This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3137302e38302e3130382e302f32322d3234203d3e20333935313631.roa
File:                     3137302e38302e3130382e302f32322d3234203d3e20333935313631.roa (raw, json)
Hash identifier:          eeoB+tyg2vqqvv/spJq/qr06QT5uDe1cC7gfoX5Ufzg=
Subject key identifier:   7F:5E:DA:A2:F6:36:0D:C7:F9:90:2C:00:61:77:D9:2C:F5:BD:10:23
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       1ACAC101BE799BDAC334A9D2FD8CD118C6F57144
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3137302e38302e3130382e302f32322d3234203d3e20333935313631.roa
Signing time:             Tue 06 Jan 2026 19:44:53 +0000
ROA not before:           Tue 06 Jan 2026 19:39:53 +0000
ROA not after:            Tue 05 Jan 2027 19:44:53 +0000
asID:                     395161
IP address blocks:        170.80.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ca:c1:01:be:79:9b:da:c3:34:a9:d2:fd:8c:d1:18:c6:f5:71:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Jan  6 19:39:53 2026 GMT
            Not After : Jan  5 19:44:53 2027 GMT
        Subject: CN=7F5EDAA2F6360DC7F9902C006177D92CF5BD1023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:bc:26:c2:16:e8:24:68:ed:dc:e2:e7:0b:
                    19:7f:8a:7b:ea:a5:89:58:fa:87:1c:37:44:e8:ae:
                    9c:c5:28:07:49:dd:08:c4:e5:1c:40:ec:fa:cf:a3:
                    7c:b0:a0:05:00:0a:ed:19:40:c6:59:26:e5:f3:00:
                    71:66:9f:88:00:c5:b0:78:bc:f6:5e:48:52:ff:b1:
                    f6:bf:76:80:6b:ca:b2:3e:52:5a:4c:17:6a:eb:a2:
                    3b:8b:8b:83:9f:92:52:de:68:73:ca:ab:d2:48:02:
                    83:eb:05:3d:0a:2a:cd:b4:47:1f:21:e0:f1:b4:b7:
                    5f:aa:0c:98:14:e2:26:0c:20:21:39:0c:a9:8b:4d:
                    7f:d1:75:15:45:86:ab:25:f5:47:ba:9c:61:d8:b7:
                    ac:1d:5d:78:75:d8:56:3f:d5:db:bd:92:b8:d8:b2:
                    ba:92:7e:45:bf:3c:e5:be:e9:12:3a:4c:01:58:ea:
                    35:93:4e:00:a4:6a:ab:ab:d8:ae:9d:56:01:0a:eb:
                    52:d5:01:15:38:15:ff:ec:5b:6d:f1:44:11:ec:40:
                    62:4c:a3:7e:2a:6f:2d:6c:08:57:b5:7b:e1:05:aa:
                    fd:9c:6c:e4:d6:62:66:60:fc:50:1d:c2:d4:80:31:
                    93:8a:b0:d0:d0:b1:b3:75:8d:37:8e:25:1e:dc:45:
                    1e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5E:DA:A2:F6:36:0D:C7:F9:90:2C:00:61:77:D9:2C:F5:BD:10:23
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3137302e38302e3130382e302f32322d3234203d3e20333935313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:ee:f0:6a:11:2d:9e:66:9a:a6:78:25:ab:b5:f4:4a:8a:80:
         f9:23:36:30:02:57:47:84:87:60:5e:ff:03:ab:4e:db:ee:e1:
         36:86:e5:1c:70:2d:5c:25:0d:50:9d:cf:c9:2d:fc:1a:c0:c7:
         ff:9a:52:7c:ee:5f:38:a0:cc:df:1a:3b:aa:aa:91:6f:58:01:
         2e:1b:f3:aa:ef:3d:ef:b5:a4:65:19:70:dd:7d:e7:61:16:cc:
         ca:c4:6a:91:77:a5:4a:88:15:ca:5c:65:89:42:63:fc:ac:e5:
         ff:4f:fc:d7:07:c5:5b:b8:6e:4c:bb:31:7c:f5:34:df:49:e7:
         32:49:01:bb:49:0c:3d:44:f7:3e:43:93:5c:37:d6:8f:2d:4a:
         9b:ad:c0:df:7c:93:6c:48:23:8e:f9:d4:30:55:d5:a7:0d:88:
         1e:b4:f5:ff:89:c7:50:dd:86:e5:0d:62:db:83:b4:81:0d:57:
         60:c4:ff:ce:b1:24:53:c6:0f:1b:8a:c5:96:fe:cc:53:f5:01:
         ec:51:14:2c:52:00:7a:6a:42:f2:de:03:ae:17:ac:e9:64:f7:
         fe:8f:1d:82:6d:e8:fe:c0:41:3d:49:e7:b0:3c:a9:3f:49:eb:
         30:98:35:85:7e:97:1e:e2:6c:3f:4b:d8:66:90:84:bc:73:3c:
         7f:f5:54:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:41:32 2026 by rpki-client