This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32342d3234203d3e203336353131.roa
File:                     3137302e3233332e37322e302f32342d3234203d3e203336353131.roa (raw, json)
Hash identifier:          pzF8qEJJ96+bHeL+X+SMkmqrfB6JlIKA/0Mz6MM2QAg=
Subject key identifier:   0F:56:05:91:86:68:D5:C2:F8:75:12:D2:81:DF:AA:67:8D:75:0D:75
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       4874D4C974121839FD86E63E4CFE6312ABE70B91
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32342d3234203d3e203336353131.roa
Signing time:             Tue 18 Nov 2025 15:53:04 +0000
ROA not before:           Tue 18 Nov 2025 15:48:04 +0000
ROA not after:            Tue 17 Nov 2026 15:53:04 +0000
asID:                     36511
IP address blocks:        170.233.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:74:d4:c9:74:12:18:39:fd:86:e6:3e:4c:fe:63:12:ab:e7:0b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: Nov 18 15:48:04 2025 GMT
            Not After : Nov 17 15:53:04 2026 GMT
        Subject: CN=0F5605918668D5C2F87512D281DFAA678D750D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a4:f2:05:81:1d:93:89:43:a4:ad:8c:14:00:
                    85:bc:25:43:04:ba:72:1d:4d:2c:1d:dd:c5:92:d7:
                    5b:a8:1c:47:c5:39:5d:11:5b:62:51:b8:ac:72:8d:
                    3f:1c:dd:bd:2d:19:45:59:fc:39:fd:80:22:d5:51:
                    38:e4:47:3d:e7:a8:98:bb:a5:0d:a0:8e:64:ff:26:
                    f3:bc:53:09:d1:a7:46:38:3d:db:f2:c1:8a:2d:76:
                    08:42:1f:6c:9a:ee:cc:56:51:c2:a7:27:42:47:a7:
                    95:f0:0a:0b:fc:b6:9c:20:25:3c:b7:64:ce:2b:03:
                    4c:57:e3:23:73:40:ec:82:65:c9:d0:d3:e9:16:cd:
                    cd:01:ca:5f:b4:f7:9d:7c:a3:64:0a:93:fa:7c:f3:
                    b7:31:e2:50:32:2e:dc:e0:9a:1e:ea:fb:14:86:2f:
                    ea:4b:52:82:57:cf:00:f7:02:1d:5f:c3:61:e7:3a:
                    a7:ab:82:7c:17:60:cf:3a:da:6f:de:3f:7c:c0:ef:
                    67:5e:39:f6:45:79:e7:05:97:4f:6c:b8:e4:f2:04:
                    76:76:e8:62:c6:59:2e:b6:c4:ff:ca:bd:64:6b:27:
                    c8:01:06:1f:18:0a:ae:06:08:49:4a:9d:29:a9:bc:
                    3a:60:45:1b:c6:1c:09:c5:b3:ba:cd:26:91:42:47:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:56:05:91:86:68:D5:C2:F8:75:12:D2:81:DF:AA:67:8D:75:0D:75
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32342d3234203d3e203336353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:fa:67:ab:34:31:e2:4d:5d:35:86:c4:dc:de:dc:8e:ff:e2:
         56:65:a0:01:89:99:08:e8:50:de:ad:71:e0:ee:1a:73:b1:04:
         e3:6e:2f:6e:1e:c4:d1:65:8d:d5:01:b0:8f:8b:20:89:fc:30:
         4a:6c:2d:9e:fa:8a:7e:70:a6:eb:f3:d6:72:71:1e:01:c6:2f:
         0a:a5:b4:d6:62:63:59:1e:83:fe:c8:16:d7:9a:f0:62:81:5c:
         e9:22:7e:4d:b3:16:3a:6a:89:98:14:bc:10:ed:a1:80:83:a0:
         2f:b5:d9:86:87:a2:d6:31:47:dc:7b:e2:61:35:b8:2d:50:d2:
         48:a3:ad:7d:6c:59:76:bc:c8:b0:1b:9e:00:71:fb:51:95:a1:
         63:42:ce:75:fa:b4:b5:e4:bd:cc:a3:54:3a:45:b6:48:15:b5:
         55:e8:9b:6c:ad:02:ed:84:72:9a:7b:b1:f0:92:17:8a:b7:e0:
         b9:c9:db:ea:3e:9a:6a:11:65:43:10:d6:76:f4:9e:ff:7c:5c:
         dd:f3:19:9b:c2:9a:01:5f:67:dd:94:56:6e:df:57:7e:1c:d7:
         bb:5e:5e:36:3b:82:82:1f:cd:a8:94:db:bd:02:35:29:a6:92:
         d9:e3:7f:f9:65:f7:82:9a:d0:8e:bf:22:0c:92:a7:6e:c4:b7:
         94:47:03:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:04:30 2025 by rpki-client