This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/3137302e38332e3233362e302f32322d3232203d3e2033323537.roa
File:                     3137302e38332e3233362e302f32322d3232203d3e2033323537.roa (raw, json)
Hash identifier:          M4ksNPOzaodcAiNH+ShJQN8T97BWe0YSvS3Jyd5MgT0=
Subject key identifier:   30:2C:E5:64:F6:2B:B4:48:9B:F6:A7:EB:42:1F:FE:19:3F:4E:8D:CE
Certificate issuer:       /CN=139F22949A3A148A31827A973EA0FF67A3A095E8
Certificate serial:       6722522A35080641B94D18465F993BBEB45912E7
Authority key identifier: 13:9F:22:94:9A:3A:14:8A:31:82:7A:97:3E:A0:FF:67:A3:A0:95:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/139F22949A3A148A31827A973EA0FF67A3A095E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/3137302e38332e3233362e302f32322d3232203d3e2033323537.roa
Signing time:             Tue 06 Jan 2026 20:49:54 +0000
ROA not before:           Tue 06 Jan 2026 20:44:54 +0000
ROA not after:            Tue 05 Jan 2027 20:49:54 +0000
asID:                     3257
IP address blocks:        170.83.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/139F22949A3A148A31827A973EA0FF67A3A095E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/139F22949A3A148A31827A973EA0FF67A3A095E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/139F22949A3A148A31827A973EA0FF67A3A095E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 16:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:22:52:2a:35:08:06:41:b9:4d:18:46:5f:99:3b:be:b4:59:12:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139F22949A3A148A31827A973EA0FF67A3A095E8
        Validity
            Not Before: Jan  6 20:44:54 2026 GMT
            Not After : Jan  5 20:49:54 2027 GMT
        Subject: CN=302CE564F62BB4489BF6A7EB421FFE193F4E8DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:70:49:a0:2b:e6:f1:2e:0e:c0:0b:1b:1e:36:
                    2c:70:47:1d:8e:69:e5:0f:77:50:df:f8:c5:68:81:
                    fb:64:22:b7:d7:3c:03:50:41:d1:f5:8e:a9:03:b3:
                    dd:5c:ac:50:4c:d2:3a:33:07:10:18:21:da:57:0c:
                    61:1c:d4:1d:74:42:6e:d7:8f:1e:9e:c6:b1:db:d3:
                    6c:b3:d2:6d:5b:f0:4d:42:b9:aa:4b:fa:86:2a:d6:
                    ce:52:66:84:58:3a:5a:ee:1e:60:ae:90:be:97:d0:
                    f5:97:a4:3c:e3:d9:4a:ec:2c:3f:fc:7b:c1:3f:17:
                    93:16:fb:2b:ea:28:4c:68:3b:f6:11:cc:a7:6b:cf:
                    52:98:1d:d3:d0:dd:4e:a8:8b:84:f3:3e:18:5e:d6:
                    04:5b:a6:df:98:21:70:f6:87:0d:2b:bd:e4:d3:0c:
                    d0:5d:ab:db:3d:79:be:f0:36:9b:62:6a:f4:b4:2f:
                    45:bb:27:ef:c4:ba:bf:95:1a:91:91:e6:81:d8:f8:
                    1f:bb:eb:58:e5:01:24:91:cf:24:49:38:1b:ed:61:
                    e1:5d:09:ce:54:38:b8:b7:76:a7:82:a8:a0:ad:c1:
                    83:59:19:d5:62:7c:7a:20:df:87:52:f9:83:de:6e:
                    4c:3a:4e:86:f2:38:3a:fb:fc:55:8f:63:1d:1a:86:
                    90:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2C:E5:64:F6:2B:B4:48:9B:F6:A7:EB:42:1F:FE:19:3F:4E:8D:CE
            X509v3 Authority Key Identifier:
                keyid:13:9F:22:94:9A:3A:14:8A:31:82:7A:97:3E:A0:FF:67:A3:A0:95:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/139F22949A3A148A31827A973EA0FF67A3A095E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/139F22949A3A148A31827A973EA0FF67A3A095E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/3137302e38332e3233362e302f32322d3232203d3e2033323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:c0:d2:00:14:4c:87:56:93:d7:b4:43:6f:ac:ab:ed:ea:84:
         86:9f:0b:50:1d:ea:43:0b:91:9d:f8:ef:c2:ff:dd:cb:c9:14:
         a9:b5:26:21:55:4b:0a:80:f5:ac:b9:69:20:4b:46:8b:6e:d1:
         1a:15:f4:ff:49:95:2d:20:8e:7d:fe:a3:d0:24:4e:50:4c:f3:
         91:55:f8:e3:5a:ab:93:ab:d5:85:69:ff:be:eb:5a:58:db:7c:
         b9:75:86:5b:a3:c0:71:83:2b:3c:d9:3d:f0:18:bc:41:1e:3b:
         c2:9f:f3:56:ee:1c:13:d5:58:ae:d0:4b:39:ad:34:4b:c8:48:
         bf:c2:f2:cb:a8:5c:a0:78:fa:7f:6d:1a:f9:79:d6:64:9e:a4:
         f0:80:3c:85:4c:b5:35:83:75:7e:c6:a5:77:2d:16:a0:56:84:
         da:d6:18:1f:39:28:7d:f6:b0:c8:76:a3:23:6d:14:5f:ea:7b:
         3e:d1:f6:aa:10:c5:49:a1:1a:76:ef:4c:eb:94:cf:6d:59:de:
         d3:35:87:c7:59:72:58:3f:c9:96:b7:9a:cd:fb:0f:06:06:79:
         12:71:64:6a:57:54:6c:0e:81:1c:e6:70:b9:98:0c:e5:06:8c:
         cc:0c:c4:77:4d:d0:19:db:0d:2e:73:31:20:fd:a9:e4:49:97:
         08:b2:44:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:13:34 2026 by rpki-client