This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3137302e302f32342d3234203d3e20323731383432.roa
File:                     3136382e3139342e3137302e302f32342d3234203d3e20323731383432.roa (raw, json)
Hash identifier:          5g8tnbcsgVS/48jxE+9Cdq/EWpj2yLxdfDrlCrOXMZ4=
Subject key identifier:   AE:D7:EC:83:4D:50:50:E4:E1:F5:EB:D9:82:4C:D9:27:BD:0F:37:1E
Certificate issuer:       /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial:       010A51E35E195B0348A859BDABC513EF7592467E
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3137302e302f32342d3234203d3e20323731383432.roa
Signing time:             Tue 06 Jan 2026 19:40:58 +0000
ROA not before:           Tue 06 Jan 2026 19:35:58 +0000
ROA not after:            Tue 05 Jan 2027 19:40:58 +0000
asID:                     271842
IP address blocks:        168.194.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 12:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0a:51:e3:5e:19:5b:03:48:a8:59:bd:ab:c5:13:ef:75:92:46:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
        Validity
            Not Before: Jan  6 19:35:58 2026 GMT
            Not After : Jan  5 19:40:58 2027 GMT
        Subject: CN=AED7EC834D5050E4E1F5EBD9824CD927BD0F371E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5c:bf:3f:60:75:5a:21:b0:6a:22:f8:bc:ce:
                    0e:8b:69:cf:2b:89:33:aa:23:69:11:f5:ce:32:3a:
                    c1:f8:bd:be:c6:b5:7b:40:99:5f:f5:8f:86:69:b3:
                    d0:d8:22:bb:7c:ca:db:84:16:24:61:fa:97:ef:a5:
                    50:e7:1e:ed:c4:5b:48:de:b3:40:42:6c:ff:2c:6e:
                    d5:51:ec:1d:f6:d8:63:4b:b9:63:5f:3a:c0:21:d4:
                    62:8b:6c:16:22:26:0b:c6:8c:21:18:da:ae:4a:8f:
                    b1:3b:19:28:f6:be:03:5e:f4:27:48:65:ff:c1:e4:
                    80:fd:1a:6c:ab:cd:21:b6:df:f3:76:d7:9e:ea:47:
                    d6:0f:38:90:3e:de:cf:eb:72:05:3a:d8:23:36:43:
                    e3:89:b0:64:4d:76:01:63:5b:1a:08:96:1a:a0:09:
                    9e:f5:50:f6:ef:08:a6:8a:7b:6b:a0:d4:a7:3b:96:
                    2a:1e:5f:b4:54:33:59:2e:a8:1b:8b:78:9f:1f:a6:
                    29:a3:cc:f6:24:7d:1c:97:8c:06:98:f1:d8:36:20:
                    08:34:e0:07:aa:9b:b5:80:5d:29:6f:f8:7a:fa:25:
                    45:e3:05:b8:13:6b:82:f9:1b:ec:83:bf:ae:03:6b:
                    b1:0c:36:4d:01:fb:1e:de:4a:da:29:67:e6:94:f6:
                    ed:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D7:EC:83:4D:50:50:E4:E1:F5:EB:D9:82:4C:D9:27:BD:0F:37:1E
            X509v3 Authority Key Identifier:
                keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3137302e302f32342d3234203d3e20323731383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:f6:fc:93:45:80:96:66:cb:18:ad:2a:7e:19:3e:96:c2:12:
