This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139352e302f32342d3234203d3e203532353130.roa
File:                     3137302e3233332e3139352e302f32342d3234203d3e203532353130.roa (raw, json)
Hash identifier:          zmYWZNwNg8SEi4aN0QbKP4UN1t52p2Bc1ZgZnYrlKJQ=
Subject key identifier:   DC:BC:54:DA:22:5A:C0:7C:6B:1A:17:96:39:31:4F:0A:82:3F:C3:E9
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       1E0E67FD207DA0E5AC39A6FE973082EB8AC8BA84
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139352e302f32342d3234203d3e203532353130.roa
Signing time:             Tue 06 Jan 2026 19:26:21 +0000
ROA not before:           Tue 06 Jan 2026 19:21:21 +0000
ROA not after:            Tue 05 Jan 2027 19:26:21 +0000
asID:                     52510
IP address blocks:        170.233.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0e:67:fd:20:7d:a0:e5:ac:39:a6:fe:97:30:82:eb:8a:c8:ba:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Jan  6 19:21:21 2026 GMT
            Not After : Jan  5 19:26:21 2027 GMT
        Subject: CN=DCBC54DA225AC07C6B1A179639314F0A823FC3E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:ce:5e:06:92:00:4e:34:c0:88:3b:76:a3:
                    f2:8d:28:b7:26:f3:a0:e4:7e:a0:0b:65:70:7a:c8:
                    56:9c:e6:ff:46:28:de:c9:91:48:34:f6:7a:46:45:
                    17:a4:3a:21:24:b3:3a:64:3e:74:e2:b9:ff:6b:40:
                    1f:7e:30:33:9e:0e:d0:bb:32:aa:5f:62:02:e5:26:
                    7b:6b:40:6d:a2:57:fc:99:e0:39:0a:ad:72:f1:e6:
                    0d:18:03:90:37:3d:3d:cf:a3:4e:0a:0d:89:de:79:
                    52:d8:eb:38:58:63:f5:81:21:b9:cd:90:b2:8c:91:
                    45:d6:15:77:cc:84:39:1b:54:7a:62:29:b7:da:a5:
                    95:ff:df:87:b6:ed:2c:72:98:f5:1a:e4:8c:96:e0:
                    c4:96:a1:5f:ff:5d:6e:89:db:1d:1a:45:cd:1e:a0:
                    9e:d6:05:31:73:01:bb:25:a5:50:99:7b:24:f0:2b:
                    d3:1d:aa:a2:54:ef:e9:98:fe:ce:fe:bd:a9:ab:7f:
                    34:77:6e:c3:60:ad:b3:04:78:91:72:73:c7:c1:a4:
                    7d:47:6f:37:91:32:26:10:28:39:be:0c:ad:22:6d:
                    ba:7e:b7:5d:89:c2:ed:0f:90:e6:0a:6a:ad:a0:ce:
                    3d:58:a2:18:b4:f4:6c:c8:14:4c:d7:9f:55:5a:35:
                    89:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BC:54:DA:22:5A:C0:7C:6B:1A:17:96:39:31:4F:0A:82:3F:C3:E9
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139352e302f32342d3234203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:be:a1:7e:52:01:96:40:fe:8f:d6:4e:e9:5f:c3:86:8b:fa:
         a6:89:bf:42:45:13:c0:ee:dd:21:59:cf:39:32:96:22:be:cf:
         30:93:e7:1d:b1:3f:61:e2:77:2b:e6:e2:1e:f0:ec:89:72:a0:
         f3:52:b1:1e:ad:a4:91:2d:8c:40:f0:60:17:de:bc:51:59:f1:
         03:cd:b3:4d:0a:12:4c:a0:4d:aa:75:3e:77:4e:8c:a0:84:fe:
         0a:aa:55:7f:b7:20:8f:53:10:f2:e1:5c:88:66:1f:05:66:3c:
         eb:d1:18:03:c7:a5:71:b8:1a:df:a6:c8:ae:fe:fa:23:bf:5c:
         fb:11:62:42:dd:b2:a0:c8:22:3c:f9:c4:e1:ed:7d:f7:00:08:
         b4:7d:40:57:70:12:c6:b6:db:ed:f7:da:a3:62:4c:78:ab:a0:
         79:b9:3a:00:a6:ac:a2:f1:14:2f:bc:b6:8e:0f:54:c0:fa:b1:
         2a:74:bf:3e:f6:6e:d8:60:e4:79:4c:c0:d8:58:9b:90:f4:76:
         db:5c:f0:0e:c5:72:a1:af:40:8e:03:ea:f1:f5:22:92:1d:46:
         30:ad:0c:09:14:bf:a6:ad:1c:b1:2c:72:36:84:db:f3:b0:f2:
         f0:b3:71:46:ce:ee:de:ba:c6:e8:2d:ad:a5:b1:cb:2f:99:dc:
         08:6a:8c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:59 2026 by rpki-client