This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138322e302f32342d3234203d3e20323634373430.roa
File:                     3137302e3233392e3138322e302f32342d3234203d3e20323634373430.roa (raw, json)
Hash identifier:          k6AgmjARcAp7F12pZzwDnfeXK9Rm33RLsWO95lgUd58=
Subject key identifier:   52:AE:B2:89:3B:DC:5E:24:6E:46:87:8F:A3:60:70:ED:0F:1A:B1:C4
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       6763939C9F56289173A4BF87E7D8AD916F96CFC6
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138322e302f32342d3234203d3e20323634373430.roa
Signing time:             Tue 06 Jan 2026 19:37:56 +0000
ROA not before:           Tue 06 Jan 2026 19:32:56 +0000
ROA not after:            Tue 05 Jan 2027 19:37:56 +0000
asID:                     264740
IP address blocks:        170.239.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:63:93:9c:9f:56:28:91:73:a4:bf:87:e7:d8:ad:91:6f:96:cf:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Jan  6 19:32:56 2026 GMT
            Not After : Jan  5 19:37:56 2027 GMT
        Subject: CN=52AEB2893BDC5E246E46878FA36070ED0F1AB1C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:d8:0e:2a:fb:a3:91:c2:94:08:d5:fb:f3:
                    63:60:02:ea:f0:b6:a7:c0:cc:0e:c0:0e:3e:f6:6c:
                    cb:f7:cb:de:bc:c3:62:ad:3b:0e:e0:91:6b:41:b4:
                    0d:c0:96:cb:a4:68:ac:a7:ab:22:23:70:e0:cf:2a:
                    ac:ca:e4:36:77:ea:d9:b4:35:24:65:04:a3:6e:57:
                    d0:92:f0:cf:fc:5a:57:cf:2c:9e:5c:f2:9b:4d:6b:
                    c3:15:d8:56:60:d2:de:bf:76:fc:bb:c4:cd:92:9a:
                    b5:13:59:c1:2d:08:1f:56:a2:24:c2:41:9d:42:d4:
                    4c:9c:73:ba:b4:93:4f:19:ff:87:cf:2f:d0:70:b5:
                    a7:76:37:c2:47:c8:68:86:9f:cd:09:f9:70:8d:9a:
                    0a:42:79:e3:24:00:58:4d:49:f0:16:f6:40:27:e6:
                    32:d1:82:b6:f8:5d:ab:35:78:0f:9c:86:65:a4:cb:
                    f7:a4:cf:40:a7:c8:b9:6d:81:31:d9:fb:5c:c4:fd:
                    8c:67:1b:da:fe:cb:8a:62:a2:8e:5a:15:73:ee:cd:
                    6c:fc:b4:99:53:db:07:4c:0c:b8:85:24:b4:d3:f1:
                    00:0e:78:ae:bf:73:cf:db:a4:a8:ee:86:13:b0:7b:
                    12:54:d6:84:7e:5b:1f:d8:45:71:1a:69:a6:6f:3e:
                    45:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AE:B2:89:3B:DC:5E:24:6E:46:87:8F:A3:60:70:ED:0F:1A:B1:C4
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138322e302f32342d3234203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:7e:47:a5:11:b3:44:28:e7:5a:bf:3f:f4:ed:98:6b:79:7f:
         7f:50:14:86:ef:2f:ea:91:de:e9:e8:07:d5:5e:50:87:08:c8:
         8f:05:2d:58:c8:20:ed:19:81:49:7a:49:14:58:c6:65:b5:8d:
         f0:55:44:9a:93:b1:a7:78:2f:7a:30:b4:17:78:87:29:df:16:
         65:88:f7:ef:98:ad:ad:22:8c:fa:43:82:e5:4b:47:db:99:3c:
         81:e2:d3:55:c8:41:51:ff:b3:46:e0:f2:85:39:83:41:71:df:
         1c:1f:8e:a4:01:7d:10:76:14:20:4c:df:ff:5a:91:97:8c:36:
         de:d4:62:83:fe:73:8b:bc:5c:0f:31:ba:bc:92:54:67:78:54:
         34:23:8e:a9:ac:9f:c5:04:f9:47:7d:01:f0:64:1c:63:a5:d0:
         63:ff:83:a3:ba:35:e4:af:e0:33:b5:c4:af:64:88:25:95:32:
         51:a9:31:b3:56:98:83:d9:d4:4e:23:32:29:46:22:43:06:32:
         12:2b:b2:40:81:f2:da:f3:93:be:9e:44:29:1d:a5:c8:e3:24:
         6d:d0:f6:f0:38:b0:d3:ff:24:14:bf:ef:a2:96:05:d8:ef:cf:
         89:be:7d:3b:b4:2b:90:01:c8:2b:53:de:91:fc:c7:f2:c5:0f:
         42:5b:9d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:09:09 2026 by rpki-client