This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231362e302f32332d3233203d3e20323634373730.roa
File:                     3137302e3235342e3231362e302f32332d3233203d3e20323634373730.roa (raw, json)
Hash identifier:          rQruhqOM9r6QK9f0I/RrrAkKndjqfJ6UJOq1z3SjO9Y=
Subject key identifier:   14:EC:7E:90:F0:73:D7:0E:AF:59:86:52:66:56:6B:02:6E:44:50:A4
Certificate issuer:       /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial:       3170CCB23ED82AD8A6CBC0ACDE1E096F09311348
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231362e302f32332d3233203d3e20323634373730.roa
Signing time:             Tue 06 Jan 2026 18:59:53 +0000
ROA not before:           Tue 06 Jan 2026 18:54:53 +0000
ROA not after:            Tue 05 Jan 2027 18:59:53 +0000
asID:                     264770
IP address blocks:        170.254.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 17:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:70:cc:b2:3e:d8:2a:d8:a6:cb:c0:ac:de:1e:09:6f:09:31:13:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
        Validity
            Not Before: Jan  6 18:54:53 2026 GMT
            Not After : Jan  5 18:59:53 2027 GMT
        Subject: CN=14EC7E90F073D70EAF59865266566B026E4450A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:8f:58:7d:db:20:6b:ae:13:d4:49:aa:fc:
                    29:bd:47:bc:f0:8d:88:c4:e5:ed:35:44:ff:bc:fb:
                    8e:47:25:63:d0:e9:6e:84:2a:f0:ff:b2:13:26:9e:
                    7e:9c:d6:f5:65:21:ca:ee:ed:42:c8:09:1b:3a:d9:
                    f4:b2:c2:74:1d:03:15:51:6f:9f:fe:df:09:2a:06:
                    10:6d:b7:d5:8d:da:e2:b3:a2:59:52:56:02:69:46:
                    c8:4c:8e:f5:55:29:30:9a:8e:44:0f:ac:92:98:db:
                    bb:63:4a:53:51:2e:ba:df:a8:aa:ba:9b:d5:b3:a8:
                    44:c8:5d:21:50:8b:7d:56:f9:59:ed:bb:d5:ba:81:
                    2d:71:0a:13:f3:d2:d5:6b:e7:fa:07:19:0d:4a:e8:
                    23:c2:a2:34:58:a3:a9:8c:55:96:31:96:f9:fc:45:
                    c0:03:61:9a:6d:3a:4c:51:f7:c5:6b:f4:61:5c:9e:
                    59:5d:c4:9a:b3:ab:3d:fc:19:2d:0e:1b:d9:44:fc:
                    e7:51:d2:9f:e9:72:0c:01:0b:08:2e:9c:81:8a:32:
                    fa:5e:b5:4b:a0:78:28:16:6c:21:4d:b6:f9:13:fc:
                    3a:be:ac:37:5b:0b:1a:5f:b9:a9:b3:05:71:2e:cd:
                    7d:d0:ea:d1:94:d5:27:bb:b3:58:14:00:c0:cc:f7:
                    e2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EC:7E:90:F0:73:D7:0E:AF:59:86:52:66:56:6B:02:6E:44:50:A4
            X509v3 Authority Key Identifier:
                keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231362e302f32332d3233203d3e20323634373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:bb:52:2d:79:e6:71:22:1a:f8:fc:ef:08:41:d3:25:c2:05:
         4d:d3:3e:7f:db:2a:67:6e:7a:51:2a:23:62:ff:40:0d:3c:65:
         01:9b:35:bd:09:0e:d2:22:a5:95:b8:e7:ea:80:0d:5f:ef:c0:
         48:e6:0d:e8:66:a0:e4:46:d6:92:62:bb:1c:39:a1:13:99:ae:
         01:e6:5a:fc:44:ff:9d:dd:44:20:cc:ab:f8:85:74:83:51:38:
         3d:7c:fd:ee:63:ea:2d:14:4c:5f:0c:b0:30:9b:43:b0:9f:87:
         be:1e:d6:b7:b3:e2:dd:07:91:36:1f:2b:a6:db:66:2f:ea:8e:
         4d:dc:67:3b:0f:a6:99:cf:ac:76:b7:c5:00:40:e1:6a:7a:49:
         a4:cb:f0:42:5a:7c:a7:27:5c:76:a4:c3:95:1e:79:5b:4e:6a:
         b0:d7:df:b8:5c:be:7d:a9:36:36:5b:8f:bb:1a:8c:c6:4f:b9:
         2b:c3:6d:f7:43:f8:eb:4f:25:74:01:96:41:8f:91:17:1f:d4:
         86:3d:c4:39:fe:13:03:92:cf:55:b4:36:fa:cc:f6:74:f1:0d:
         57:1d:ba:68:d4:0e:11:0b:80:9c:98:01:50:10:4a:b7:e8:31:
         4d:a3:43:f0:85:91:2b:a1:b2:6c:f8:31:9f:9f:8b:ab:fb:e2:
         30:4a:46:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:40:45 2026 by rpki-client