This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/3137302e3233392e31322e302f32322d3234203d3e203237373539.roa
File:                     3137302e3233392e31322e302f32322d3234203d3e203237373539.roa (raw, json)
Hash identifier:          j+Jev9Pu6c2hZE+Ey93oMS3urkvh+2uU7q8+s0aw04U=
Subject key identifier:   D2:6C:74:23:8F:4C:1C:AC:FE:6F:93:0F:27:5E:24:06:70:A3:CE:24
Certificate issuer:       /CN=B72C94D573353BE962B600097BE1E558CF9533D1
Certificate serial:       15E0619AF7773DC3C5E746F0031A67ACEF191296
Authority key identifier: B7:2C:94:D5:73:35:3B:E9:62:B6:00:09:7B:E1:E5:58:CF:95:33:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B72C94D573353BE962B600097BE1E558CF9533D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/3137302e3233392e31322e302f32322d3234203d3e203237373539.roa
Signing time:             Thu 18 Dec 2025 19:40:00 +0000
ROA not before:           Thu 18 Dec 2025 19:35:00 +0000
ROA not after:            Thu 17 Dec 2026 19:40:00 +0000
asID:                     27759
IP address blocks:        170.239.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/B72C94D573353BE962B600097BE1E558CF9533D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/B72C94D573353BE962B600097BE1E558CF9533D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B72C94D573353BE962B600097BE1E558CF9533D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 00:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e0:61:9a:f7:77:3d:c3:c5:e7:46:f0:03:1a:67:ac:ef:19:12:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72C94D573353BE962B600097BE1E558CF9533D1
        Validity
            Not Before: Dec 18 19:35:00 2025 GMT
            Not After : Dec 17 19:40:00 2026 GMT
        Subject: CN=D26C74238F4C1CACFE6F930F275E240670A3CE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fb:22:f8:5c:ae:96:3d:e1:8b:bd:46:d0:b2:
                    73:4e:6e:07:a3:a1:91:4e:1c:27:5b:d6:b2:8f:d4:
                    c1:24:91:bb:f7:da:e0:d5:62:98:9e:c6:d5:3f:a2:
                    40:64:bf:05:58:3b:f3:ab:07:bb:ea:b9:d1:78:87:
                    b2:a7:99:43:a6:7e:0d:21:e4:8b:e4:72:b4:3b:2c:
                    27:ce:cc:78:9d:6f:33:48:2f:fb:71:43:87:72:20:
                    d4:ae:b5:75:f4:bf:5b:82:d1:bf:91:87:74:1a:65:
                    25:0c:9c:2c:0a:95:af:aa:27:41:7e:42:e3:0e:f0:
                    c7:d0:8a:83:6d:10:a3:e1:61:f8:c2:29:28:d6:5b:
                    4e:9d:d3:4a:fd:54:61:94:d0:03:c5:69:4f:8e:1b:
                    4d:a5:ce:1b:29:80:37:cf:f6:b6:8c:24:59:f4:c1:
                    a8:20:a8:cf:3a:0f:45:14:52:98:af:d7:49:4f:b9:
                    6c:f1:c9:b2:11:d3:23:20:fd:18:82:2b:d8:04:fe:
                    c7:f1:10:3f:44:a8:69:90:57:d8:fd:49:da:2f:d6:
                    e7:dc:ff:6a:79:ca:27:3f:1c:53:57:be:24:7f:7c:
                    4a:02:f6:de:fc:3f:65:2e:86:c1:27:ee:45:0d:d5:
                    7a:8a:73:5b:85:2f:b1:d3:60:a5:50:08:94:9c:42:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6C:74:23:8F:4C:1C:AC:FE:6F:93:0F:27:5E:24:06:70:A3:CE:24
            X509v3 Authority Key Identifier:
                keyid:B7:2C:94:D5:73:35:3B:E9:62:B6:00:09:7B:E1:E5:58:CF:95:33:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/B72C94D573353BE962B600097BE1E558CF9533D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B72C94D573353BE962B600097BE1E558CF9533D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/3137302e3233392e31322e302f32322d3234203d3e203237373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:43:8d:e7:42:21:a3:b9:14:40:d7:d6:dc:6c:c5:d3:f9:76:
         6f:8c:a5:1b:0c:e6:eb:3b:45:22:b6:8a:ae:3e:4d:32:8b:f8:
         00:91:0c:b7:e5:df:3f:9a:f0:0b:95:21:09:d9:c2:a4:23:d0:
         1e:15:35:46:8b:62:96:4c:ff:35:cd:be:41:f1:cd:6b:00:7a:
         ef:53:03:85:73:d9:f0:e7:3d:6f:c2:38:88:6c:73:d1:b3:00:
         f2:26:8f:de:85:cc:94:24:64:7b:2e:13:07:f5:86:8a:cd:48:
         3f:30:15:75:bc:71:02:fa:81:43:68:47:1b:12:93:98:32:fb:
         0a:96:3f:b5:22:67:69:46:d5:8d:55:5e:c7:ad:97:bb:bf:99:
         d0:08:77:cb:84:96:36:96:16:53:df:c6:8c:c6:bf:44:e8:81:
         2f:83:ec:69:86:3e:e1:bf:3a:28:5b:46:3a:a3:dc:11:f2:94:
         4e:a1:cb:99:4f:93:19:67:6e:a3:05:2c:75:1c:ab:9b:2e:84:
         e4:4a:78:ca:31:17:8f:f3:5f:9a:54:d1:35:bc:59:97:12:5e:
         4e:8d:38:fd:88:16:08:94:4e:25:9a:9f:95:76:7d:6a:ba:69:
         21:5c:1e:9c:e1:30:1a:9d:dc:73:aa:06:f1:fb:70:c2:70:2a:
         98:86:e1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:36:30 2025 by rpki-client