This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37332e302f32342d3234203d3e203336353131.roa
File:                     3137302e3233332e37332e302f32342d3234203d3e203336353131.roa (raw, json)
Hash identifier:          RkOGaaRKkWxa05w2nkzOzq9FaikNcyvGAGEu6k6ZygU=
Subject key identifier:   F1:E7:08:65:AA:66:AB:0F:3E:F2:D4:F7:AF:54:1B:ED:50:C1:98:51
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       685C54EDA270BBF725BC0CDF5949AADA266064C7
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37332e302f32342d3234203d3e203336353131.roa
Signing time:             Tue 18 Nov 2025 15:53:04 +0000
ROA not before:           Tue 18 Nov 2025 15:48:04 +0000
ROA not after:            Tue 17 Nov 2026 15:53:04 +0000
asID:                     36511
IP address blocks:        170.233.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5c:54:ed:a2:70:bb:f7:25:bc:0c:df:59:49:aa:da:26:60:64:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: Nov 18 15:48:04 2025 GMT
            Not After : Nov 17 15:53:04 2026 GMT
        Subject: CN=F1E70865AA66AB0F3EF2D4F7AF541BED50C19851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:48:ab:90:db:41:e5:50:25:ec:9c:ac:7b:
                    71:7b:2a:0a:86:5f:30:b0:c9:4e:7b:20:17:88:7e:
                    84:f7:09:69:5c:77:43:12:69:bf:7e:b2:ab:b6:9f:
                    42:31:c1:5d:38:6c:5a:bf:6b:54:d2:c9:52:e7:a6:
                    7f:22:8b:cf:20:77:ad:8b:f8:9f:f3:87:0f:1d:2a:
                    0f:74:91:3d:43:f2:6e:9e:7f:95:2e:e4:ef:47:1b:
                    22:95:10:ff:36:04:8f:1f:2b:b8:25:7e:8c:6c:57:
                    a8:d6:29:74:f3:09:4c:d0:6e:25:41:c0:1e:53:84:
                    c2:6d:37:83:de:d4:ba:3d:f2:9b:97:59:63:8f:ec:
                    f0:ef:e2:13:a1:2e:d0:fa:69:19:c8:cb:11:ee:ec:
                    c3:a9:4c:bc:bf:35:e4:60:58:ca:19:6d:34:dd:c2:
                    25:5d:8a:9f:aa:93:0b:29:0e:7e:75:b9:08:23:67:
                    17:a3:d9:90:c2:d2:d3:40:e3:f9:ca:36:0b:47:00:
                    be:97:1a:49:85:59:b4:b7:22:8c:03:fb:4e:ea:4d:
                    33:5b:f2:35:c3:d8:9f:d3:b1:48:06:94:04:8a:61:
                    9b:50:b9:a1:30:06:f5:a4:c7:f6:76:a0:8b:aa:ac:
                    af:03:4b:a5:e7:2a:ee:b0:fe:8c:fe:5f:23:57:f9:
                    c5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E7:08:65:AA:66:AB:0F:3E:F2:D4:F7:AF:54:1B:ED:50:C1:98:51
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37332e302f32342d3234203d3e203336353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:00:a4:e1:e4:07:af:ef:da:c5:e8:62:05:96:0e:f2:55:93:
         50:7f:ba:96:f7:b1:07:b3:13:36:56:41:e6:a7:b7:a9:cd:00:
         9f:da:f1:7f:0d:b3:c4:37:6d:2a:4c:12:b1:b9:9e:23:ed:3d:
         c8:a8:78:14:47:e7:ed:c9:68:0d:7d:15:d1:55:fa:44:c4:a3:
         87:88:f9:11:47:15:cc:35:9f:1b:56:aa:6c:e5:b5:78:59:fd:
         eb:5a:db:5e:b1:c6:7e:d7:d3:78:5c:a8:10:1d:87:56:4e:1a:
         41:7e:5e:95:df:79:2e:8b:ba:55:6e:65:fb:c4:1a:73:34:ea:
         a6:a2:dd:10:7d:76:04:b7:39:4f:39:39:63:1b:09:62:a0:bf:
         84:5d:c3:77:0c:e5:55:6c:aa:a2:aa:24:8c:ca:3b:bc:01:0a:
         48:4c:82:df:5a:1f:59:68:2b:53:44:d9:66:bd:d0:ac:45:ff:
         a4:a3:84:f9:ed:fc:8e:92:e8:81:4e:cb:12:0c:76:c2:a5:58:
         17:80:d8:80:6a:1b:34:09:77:41:d1:b3:c3:3e:02:95:a1:73:
         e1:c8:28:44:28:62:7d:03:64:6a:90:62:a6:b3:18:67:54:28:
         7a:b9:1f:23:c2:09:7f:ee:cf:16:8c:b8:ae:27:d3:89:62:ca:
         b5:75:62:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:23 2025 by rpki-client