This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/3137302e3234362e3137322e302f32322d3232203d3e20323635363536.roa
File:                     3137302e3234362e3137322e302f32322d3232203d3e20323635363536.roa (raw, json)
Hash identifier:          4onjZgL3KKmWLyYxjrqlqYd2DkwKsa/eZyXs77Am+6E=
Subject key identifier:   DC:A9:11:12:38:CF:E9:D4:66:44:97:87:53:01:25:A3:20:AE:D0:75
Certificate issuer:       /CN=0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8
Certificate serial:       49A6A9BAF08C3A82AAA90B94B9DD056CC4E25F5A
Authority key identifier: 07:49:F0:C9:F9:8B:68:39:2E:2D:B0:F3:EC:25:B9:E2:2E:89:BB:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/3137302e3234362e3137322e302f32322d3232203d3e20323635363536.roa
Signing time:             Tue 06 Jan 2026 19:15:21 +0000
ROA not before:           Tue 06 Jan 2026 19:10:21 +0000
ROA not after:            Tue 05 Jan 2027 19:15:21 +0000
asID:                     265656
IP address blocks:        170.246.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a6:a9:ba:f0:8c:3a:82:aa:a9:0b:94:b9:dd:05:6c:c4:e2:5f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8
        Validity
            Not Before: Jan  6 19:10:21 2026 GMT
            Not After : Jan  5 19:15:21 2027 GMT
        Subject: CN=DCA9111238CFE9D466449787530125A320AED075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:da:87:72:1b:38:80:a4:17:54:12:d6:4b:
                    ae:21:78:4e:90:ee:c5:b2:f6:35:37:8a:c7:0d:25:
                    af:7a:cd:08:eb:1b:2c:57:c1:4e:6e:15:32:08:2c:
                    ae:32:24:24:7f:80:26:82:f0:7b:3e:1f:e9:90:5d:
                    05:f8:74:b6:2f:d1:26:71:90:05:78:d4:ad:f5:17:
                    e2:d0:42:da:d0:ee:84:2f:88:b5:e4:35:68:23:76:
                    47:9e:2e:0f:3f:18:d3:a3:01:c8:c7:43:5c:b0:08:
                    b5:49:0c:6b:ad:cf:36:f4:e2:04:11:96:f8:ae:05:
                    31:db:19:76:82:cd:9b:94:a6:9a:4e:48:20:4a:a3:
                    17:e4:74:ed:7f:44:a7:87:b2:21:56:42:eb:db:3c:
                    84:03:49:fd:56:1a:c5:d3:45:2a:3e:e6:00:7b:eb:
                    96:b5:41:1d:75:f4:6a:8c:ca:d3:db:33:79:0f:a0:
                    59:ff:77:48:c9:fe:cf:7b:57:6f:77:ab:9d:c4:1d:
                    a5:b2:80:cf:6b:17:87:7e:a0:96:49:4d:91:58:96:
                    96:49:19:01:5f:6d:4f:21:9b:3a:d1:2b:d4:e6:7c:
                    4d:f5:f2:43:08:9f:47:16:c0:6d:16:07:ea:27:03:
                    15:61:40:3a:9d:1c:c2:8d:ac:c3:6e:03:11:40:93:
                    0c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A9:11:12:38:CF:E9:D4:66:44:97:87:53:01:25:A3:20:AE:D0:75
            X509v3 Authority Key Identifier:
                keyid:07:49:F0:C9:F9:8B:68:39:2E:2D:B0:F3:EC:25:B9:E2:2E:89:BB:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/3137302e3234362e3137322e302f32322d3232203d3e20323635363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         df:a0:dd:e7:84:f1:3a:f0:ad:7c:67:a5:87:84:5d:31:6c:d2:
         ac:78:42:80:25:2b:0a:70:7c:c1:52:bb:19:74:bf:8c:41:45:
         c1:b4:ee:4a:c2:d4:50:e2:25:65:41:15:ba:a2:8a:da:2e:9f:
         e1:ec:49:6c:58:ab:ce:e5:73:43:69:ba:03:af:96:9a:b3:92:
         55:56:1a:04:47:04:ae:c5:8d:0f:a9:c6:7e:e2:a6:8e:98:e7:
         b0:c8:cf:53:0b:a5:ae:a7:21:19:f4:91:49:56:1a:e2:a8:95:
         82:b0:d7:eb:bd:ee:63:28:56:af:4e:1d:6a:ed:30:68:51:a6:
         3c:d9:37:89:1b:65:87:74:8c:0b:c6:6c:7c:3b:82:10:bf:43:
         0e:1c:51:f4:b2:cc:80:4b:e4:48:29:5b:54:46:74:9c:e0:3b:
         96:4a:1b:b3:7d:04:7f:0a:85:83:fc:94:5e:d2:ab:66:dc:a9:
         48:75:a5:78:18:0f:2a:53:29:b0:9a:5b:21:b2:84:1a:e3:b0:
         70:e6:56:e3:3c:14:cd:98:ec:3f:78:09:3b:e7:e7:27:b3:b9:
         fb:e3:2b:cf:27:dc:21:11:74:65:51:0b:b7:fe:20:01:04:2a:
         85:5b:aa:8d:fa:9e:ef:ca:96:6c:ce:f2:25:97:1e:1f:9d:07:
         59:f2:c2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:43 2026 by rpki-client