This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139342e302f32342d3234203d3e203532353130.roa
File:                     3137302e3233332e3139342e302f32342d3234203d3e203532353130.roa (raw, json)
Hash identifier:          jl8OjcBtTQh1G0//QewlijQnvnwrYsz1+HZQRvGKCOU=
Subject key identifier:   3A:7D:A8:9A:2D:F7:B9:F2:8C:2A:3B:6E:AC:68:DD:03:45:5C:CD:C2
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       39ACD0407CBEAD7611A2690126BCFC4A24A42DA0
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139342e302f32342d3234203d3e203532353130.roa
Signing time:             Tue 06 Jan 2026 19:26:19 +0000
ROA not before:           Tue 06 Jan 2026 19:21:19 +0000
ROA not after:            Tue 05 Jan 2027 19:26:19 +0000
asID:                     52510
IP address blocks:        170.233.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ac:d0:40:7c:be:ad:76:11:a2:69:01:26:bc:fc:4a:24:a4:2d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Jan  6 19:21:19 2026 GMT
            Not After : Jan  5 19:26:19 2027 GMT
        Subject: CN=3A7DA89A2DF7B9F28C2A3B6EAC68DD03455CCDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:29:38:b1:b7:ae:21:14:09:71:5b:f1:88:22:
                    86:c6:7b:8c:fb:b3:39:16:be:d6:dd:eb:3f:f7:08:
                    03:16:91:a0:c2:a3:3b:f7:03:4d:d9:32:bd:49:46:
                    1c:62:43:97:9d:b3:65:38:57:b8:f2:d4:3f:4c:7d:
                    fd:3a:6a:7b:a1:27:4b:d3:52:3a:e5:de:6f:31:30:
                    45:97:30:a4:da:25:0d:7f:e1:ee:95:85:95:c2:b0:
                    d9:c3:22:bb:a1:da:fb:22:38:a5:61:d9:2e:14:61:
                    96:f7:1d:45:65:31:17:f6:8e:81:45:81:01:88:b7:
                    47:14:48:56:aa:2b:d5:dd:32:5a:0e:8d:db:4f:3f:
                    15:86:e7:ec:b1:35:28:19:73:8c:d2:32:70:2a:f1:
                    ae:c9:e3:34:f5:c9:12:96:5a:8a:9c:ed:c1:87:94:
                    fe:f3:5e:3a:a8:0d:3b:03:ee:10:79:a5:16:cd:32:
                    a5:b2:f9:2e:8e:59:28:f9:ad:31:5e:10:62:14:17:
                    b7:70:aa:8e:19:99:98:6a:e2:13:fd:7f:b4:13:71:
                    84:63:3c:99:56:c5:1c:26:20:98:8f:e4:33:9f:b6:
                    00:5d:90:cd:25:6f:c5:19:ad:0c:bc:6b:be:95:0d:
                    70:55:3c:2e:06:f0:cf:45:04:e7:45:ed:26:fe:d8:
                    64:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7D:A8:9A:2D:F7:B9:F2:8C:2A:3B:6E:AC:68:DD:03:45:5C:CD:C2
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139342e302f32342d3234203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:68:58:42:a3:4b:35:48:7d:92:a8:c6:0e:d4:db:55:b6:4a:
         24:3d:f4:1d:fd:37:7d:b4:fd:18:8c:52:d5:52:1c:21:2a:78:
