This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e34382e302f32322d3232203d3e203532353130.roa
File:                     3137302e3234352e34382e302f32322d3232203d3e203532353130.roa (raw, json)
Hash identifier:          4ZgcKUDWiTeAN6aiV3CjnbiPrKCjf/FvlkBJQFiWOKc=
Subject key identifier:   91:A0:6B:00:32:A7:A0:19:FF:44:25:B7:63:E0:7F:75:A4:9C:08:96
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       215C2F319B95CBD591F2355050FF08FE1DFB93F7
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e34382e302f32322d3232203d3e203532353130.roa
Signing time:             Tue 06 Jan 2026 19:26:23 +0000
ROA not before:           Tue 06 Jan 2026 19:21:23 +0000
ROA not after:            Tue 05 Jan 2027 19:26:23 +0000
asID:                     52510
IP address blocks:        170.245.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5c:2f:31:9b:95:cb:d5:91:f2:35:50:50:ff:08:fe:1d:fb:93:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Jan  6 19:21:23 2026 GMT
            Not After : Jan  5 19:26:23 2027 GMT
        Subject: CN=91A06B0032A7A019FF4425B763E07F75A49C0896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:88:0a:4d:fa:f6:be:bd:6e:8f:8f:09:a1:66:
                    bd:e8:8b:e0:b8:78:7b:73:46:48:97:7b:af:9a:61:
                    98:dc:58:1c:16:09:fc:c2:03:cd:a7:d0:01:64:5e:
                    b5:b9:68:88:08:09:7c:a3:5d:60:6d:05:cb:92:1f:
                    22:5a:28:84:ec:f2:7a:d3:18:d5:7e:ce:cf:8c:02:
                    d5:e9:0e:30:3b:7c:de:c5:16:45:59:7e:15:33:44:
                    df:90:58:ce:5e:cb:01:70:cd:b2:55:db:b9:f5:e2:
                    4c:30:2f:fd:c5:69:3f:31:8c:8e:be:56:aa:b4:c1:
                    a1:f9:bc:9d:bf:e2:39:d2:c6:d9:3a:d9:2d:df:10:
                    a4:6d:86:7f:29:70:3b:3f:5f:11:e0:5d:05:a9:a5:
                    ac:a1:36:4e:61:4a:2e:96:24:33:46:5c:3b:f7:3c:
                    c0:d0:0b:04:d7:5c:9a:c6:0e:f7:bb:1c:7b:8d:73:
                    94:73:30:a5:f7:95:d2:c7:e5:3b:df:94:84:b4:9c:
                    81:34:31:bc:57:2d:e3:3b:9a:50:d6:9e:ae:9c:57:
                    cb:9a:6e:3a:f4:fe:dd:5e:25:45:91:27:49:27:8a:
                    6b:fc:cb:ca:69:d9:bd:f5:c4:09:7e:91:74:f4:cd:
                    7a:2e:97:d4:38:92:46:0d:5b:ff:72:9c:1f:02:01:
                    16:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A0:6B:00:32:A7:A0:19:FF:44:25:B7:63:E0:7F:75:A4:9C:08:96
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e34382e302f32322d3232203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:f3:cc:18:a8:10:cb:76:85:60:de:2b:3f:e5:39:d6:21:7a:
         d9:45:4e:31:c8:69:58:29:f4:30:99:68:97:a4:57:fc:87:02:
         b0:8c:94:19:c9:26:30:26:63:97:70:d7:f8:80:32:00:8b:13:
         97:6a:5d:77:5c:5a:f7:55:9e:d4:3e:0b:3d:af:c1:13:69:a5:
         6e:55:2a:ed:65:41:b2:e3:77:7b:66:04:14:ee:13:bf:1a:af:
         0a:64:a7:4d:c1:81:e0:27:36:90:65:da:b8:ec:ac:cd:a6:02:
         51:1b:79:3d:17:9b:c6:cb:78:fd:07:71:9f:28:c6:50:d0:e9:
         21:c8:e3:2c:e7:b5:e8:c9:b7:89:0d:9c:ec:28:c5:9d:7a:eb:
         25:68:e8:e0:07:57:b4:9e:3b:31:a9:74:11:82:b5:bf:5f:79:
         7c:78:01:48:45:a8:76:10:e2:5b:94:95:f4:f0:e2:3e:e4:8c:
         e5:97:82:0b:25:bb:ae:ee:1f:2c:56:54:5e:20:8d:2c:49:a1:
         15:c9:ae:24:a8:00:99:f3:a3:96:23:de:9d:7a:cb:e9:27:20:
         c3:4e:d3:ba:c5:bc:64:14:1f:3b:90:a3:6b:6b:ac:64:f7:da:
         cc:09:ab:12:2b:67:e3:11:b3:f4:35:e1:69:c8:34:92:70:02:
         13:3f:d3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:31:09 2026 by rpki-client