This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e203134323539.roa
File:                     3137302e3233392e36342e302f32322d3234203d3e203134323539.roa (raw, json)
Hash identifier:          qX/thnShQXthXBGtxtxOEnWK3zVHgreQcWfjknRQyCs=
Subject key identifier:   25:BB:75:7D:3B:C6:F3:A7:5F:D7:A8:AD:41:08:C0:46:99:80:FA:D1
Certificate issuer:       /CN=094D2B4D623E37AF19F9481AD2255430380E9CBD
Certificate serial:       1CA201065860643685B703EAE1FDA3C7B2B92EA9
Authority key identifier: 09:4D:2B:4D:62:3E:37:AF:19:F9:48:1A:D2:25:54:30:38:0E:9C:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e203134323539.roa
Signing time:             Tue 06 Jan 2026 19:29:51 +0000
ROA not before:           Tue 06 Jan 2026 19:24:51 +0000
ROA not after:            Tue 05 Jan 2027 19:29:51 +0000
asID:                     14259
IP address blocks:        170.239.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 21:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a2:01:06:58:60:64:36:85:b7:03:ea:e1:fd:a3:c7:b2:b9:2e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094D2B4D623E37AF19F9481AD2255430380E9CBD
        Validity
            Not Before: Jan  6 19:24:51 2026 GMT
            Not After : Jan  5 19:29:51 2027 GMT
        Subject: CN=25BB757D3BC6F3A75FD7A8AD4108C0469980FAD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:aa:a0:1a:ae:82:74:22:b2:e0:59:1a:0a:
                    7a:f9:f1:0c:9e:56:90:aa:8e:5b:c3:b0:e7:ae:d6:
                    4d:1e:bf:1b:4d:20:9f:4d:2c:05:85:c5:bc:f7:64:
                    bf:57:da:02:ef:af:ab:32:23:4b:ac:2c:c8:66:aa:
                    32:95:7e:02:f9:6e:8d:13:03:71:4e:4a:ce:15:80:
                    15:f5:b7:6c:f2:c9:a6:6c:35:b8:3f:53:e4:e9:83:
                    df:2d:a4:b5:d9:3f:31:aa:a8:35:2d:fd:45:83:68:
                    6b:4b:e0:78:19:cc:36:59:a4:46:9f:22:45:59:8b:
                    67:96:c6:10:1b:b2:50:01:72:6d:b9:8b:57:e8:f0:
                    50:da:f5:1d:6b:b8:3f:e4:96:86:41:38:2c:15:91:
                    66:cc:ee:1a:f9:04:05:cd:ab:40:6d:9a:25:fa:05:
                    55:ae:4c:17:b9:84:2c:75:31:2a:a6:e4:8d:a0:c0:
                    4f:36:63:c6:37:62:25:06:2b:8c:45:f3:4a:6a:ac:
                    17:61:e7:a6:fc:84:0b:d8:0d:92:94:dc:57:cc:c1:
                    ad:8f:76:cc:da:05:36:ba:1d:59:1f:d2:dc:35:16:
                    22:29:f8:a3:9d:02:a8:19:74:d9:b5:3f:4c:ac:fa:
                    84:61:3c:71:4c:58:67:53:08:01:28:4e:9e:52:a3:
                    82:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BB:75:7D:3B:C6:F3:A7:5F:D7:A8:AD:41:08:C0:46:99:80:FA:D1
            X509v3 Authority Key Identifier:
                keyid:09:4D:2B:4D:62:3E:37:AF:19:F9:48:1A:D2:25:54:30:38:0E:9C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:1e:43:4b:ab:6f:10:04:63:a1:e3:b3:41:6c:cd:01:5d:f0:
         a9:ef:d2:b7:71:e5:7b:87:f1:7a:9b:3c:c2:30:f2:9f:0d:46:
         42:3e:95:1d:52:34:07:2a:1a:76:10:8b:45:d0:78:e7:fa:28:
         8e:6b:6e:30:b2:ac:ca:c8:ab:f8:fd:16:26:8e:27:9e:ba:e3:
         ed:4a:83:be:ac:65:19:69:39:1b:5c:74:de:62:8b:75:a9:3b:
         e8:4a:00:a9:af:6b:de:4e:a8:fd:0a:36:4e:3e:75:1c:34:43:
         16:0b:2a:e1:d3:92:87:41:f6:1c:21:dc:3f:1c:da:5b:68:82:
         44:17:13:be:2a:5b:47:1a:c6:24:84:41:9e:ac:07:ae:3d:64:
         92:1f:48:ff:81:e1:62:df:fe:89:99:86:41:0d:c9:b6:83:18:
         d9:80:36:f9:50:38:c6:41:47:ff:f8:f1:ba:7b:fe:a2:ad:b3:
         cf:ff:5e:5e:89:75:35:c3:1b:56:0f:64:fe:0f:0d:8a:a0:4c:
         df:df:32:60:b7:07:17:d5:bd:5d:bd:0a:95:ff:9d:1b:c1:47:
         4a:51:f7:42:0b:38:e6:47:9d:c0:5c:63:c3:48:93:17:b0:6e:
         c0:aa:f2:b0:5d:4f:22:c6:5c:37:d6:d3:2d:5b:4c:b7:1d:f0:
         f5:29:85:c0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHKIBBlhgZDaFtwPq4f2jx7K5LqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk0RDJCNEQ2MjNFMzdBRjE5Rjk0ODFBRDIyNTU0MzAz
ODBFOUNCRDAeFw0yNjAxMDYxOTI0NTFaFw0yNzAxMDUxOTI5NTFaMDMxMTAvBgNV
BAMTKDI1QkI3NTdEM0JDNkYzQTc1RkQ3QThBRDQxMDhDMDQ2OTk4MEZBRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhqqgGq6CdCKy4FkaCnr58Qye
VpCqjlvDsOeu1k0evxtNIJ9NLAWFxbz3ZL9X2gLvr6syI0usLMhmqjKVfgL5bo0T
A3FOSs4VgBX1t2zyyaZsNbg/U+Tpg98tpLXZPzGqqDUt/UWDaGtL4HgZzDZZpEaf
IkVZi2eWxhAbslABcm25i1fo8FDa9R1ruD/kloZBOCwVkWbM7hr5BAXNq0BtmiX6
BVWuTBe5hCx1MSqm5I2gwE82Y8Y3YiUGK4xF80pqrBdh56b8hAvYDZKU3FfMwa2P
dszaBTa6HVkf0tw1FiIp+KOdAqgZdNm1P0ys+oRhPHFMWGdTCAEoTp5So4I/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUJbt1fTvG86df16itQQjARpmA+tEwHwYDVR0j
BBgwFoAUCU0rTWI+N68Z+Uga0iVUMDgOnL0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wREY1QzUzNTM4QjhFNjREQjg5RDkxNTJCOENCQTM1QUE4
NDBCN0FGQTdGNTU0OTNDOTVGQzdFRkUwNTBFMjlELzAvMDk0RDJCNEQ2MjNFMzdB
RjE5Rjk0ODFBRDIyNTU0MzAzODBFOUNCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTREMkI0RDYyM0UzN0FGMTlG
OTQ4MUFEMjI1NTQzMDM4MEU5Q0JELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMERGNUM1MzUzOEI4RTY0REI4OUQ5MTUyQjhDQkEzNUFBODQwQjdBRkE3
RjU1NDkzQzk1RkM3RUZFMDUwRTI5RC8wLzMxMzczMDJlMzIzMzM5MmUzNjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzNDMyMzUzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrvQDAN
BgkqhkiG9w0BAQsFAAOCAQEAbh5DS6tvEARjoeOzQWzNAV3wqe/St3Hle4fxeps8
wjDynw1GQj6VHVI0ByoadhCLRdB45/oojmtuMLKsysir+P0WJo4nnrrj7UqDvqxl
GWk5G1x03mKLdak76EoAqa9r3k6o/Qo2Tj51HDRDFgsq4dOSh0H2HCHcPxzaW2iC
RBcTvipbRxrGJIRBnqwHrj1kkh9I/4HhYt/+iZmGQQ3JtoMY2YA2+VA4xkFH//jx
unv+oq2zz/9eXol1NcMbVg9k/g8NiqBM398yYLcHF9W9Xb0Klf+dG8FHSlH3Qgs4
5kedwFxjw0iTF7BuwKrysF1PIsZcN9bTLVtMtx3w9SmFwA==
-----END CERTIFICATE-----
Generated at Sun Jan 11 15:12:25 2026 by rpki-client