         5f:2c:e4:29:d3:13:16:8e:84:a4:59:f1:05:89:dd:a3:5b:2d:
         98:2a:13:dc:08:2b:88:75:a1:be:57:6d:29:5c:07:d3:44:59:
         31:a9:ac:30:15:18:e3:70:16:62:08:c6:92:ea:81:b3:ec:7e:
         c2:35:83:96:c9:80:84:a5:df:64:4c:a9:8f:1c:a3:b7:be:b9:
         f1:5d:39:65:58:0d:f2:6f:78:63:76:ce:fb:5a:35:36:7d:6c:
         95:3b:e1:fe:65:e7:c3:c7:c2:0a:f7:71:9d:f2:93:58:d4:6b:
         97:15:fb:5b:3f:85:e1:86:94:db:ed:d7:61:2e:99:98:c9:1b:
         57:ed:6f:95:7b:10:8b:90:2e:93:99:27:80:c5:3f:3f:40:d3:
         5b:28:74:19:56:74:67:24:6b:f7:f6:7e:e6:b3:9a:f5:2b:19:
         8a:7b:34:6d:d5:42:6c:c7:52:88:d8:e6:8b:2a:7f:98:f9:4b:
         a2:74:04:21:b5:be:17:d6:5b:6e:7a:7c:f3:94:c0:56:56:d0:
         cf:1f:41:32:95:ab:2b:a3:ff:8b:9e:92:8d:5b:81:cf:0c:ed:
         e5:8a:83:e3:3b:ce:4b:13:65:13:f6:8a:ac:25:df:ef:1a:43:
         12:34:b5:1d
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUAQpR414ZWwNIqFm9q8UT73WSRn4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVBREE4NDc5NDdGRkNBQUYyOUMyRTQxRjJERUYyM0ZF
ODJCOTRERDAeFw0yNjAxMDYxOTM1NThaFw0yNzAxMDUxOTQwNThaMDMxMTAvBgNV
BAMTKEFFRDdFQzgzNEQ1MDUwRTRFMUY1RUJEOTgyNENEOTI3QkQwRjM3MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXXL8/YHVaIbBqIvi8zg6Lac8r
iTOqI2kR9c4yOsH4vb7GtXtAmV/1j4Zps9DYIrt8ytuEFiRh+pfvpVDnHu3EW0je
s0BCbP8sbtVR7B322GNLuWNfOsAh1GKLbBYiJgvGjCEY2q5Kj7E7GSj2vgNe9CdI
Zf/B5ID9GmyrzSG23/N2157qR9YPOJA+3s/rcgU62CM2Q+OJsGRNdgFjWxoIlhqg
CZ71UPbvCKaKe2ug1Kc7lioeX7RUM1kuqBuLeJ8fpimjzPYkfRyXjAaY8dg2IAg0
4Aeqm7WAXSlv+Hr6JUXjBbgTa4L5G+yDv64Da7EMNk0B+x7eStopZ+aU9u0rAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUrtfsg01QUOTh9evZgkzZJ70PNx4wHwYDVR0j
BBgwFoAUpa2oR5R//KrynC5B8t7yP+grlN0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRTE3MDgwQkYzNDE3MTFCMjdCRTYyN0Q0NjlCQzNGRUM0
QzVERDY2NTg4MjIyRjVFNTU1ODA4M0I2N0EzNkM4LzAvQTVBREE4NDc5NDdGRkNB
QUYyOUMyRTQxRjJERUYyM0ZFODJCOTRERC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNUFEQTg0Nzk0N0ZGQ0FBRjI5
QzJFNDFGMkRFRjIzRkU4MkI5NERELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUUxNzA4MEJGMzQxNzExQjI3QkU2MjdENDY5QkMzRkVDNEM1REQ2NjU4
ODIyMkY1RTU1NTgwODNCNjdBMzZDOC8wLzMxMzYzODJlMzEzOTM0MmUzMTM3MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzEzODM0MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo
wqowDQYJKoZIhvcNAQELBQADggEBAA32/JNFgJZmyxitKn4ZPpbCEl8s5CnTExaO
hKRZ8QWJ3aNbLZgqE9wIK4h1ob5XbSlcB9NEWTGprDAVGONwFmIIxpLqgbPsfsI1
g5bJgISl32RMqY8co7e+ufFdOWVYDfJveGN2zvtaNTZ9bJU74f5l58PHwgr3cZ3y
k1jUa5cV+1s/heGGlNvt12EumZjJG1ftb5V7EIuQLpOZJ4DFPz9A01sodBlWdGck
a/f2fuazmvUrGYp7NG3VQmzHUojY5osqf5j5S6J0BCG1vhfWW256fPOUwFZW0M8f
QTKVqyuj/4ueko1bgc8M7eWKg+M7zksTZRP2iqwl3+8aQxI0tR0=
-----END CERTIFICATE-----
Generated at Mon Jan 12 10:55:27 2026 by rpki-client