This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e35302e302f32332d3233203d3e203532353130.roa
File:                     3137302e3234352e35302e302f32332d3233203d3e203532353130.roa (raw, json)
Hash identifier:          HRhnf8+8SLNjKNaafvDkupsbAv69EG1kwY7SbbC+/wY=
Subject key identifier:   8E:E6:B6:8E:B8:A5:CC:1F:D6:80:C7:9D:C7:12:2F:37:B6:01:0A:33
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       426E107B70316BC0E8FB5F9A3BC3476D593A4319
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e35302e302f32332d3233203d3e203532353130.roa
Signing time:             Tue 06 Jan 2026 19:26:22 +0000
ROA not before:           Tue 06 Jan 2026 19:21:22 +0000
ROA not after:            Tue 05 Jan 2027 19:26:22 +0000
asID:                     52510
IP address blocks:        170.245.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6e:10:7b:70:31:6b:c0:e8:fb:5f:9a:3b:c3:47:6d:59:3a:43:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Jan  6 19:21:22 2026 GMT
            Not After : Jan  5 19:26:22 2027 GMT
        Subject: CN=8EE6B68EB8A5CC1FD680C79DC7122F37B6010A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:30:a9:72:e4:fa:af:af:a6:f0:2b:11:75:00:
                    64:44:a7:88:5f:ef:fe:24:bd:14:bc:0c:25:b9:b8:
                    a9:55:dd:32:56:9b:d4:6e:57:4f:ee:fb:4b:b8:90:
                    61:aa:bc:41:63:4d:ec:51:15:92:d9:da:d9:ba:1a:
                    02:a4:8a:87:e3:40:6a:8b:75:77:13:14:85:83:59:
                    51:b6:2d:c9:a9:c9:9c:b1:78:4a:93:bc:5f:97:c3:
                    82:39:e7:8b:80:60:e5:7a:5c:d7:5f:b2:3e:06:41:
                    fd:e3:9d:75:a4:d7:0d:2e:b2:97:51:4b:09:6b:cf:
                    f0:23:71:1c:7b:bb:8d:a5:75:43:12:84:26:70:81:
                    c5:0a:de:43:fd:29:e1:95:4d:b0:55:81:2f:51:83:
                    ae:94:40:ba:55:c4:de:40:5b:ec:b8:94:e6:b3:9e:
                    9f:47:d7:35:77:eb:21:f2:57:b4:d9:97:f9:b8:c9:
                    73:89:ce:ed:ca:d8:bc:0b:b0:7d:82:7a:cd:47:ce:
                    51:87:2e:5d:a2:30:93:f0:89:27:3e:eb:f2:87:6c:
                    7f:75:24:6d:91:9e:ec:0c:3a:d8:bc:bf:88:30:3e:
                    c4:ce:05:76:e6:24:0a:b7:e8:ee:1f:8e:10:28:a8:
                    83:bf:81:c8:38:7e:13:8b:e1:4f:52:3b:94:3d:60:
                    dd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E6:B6:8E:B8:A5:CC:1F:D6:80:C7:9D:C7:12:2F:37:B6:01:0A:33
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e35302e302f32332d3233203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:2e:cb:97:c4:cd:28:ca:dd:91:58:e0:e9:a7:54:f3:5e:e8:
         13:0f:5a:83:0b:12:ed:1e:3c:ab:9a:49:20:73:fd:bf:81:33:
         d3:d4:0d:09:5a:44:de:e9:68:e3:50:04:1c:32:d5:10:4c:92:
         e0:54:1c:07:69:19:b9:74:2a:23:4b:c1:0b:17:d0:ba:f1:8f:
         e6:79:ed:06:8e:be:4e:5e:77:32:f7:b0:1e:51:e6:8e:17:1e:
         27:02:de:2d:2d:fb:b2:87:03:79:8e:c8:c5:13:aa:df:6d:65:
         16:23:4e:7d:34:b5:0e:dc:0b:ce:0b:ab:8f:c4:df:7c:d0:31:
         e3:35:c3:dc:65:3e:08:81:9d:62:d4:2b:ab:8c:88:11:2b:ef:
         dd:18:0a:87:db:f2:cb:81:6a:40:7f:8f:f2:f8:ae:d7:93:21:
         bc:d1:e1:b0:32:cb:c1:54:51:60:8a:6a:5d:09:2e:19:ac:e3:
         48:7a:05:15:34:2b:0c:28:8d:76:fb:bf:34:da:15:39:02:11:
         f8:44:4e:16:48:da:f3:40:4e:3e:2d:d9:02:32:23:c0:9a:f7:
         63:49:f1:56:26:14:28:e7:59:70:1e:bb:8c:6c:e3:e2:e8:16:
         32:83:2e:4b:9d:0f:be:33:86:1e:71:1a:79:64:b1:4a:66:59:
         f2:12:68:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:02 2026 by rpki-client