This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139332e302f32342d3234203d3e203532353130.roa
File:                     3137302e3233332e3139332e302f32342d3234203d3e203532353130.roa (raw, json)
Hash identifier:          /J5DsFh+sOA4MwiaRo4O0Cn+AruuWge6Qoy1PzAXri4=
Subject key identifier:   DD:3B:51:7A:56:FA:5C:C9:45:2E:55:71:22:AF:E1:6B:37:40:07:05
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       52776C35B9A14CE556281B5A2475E710D32B12EA
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139332e302f32342d3234203d3e203532353130.roa
Signing time:             Tue 06 Jan 2026 19:26:24 +0000
ROA not before:           Tue 06 Jan 2026 19:21:24 +0000
ROA not after:            Tue 05 Jan 2027 19:26:24 +0000
asID:                     52510
IP address blocks:        170.233.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:77:6c:35:b9:a1:4c:e5:56:28:1b:5a:24:75:e7:10:d3:2b:12:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Jan  6 19:21:24 2026 GMT
            Not After : Jan  5 19:26:24 2027 GMT
        Subject: CN=DD3B517A56FA5CC9452E557122AFE16B37400705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:d3:05:2a:04:26:8e:12:78:a6:34:62:20:
                    4b:80:40:be:fa:ac:01:1e:6d:0e:e4:14:6b:4e:97:
                    82:c8:47:7d:80:75:b8:67:94:82:ee:ef:5b:1b:c8:
                    e0:d2:9f:17:ef:8c:78:8a:9f:8e:6e:dc:61:54:ea:
                    82:33:5a:52:9a:3e:13:23:3b:79:47:2d:49:8f:aa:
                    29:b8:22:ba:b1:d1:e9:f3:e7:c0:6c:09:01:fd:08:
                    a3:8e:83:e1:c1:7a:15:30:b1:85:11:ae:84:8e:4e:
                    7c:45:66:71:0c:7e:1f:af:43:85:1a:eb:ae:44:58:
                    5f:78:c6:0c:81:60:77:2d:d1:00:b2:dd:0e:f1:79:
                    1b:6d:a2:00:a1:0d:42:cd:de:c3:b3:a8:b4:ac:83:
                    66:fd:a6:32:04:82:01:18:a8:36:47:1e:c2:a0:fc:
                    4b:27:50:f0:77:2c:b0:a6:80:f2:41:5b:55:e7:81:
                    c2:6d:49:fe:3b:0a:11:57:21:d7:74:d9:5a:a2:a5:
                    66:29:b2:2f:0d:3c:d7:6e:62:29:99:8d:f6:b2:4b:
                    f9:14:d1:62:cf:1d:d3:1b:3f:7b:d6:e3:ac:7b:d7:
                    f6:2b:3c:3c:5b:6d:c7:5b:38:75:fb:08:51:41:d9:
                    9f:31:33:35:c4:97:14:a0:9c:24:ed:03:2a:07:e5:
                    a4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3B:51:7A:56:FA:5C:C9:45:2E:55:71:22:AF:E1:6B:37:40:07:05
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139332e302f32342d3234203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:f1:3b:16:6b:ac:42:a7:9d:c1:62:1b:0f:b1:a1:30:cb:47:
         f2:a6:a5:88:f0:f6:2c:d8:ca:35:77:76:5f:15:69:e0:cc:2a:
