This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231382e302f32342d3234203d3e20323634373730.roa
File:                     3137302e3235342e3231382e302f32342d3234203d3e20323634373730.roa (raw, json)
Hash identifier:          fhOQmCKJYmiYe9p2mi607pNYEQuhUduy+AAQRDZrZvg=
Subject key identifier:   07:A5:39:D8:EA:35:DD:73:9E:0C:DE:A7:22:A8:51:F2:61:80:B1:A9
Certificate issuer:       /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial:       2F8832A10F2757A54235B2C9AAD028E59095C9D9
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231382e302f32342d3234203d3e20323634373730.roa
Signing time:             Tue 06 Jan 2026 18:59:52 +0000
ROA not before:           Tue 06 Jan 2026 18:54:52 +0000
ROA not after:            Tue 05 Jan 2027 18:59:52 +0000
asID:                     264770
IP address blocks:        170.254.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:88:32:a1:0f:27:57:a5:42:35:b2:c9:aa:d0:28:e5:90:95:c9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
        Validity
            Not Before: Jan  6 18:54:52 2026 GMT
            Not After : Jan  5 18:59:52 2027 GMT
        Subject: CN=07A539D8EA35DD739E0CDEA722A851F26180B1A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:50:d3:19:53:e5:6d:47:99:6c:6c:d3:fd:4a:
                    43:c9:36:14:37:06:42:63:00:6f:83:f9:6c:aa:d4:
                    1c:ab:dd:7b:7d:b3:1e:ee:81:24:a1:44:92:45:fb:
                    11:97:44:0e:2d:b3:0f:11:28:4e:18:92:25:cd:0f:
                    24:22:6a:dd:22:38:27:8f:0b:7c:9d:ab:34:e3:ac:
                    36:5a:40:50:27:c5:8c:89:40:7e:70:db:82:a8:a6:
                    de:a7:58:c2:43:cc:ce:64:04:31:ee:64:05:cd:ab:
                    06:29:25:b0:37:e5:05:60:47:a3:38:8a:52:62:6e:
                    da:b0:83:ed:a5:15:05:30:da:11:cb:f2:52:4c:e6:
                    5f:94:d8:c3:ac:4f:b6:f5:41:c1:26:33:83:60:96:
                    f8:a9:6d:80:b7:0a:e8:50:7c:6c:d0:92:de:f7:f7:
                    27:f8:fc:a9:8b:94:85:5c:30:24:25:33:be:f2:7d:
                    51:09:bd:c4:bd:89:99:9a:dd:38:64:76:ce:f6:8d:
                    d0:66:b0:0a:1c:2f:8a:88:d5:72:01:f7:00:db:b4:
                    ee:81:be:04:77:63:cf:6d:ee:95:e7:6f:c5:da:af:
                    96:18:f5:d9:88:d8:b6:ba:c5:41:6f:94:3f:f0:3c:
                    63:8e:e2:17:5d:3b:63:3e:fc:1f:90:0e:b5:2d:48:
                    ab:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A5:39:D8:EA:35:DD:73:9E:0C:DE:A7:22:A8:51:F2:61:80:B1:A9
            X509v3 Authority Key Identifier:
                keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231382e302f32342d3234203d3e20323634373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:2f:17:88:b0:7d:56:4d:f7:bc:02:10:d2:ff:45:8d:b3:bc:
         dc:cd:bd:4b:ec:66:4d:3c:4f:4b:4d:76:07:4d:1f:ed:4f:33:
         94:a6:da:1f:8a:a7:90:dc:ae:2c:90:54:cc:c3:4c:84:9a:72:
         92:55:bc:ac:7f:c0:66:d7:4a:f7:10:21:3e:c9:77:10:69:03:
         9f:d5:da:10:8e:ed:61:bf:cd:26:8c:2b:23:e4:8b:27:af:52:
         b7:dd:b7:e9:32:27:0d:d1:e5:e9:52:f0:cf:c8:c0:d0:b3:ec:
         aa:65:a3:46:ab:3a:65:70:d7:48:d0:06:e7:0c:ab:40:33:bb:
         a6:5d:80:c7:98:2b:51:cd:cf:f0:30:c7:bb:c2:c8:d1:53:37:
         63:37:7e:b2:e0:9f:12:bc:ce:90:69:be:d3:73:41:56:e2:76:
         83:ff:3a:78:a7:76:c1:4f:24:ce:a8:0e:e8:34:8c:68:c1:4b:
         44:9a:02:53:bc:8c:9b:13:89:af:29:0e:21:a5:24:3d:22:e3:
         6b:c1:2c:af:e2:b5:78:f7:9c:3a:8b:bc:f6:ac:35:66:a4:67:
         84:79:87:c1:9b:6a:1b:e3:d7:24:0f:54:08:13:5b:dc:d2:96:
         f7:01:df:74:51:eb:1a:70:2c:54:70:61:19:62:b2:38:1a:47:
         22:a2:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:44:07 2026 by rpki-client