This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37332e302f32342d3234203d3e203333333932.roa
File:                     3137302e3233332e37332e302f32342d3234203d3e203333333932.roa (raw, json)
Hash identifier:          Jkti4sI0GTB4nl5+mdT7c8bE0TRutWwy5Ojle4oxFqc=
Subject key identifier:   99:05:7C:D8:2A:D2:B3:D5:05:9F:14:0A:86:4E:5A:69:FE:AD:E4:BA
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       278A818790FFC82BADA24B2E05C6938EA788FEAA
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37332e302f32342d3234203d3e203333333932.roa
Signing time:             Tue 18 Nov 2025 15:53:04 +0000
ROA not before:           Tue 18 Nov 2025 15:48:04 +0000
ROA not after:            Tue 17 Nov 2026 15:53:04 +0000
asID:                     33392
IP address blocks:        170.233.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8a:81:87:90:ff:c8:2b:ad:a2:4b:2e:05:c6:93:8e:a7:88:fe:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: Nov 18 15:48:04 2025 GMT
            Not After : Nov 17 15:53:04 2026 GMT
        Subject: CN=99057CD82AD2B3D5059F140A864E5A69FEADE4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2e:07:6b:6c:bd:29:c8:fa:ff:99:c1:91:53:
                    05:07:87:f1:8a:14:c0:43:e5:e9:10:74:8d:c5:d1:
                    cb:fb:aa:2b:03:fd:e0:3c:24:45:fd:67:be:a5:0e:
                    e9:91:4d:e4:b4:2e:16:18:e0:cb:b5:d3:53:49:b3:
                    55:97:64:f6:10:1e:01:16:62:c2:f0:f9:65:0a:56:
                    f2:1e:ae:8c:90:70:9d:2d:93:71:6f:0d:f3:a8:97:
                    12:f9:38:eb:a7:1a:92:a8:f1:7a:ea:1d:c2:21:ae:
                    be:b1:03:e2:c3:d5:ce:9b:fd:05:92:3f:0f:3d:c3:
                    aa:1f:c1:69:66:cd:00:d5:6b:0f:4c:d6:e1:01:d3:
                    c8:73:a8:46:7c:0c:a4:74:9e:8a:54:cf:0f:27:b5:
                    1e:42:16:75:13:06:b6:33:0f:ca:5c:74:2b:91:ab:
                    d2:af:d3:32:ab:b4:16:2a:5e:ef:3a:da:f1:49:0a:
                    7a:34:a1:a4:fa:33:a2:90:84:8f:7c:26:87:98:1c:
                    46:d6:26:39:0e:3a:92:91:41:d8:36:0c:b2:99:f6:
                    c1:44:29:57:77:4e:ae:00:6b:a7:0a:f6:66:f7:ee:
                    ea:c2:3c:e7:e3:1a:11:37:6f:b5:48:15:6d:c4:5b:
                    fa:ab:31:5a:8b:d2:f7:4c:27:1f:c0:c3:a9:e7:99:
                    0c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:05:7C:D8:2A:D2:B3:D5:05:9F:14:0A:86:4E:5A:69:FE:AD:E4:BA
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37332e302f32342d3234203d3e203333333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:6a:66:87:e6:9a:17:1d:f1:6d:ec:b1:dd:47:53:56:c6:fe:
         51:ae:e7:bf:24:70:9d:75:74:fc:8d:7f:f4:c5:96:c6:92:57:
         58:c2:5c:ec:93:d8:0b:46:05:54:f5:1f:54:57:58:9e:3f:24:
         9d:ec:ae:60:40:ad:73:d0:3a:7e:b7:50:f6:dc:97:28:ca:58:
         d5:24:6f:8e:a1:15:df:79:7b:0b:ee:46:f0:25:1c:b7:57:39:
         cb:d5:e4:1a:4c:af:80:79:e5:71:b4:cb:29:9e:c5:b7:bc:9d:
         4f:b5:fd:19:51:f8:ce:a2:4b:54:db:cf:93:89:29:33:38:85:
         ac:9d:12:7b:ee:54:fe:62:d8:69:f9:45:8f:86:a8:1e:a0:8d:
         b1:14:88:a1:32:c2:ff:a1:bb:e9:3c:ae:00:66:fa:1a:99:d3:
         72:5e:fd:48:4e:07:d2:eb:fc:a6:7a:b1:48:2e:88:fb:b0:e9:
         96:24:c5:3f:e1:cb:8f:95:e5:37:98:bb:93:5e:02:76:95:9a:
         d9:fa:22:73:83:15:d4:e2:d8:2a:4f:31:4f:f6:02:94:e8:32:
         0d:af:29:41:2e:4c:b7:01:b6:fe:8b:b0:ca:73:1b:9e:99:98:
         ce:b0:94:ab:44:63:72:98:2e:cd:76:81:0d:d4:28:a7:e0:e3:
         99:d9:4e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:22:53 2025 by rpki-client