         00:b9:b1:72:df:c7:78:4e:98:0c:e7:6e:bf:8a:ca:75:91:4b:
         f7:d2:10:cb:e3:57:b9:2e:47:33:e4:c9:d6:e6:40:a7:12:34:
         22:aa:df:8d:ac:62:36:df:65:8b:cc:3f:70:7b:78:34:27:5c:
         ec:bb:93:8a:36:74:e1:19:b1:b3:eb:eb:51:88:d8:16:03:94:
         1d:9f:b6:53:92:8e:ce:af:f0:1e:12:cc:fb:09:6f:40:3e:31:
         69:c4:5a:24:67:e2:50:55:f4:da:4a:f9:27:98:62:54:42:f8:
         b8:4e:10:3b:48:d2:62:30:60:ee:f4:3d:1a:90:17:cf:4c:1e:
         91:3a:57:dd:d5:1c:08:bd:10:0b:a9:3a:27:87:a0:b1:2e:4f:
         1c:94:86:07:98:9b:97:6d:3f:0b:8b:74:3f:32:18:f1:0f:0b:
         a8:4d:97:08:df:ec:96:d6:28:6c:61:61:72:86:7c:17:55:d8:
         7d:ea:c5:df:30:cf:0a:05:28:7e:9e:bc:4c:05:b3:9f:54:52:
         ca:8e:1b:21:78:07:43:f9:8b:52:e0:bf:0a:42:69:96:1a:c7:
         9e:6d:4b:09
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUndsNbmhTOVWKBtaJHXnENMrEuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYzNkQ0Q0JFREJFN0EwRjRENDNEQzE2MjFERTNEMTkz
NjY0NUYzRDAeFw0yNjAxMDYxOTIxMjRaFw0yNzAxMDUxOTI2MjRaMDMxMTAvBgNV
BAMTKEREM0I1MTdBNTZGQTVDQzk0NTJFNTU3MTIyQUZFMTZCMzc0MDA3MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClD9MFKgQmjhJ4pjRiIEuAQL76
rAEebQ7kFGtOl4LIR32AdbhnlILu71sbyODSnxfvjHiKn45u3GFU6oIzWlKaPhMj
O3lHLUmPqim4Irqx0enz58BsCQH9CKOOg+HBehUwsYURroSOTnxFZnEMfh+vQ4Ua
665EWF94xgyBYHct0QCy3Q7xeRttogChDULN3sOzqLSsg2b9pjIEggEYqDZHHsKg
/EsnUPB3LLCmgPJBW1XngcJtSf47ChFXIdd02VqipWYpsi8NPNduYimZjfayS/kU
0WLPHdMbP3vW46x71/YrPDxbbcdbOHX7CFFB2Z8xMzXElxSgnCTtAyoH5aTJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU3TtRelb6XMlFLlVxIq/hazdABwUwHwYDVR0j
BBgwFoAUJjbUy+2+eg9NQ9wWId49GTZkXz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTAyNUFERTYzQTkxNzc4OThEN0UxRUYxMTAzMDg5RTgy
RDE4Q0UwNTQxMDUwRjRDODQ5NTE2QTYwRjc3NDIzLzAvMjYzNkQ0Q0JFREJFN0Ew
RjRENDNEQzE2MjFERTNEMTkzNjY0NUYzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjM2RDRDQkVEQkU3QTBGNEQ0
M0RDMTYyMURFM0QxOTM2NjQ1RjNELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREUwMjVBREU2M0E5MTc3ODk4RDdFMUVGMTEwMzA4OUU4MkQxOENFMDU0
MTA1MEY0Qzg0OTUxNkE2MEY3NzQyMy8wLzMxMzczMDJlMzIzMzMzMmUzMTM5MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzUzMTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqunB
MA0GCSqGSIb3DQEBCwUAA4IBAQCm8TsWa6xCp53BYhsPsaEwy0fypqWI8PYs2Mo1
d3ZfFWngzCoAubFy38d4TpgM526/isp1kUv30hDL41e5Lkcz5MnW5kCnEjQiqt+N
rGI232WLzD9we3g0J1zsu5OKNnThGbGz6+tRiNgWA5Qdn7ZTko7Or/AeEsz7CW9A
PjFpxFokZ+JQVfTaSvknmGJUQvi4ThA7SNJiMGDu9D0akBfPTB6ROlfd1RwIvRAL
qTonh6CxLk8clIYHmJuXbT8Li3Q/MhjxDwuoTZcI3+yW1ihsYWFyhnwXVdh96sXf
MM8KBSh+nrxMBbOfVFLKjhsheAdD+YtS4L8KQmmWGseebUsJ
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:56 2026 by rpki-client