         8a:42:ff:e0:55:3f:e9:04:3e:00:02:b6:a1:82:a9:58:9c:57:
         96:e7:9a:58:0d:3e:76:c0:25:ce:42:53:f4:8a:c9:84:c0:cb:
         a1:01:b2:5a:5f:d4:17:8b:38:a8:7f:72:20:35:4d:76:b4:bd:
         b2:8d:f2:b1:72:d7:e9:da:23:db:ea:6d:a6:c8:eb:5f:34:e4:
         51:70:fd:a9:94:5f:c9:a9:77:46:0a:71:57:7d:17:31:99:a8:
         cb:fa:bd:13:6c:7a:5d:74:b2:9b:4a:ba:15:ed:b9:be:3a:71:
         90:89:77:35:06:be:54:c0:c6:45:c9:22:f8:fa:75:72:f9:76:
         04:f2:8c:63:ee:60:b3:3c:4c:b5:64:c1:76:33:e7:96:2c:d4:
         b3:4a:50:27:0d:d8:f4:a3:2e:dd:90:a7:08:eb:87:21:fb:52:
         e9:81:7e:10:83:66:33:72:97:12:e2:77:0d:fc:d7:7b:a9:07:
         c4:96:71:d5:c0:2b:56:2e:60:25:2d:01:d5:09:b2:66:01:79:
         0c:73:85:7d:5a:60:49:50:5f:e5:bf:c0:ec:d5:25:bd:ec:ac:
         40:60:51:e1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOazQQHy+rXYRomkBJrz8SiSkLaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYzNkQ0Q0JFREJFN0EwRjRENDNEQzE2MjFERTNEMTkz
NjY0NUYzRDAeFw0yNjAxMDYxOTIxMTlaFw0yNzAxMDUxOTI2MTlaMDMxMTAvBgNV
BAMTKDNBN0RBODlBMkRGN0I5RjI4QzJBM0I2RUFDNjhERDAzNDU1Q0NEQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQKTixt64hFAlxW/GIIobGe4z7
szkWvtbd6z/3CAMWkaDCozv3A03ZMr1JRhxiQ5eds2U4V7jy1D9Mff06anuhJ0vT
Ujrl3m8xMEWXMKTaJQ1/4e6VhZXCsNnDIruh2vsiOKVh2S4UYZb3HUVlMRf2joFF
gQGIt0cUSFaqK9XdMloOjdtPPxWG5+yxNSgZc4zSMnAq8a7J4zT1yRKWWoqc7cGH
lP7zXjqoDTsD7hB5pRbNMqWy+S6OWSj5rTFeEGIUF7dwqo4ZmZhq4hP9f7QTcYRj
PJlWxRwmIJiP5DOftgBdkM0lb8UZrQy8a76VDXBVPC4G8M9FBOdF7Sb+2GSrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUOn2omi33ufKMKjturGjdA0VczcIwHwYDVR0j
BBgwFoAUJjbUy+2+eg9NQ9wWId49GTZkXz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTAyNUFERTYzQTkxNzc4OThEN0UxRUYxMTAzMDg5RTgy
RDE4Q0UwNTQxMDUwRjRDODQ5NTE2QTYwRjc3NDIzLzAvMjYzNkQ0Q0JFREJFN0Ew
RjRENDNEQzE2MjFERTNEMTkzNjY0NUYzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjM2RDRDQkVEQkU3QTBGNEQ0
M0RDMTYyMURFM0QxOTM2NjQ1RjNELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREUwMjVBREU2M0E5MTc3ODk4RDdFMUVGMTEwMzA4OUU4MkQxOENFMDU0
MTA1MEY0Qzg0OTUxNkE2MEY3NzQyMy8wLzMxMzczMDJlMzIzMzMzMmUzMTM5MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzUzMTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqunC
MA0GCSqGSIb3DQEBCwUAA4IBAQCwaFhCo0s1SH2SqMYO1NtVtkokPfQd/Td9tP0Y
jFLVUhwhKniKQv/gVT/pBD4AArahgqlYnFeW55pYDT52wCXOQlP0ismEwMuhAbJa
X9QXiziof3IgNU12tL2yjfKxctfp2iPb6m2myOtfNORRcP2plF/JqXdGCnFXfRcx
majL+r0TbHpddLKbSroV7bm+OnGQiXc1Br5UwMZFySL4+nVy+XYE8oxj7mCzPEy1
ZMF2M+eWLNSzSlAnDdj0oy7dkKcI64ch+1LpgX4Qg2YzcpcS4ncN/Nd7qQfElnHV
wCtWLmAlLQHVCbJmAXkMc4V9WmBJUF/lv8Ds1SW97KxAYFHh
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:58 2026 by rpki-client