQ=
Subject key identifier:   EF:2C:52:D6:E1:5D:FE:9B:1C:2A:C2:20:43:86:E0:52:68:70:D8:A6
Certificate issuer:       /CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
Certificate serial:       1E9F78986E17C1BA190D4AB29134734114B5F7DA
Authority key identifier: 9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/3137302e38302e32372e302f32342d3234203d3e203237393831.roa
Signing time:             Tue 06 Jan 2026 19:23:55 +0000
ROA not before:           Tue 06 Jan 2026 19:18:55 +0000
ROA not after:            Tue 05 Jan 2027 19:23:55 +0000
asID:                     27981
IP address blocks:        170.80.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9f:78:98:6e:17:c1:ba:19:0d:4a:b2:91:34:73:41:14:b5:f7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
        Validity
            Not Before: Jan  6 19:18:55 2026 GMT
            Not After : Jan  5 19:23:55 2027 GMT
        Subject: CN=EF2C52D6E15DFE9B1C2AC2204386E0526870D8A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8e:2f:08:f8:8e:e2:7b:c3:d6:b0:ca:5f:d7:
                    87:bf:ba:cc:4d:6c:e1:95:b2:56:a7:f5:05:94:b3:
                    01:fd:22:79:68:9d:8d:ef:c5:c9:27:05:ff:1b:ad:
                    6b:fc:1c:b7:0a:95:ef:3d:1e:dd:a0:74:82:c0:4e:
                    15:46:0a:a4:3d:1b:2b:03:03:b3:d7:73:ef:00:89:
                    f7:0b:25:46:2a:df:25:1d:df:2a:95:1b:07:68:5e:
                    3c:44:ad:75:c4:bf:b4:38:0e:d8:48:95:04:f8:88:
                    d6:86:32:29:91:5b:2a:6a:a6:5c:cb:c3:56:7a:8e:
                    6d:f1:76:a9:1e:de:89:91:90:9e:56:82:c0:fa:97:
                    9b:c5:e1:d7:7a:08:8d:0a:40:78:1d:33:79:2e:5d:
                    c9:9b:8d:9e:66:2b:82:1f:05:19:86:5f:e1:cd:9f:
                    63:5a:16:d6:17:77:d8:f2:aa:d0:e2:a6:d8:44:35:
                    ef:1b:16:b5:5a:05:6f:9c:50:81:22:94:0d:c9:70:
                    3b:01:04:ec:89:df:cd:64:3b:9d:94:30:26:eb:fa:
                    73:dc:9e:bf:ef:42:08:f3:5f:92:ee:43:fa:2a:95:
                    63:2f:51:33:fe:9c:47:86:2f:97:7d:77:df:2f:95:
                    a4:dc:ab:05:58:c4:5f:6b:de:12:d0:33:45:5d:9d:
                    ad:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2C:52:D6:E1:5D:FE:9B:1C:2A:C2:20:43:86:E0:52:68:70:D8:A6
            X509v3 Authority Key Identifier:
                keyid:9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/3137302e38302e32372e302f32342d3234203d3e203237393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:e2:69:ad:c2:56:f4:6c:9b:c7:67:06:e1:d0:cf:d6:21:d0:
         00:f7:86:0f:f9:a7:e0:09:e2:bc:68:7d:23:6e:73:d9:21:12:
         17:3b:87:cf:21:f2:80:9f:6e:fd:cf:a5:da:82:25:3c:44:38:
         c4:34:6c:9e:92:ec:72:86:c5:3c:a5:8e:9b:cb:a8:d6:ab:a0:
         a5:1a:24:7a:cd:c2:47:35:15:6d:1c:5d:ac:61:5c:5b:31:59:
         39:29:98:4e:27:1e:46:9b:09:89:6d:49:1d:9f:ea:c1:a9:c0:
         5f:10:1e:06:fb:71:bb:6a:40:46:ac:9d:1b:a6:af:40:79:26:
         87:66:a1:cb:a4:4c:bb:f2:f1:06:d4:6d:c5:25:69:1f:38:e5:
         e4:9b:e2:37:36:e9:74:17:1c:3a:ce:70:8e:ff:04:93:75:8e:
         99:f9:cd:5a:12:c7:ff:b9:32:a5:53:49:0a:6a:5f:71:64:25:
         fc:9c:47:86:26:43:0f:03:9f:05:c3:af:1b:0d:89:d1:68:c9:
         28:93:97:be:f9:80:1a:b8:6b:a8:1a:30:9a:a6:8d:64:f6:32:
         4b:4a:01:18:69:55:92:18:95:5b:32:e1:46:f4:86:a8:e9:05:
         3d:fc:33:59:d5:75:6f:58:09:ae:b9:f2:c4:bd:60:fd:31:10:
         29:e2:de:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:12 2026 by rpki-client