This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/3137302e38322e34302e302f32332d3233203d3e20323634383335.roa
File:                     3137302e38322e34302e302f32332d3233203d3e20323634383335.roa (raw, json)
Hash identifier:          lWnk8NAKDHVuH7xbb40RKhRCPayuNL8UvEX1v1ICD5Q=
Subject key identifier:   98:91:87:44:D6:0C:4B:CF:DB:C9:DD:DD:81:9A:1A:64:89:B7:E4:23
Certificate issuer:       /CN=10CD3A4AEF186D6769F0B98233D18F40FE564CB3
Certificate serial:       0B6EF3E6D54621E4FB9B8B7CACB8E6B195A96ABC
Authority key identifier: 10:CD:3A:4A:EF:18:6D:67:69:F0:B9:82:33:D1:8F:40:FE:56:4C:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/3137302e38322e34302e302f32332d3233203d3e20323634383335.roa
Signing time:             Tue 06 Jan 2026 20:55:13 +0000
ROA not before:           Tue 06 Jan 2026 20:50:13 +0000
ROA not after:            Tue 05 Jan 2027 20:55:13 +0000
asID:                     264835
IP address blocks:        170.82.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:09:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6e:f3:e6:d5:46:21:e4:fb:9b:8b:7c:ac:b8:e6:b1:95:a9:6a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CD3A4AEF186D6769F0B98233D18F40FE564CB3
        Validity
            Not Before: Jan  6 20:50:13 2026 GMT
            Not After : Jan  5 20:55:13 2027 GMT
        Subject: CN=98918744D60C4BCFDBC9DDDD819A1A6489B7E423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:a7:51:4d:32:ca:1a:6b:4a:61:1f:99:36:
                    d3:0d:63:5b:b7:0a:e0:7b:c9:ad:b4:0b:ce:d2:14:
                    d8:7c:0f:68:f5:13:71:73:c9:c6:60:c4:dc:75:4b:
                    e5:51:56:52:de:fd:1f:1c:f6:dd:6b:44:46:4c:12:
                    81:b3:19:f9:4d:29:11:26:57:2e:34:72:e4:f7:79:
                    3e:da:cb:a6:b0:51:a0:d0:fc:d6:9f:e6:75:ba:14:
                    f1:db:3f:6b:2d:f6:6d:53:48:61:b8:e3:84:fd:7f:
                    2e:87:55:77:bc:10:97:8b:c5:78:41:b1:7c:85:3d:
                    8b:d2:9c:a9:e4:16:9b:53:5f:61:e5:68:0c:2e:f5:
                    66:86:0b:71:e7:cb:46:9a:fc:bd:60:17:49:9f:38:
                    5f:fe:73:78:9b:58:bb:b7:7e:0b:06:44:d2:90:26:
                    ad:10:ce:be:10:30:95:e8:18:65:69:51:52:56:c4:
                    eb:00:59:ab:09:09:ea:a1:40:a8:1c:59:36:a7:d4:
                    41:2f:d3:65:90:2e:b4:1b:fb:26:69:da:0a:4f:ae:
                    84:82:ea:56:fd:b5:57:aa:40:44:37:e1:ee:d7:0d:
                    90:f5:66:b3:32:fe:c0:dd:fe:4b:40:20:3b:12:39:
                    03:8a:5a:73:8a:81:6b:7d:ad:99:d0:b4:0b:e7:25:
                    df:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:91:87:44:D6:0C:4B:CF:DB:C9:DD:DD:81:9A:1A:64:89:B7:E4:23
            X509v3 Authority Key Identifier:
                keyid:10:CD:3A:4A:EF:18:6D:67:69:F0:B9:82:33:D1:8F:40:FE:56:4C:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10CD3A4AEF186D6769F0B98233D18F40FE564CB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB010E7480329E812CE49BA4C283326802B0ADAEECAE95F626C0F03C82E62DA2/0/3137302e38322e34302e302f32332d3233203d3e20323634383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:bb:36:3d:26:55:ee:51:d8:83:f8:5e:7c:8d:66:14:9c:f5:
         00:6d:54:78:3b:c8:f9:86:51:9b:b6:5f:d5:08:e3:8a:de:2b:
         b7:4e:a3:ea:ae:84:50:60:70:71:77:31:c8:a8:e3:63:71:8e:
         04:16:e0:0d:64:df:0b:37:b0:98:32:7d:73:6b:2f:68:c4:83:
         aa:4e:08:c9:20:31:d9:9c:a3:f3:83:b3:be:00:d2:fa:2c:6c:
         1a:ec:71:05:8d:e9:c5:ae:77:78:66:5a:10:dc:a6:77:70:94:
         ef:57:d5:4b:d6:3a:9d:39:d0:16:5d:63:7f:03:70:be:e3:b8:
         c2:5d:86:ae:f1:ca:ee:35:dd:33:c6:96:79:0d:37:0b:0b:7d:
         69:13:5e:03:eb:ec:c3:30:54:e7:4a:42:c7:23:9b:8c:dc:81:
         8a:ed:15:39:7a:fd:38:34:be:d4:0a:1b:56:99:80:78:db:f1:
         06:80:49:fa:1d:77:e8:87:1f:bc:0a:b2:6d:47:b6:32:67:1a:
         7f:3d:91:5a:18:10:a5:2b:b8:55:cc:39:be:e9:80:9d:a1:d9:
         7e:a5:89:6b:70:b4:5c:82:21:20:9d:5a:b7:06:c6:c1:a8:82:
         48:2d:57:0b:cf:3e:59:3d:33:0e:9e:09:84:49:a7:4e:f6:6f:
         31:b5:8f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:38:44 2026 by rpki-client