This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/3137302e3234372e39362e302f32322d3234203d3e20323635363539.roa
File:                     3137302e3234372e39362e302f32322d3234203d3e20323635363539.roa (raw, json)
Hash identifier:          RUg/NavMR/fFlcFoDBKqN3kRoM/mJ6zdR46g8rINTRM=
Subject key identifier:   32:63:1D:24:B7:99:6B:E3:08:11:76:3A:B3:12:88:07:FA:E3:35:DE
Certificate issuer:       /CN=259C857FBBE3D174F02EFBE0681691812000149A
Certificate serial:       41550F21DD926D1C7D55298203B1CDF3412850A1
Authority key identifier: 25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/3137302e3234372e39362e302f32322d3234203d3e20323635363539.roa
Signing time:             Tue 06 Jan 2026 20:57:06 +0000
ROA not before:           Tue 06 Jan 2026 20:52:06 +0000
ROA not after:            Tue 05 Jan 2027 20:57:06 +0000
asID:                     265659
IP address blocks:        170.247.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:55:0f:21:dd:92:6d:1c:7d:55:29:82:03:b1:cd:f3:41:28:50:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259C857FBBE3D174F02EFBE0681691812000149A
        Validity
            Not Before: Jan  6 20:52:06 2026 GMT
            Not After : Jan  5 20:57:06 2027 GMT
        Subject: CN=32631D24B7996BE30811763AB3128807FAE335DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:bc:62:a3:a6:0f:f8:0c:a8:cf:63:23:47:
                    52:75:b2:ad:e0:55:3b:5c:26:93:b3:fb:2b:1e:81:
                    e0:a7:47:67:26:c2:39:6a:79:e6:b5:bb:11:e4:2f:
                    2f:33:ca:76:b2:5b:d8:a9:24:97:8c:6d:5f:b1:4c:
                    8a:1e:7d:4a:92:12:0f:c4:d7:7b:0f:b3:39:94:65:
                    4d:1b:e7:bd:53:76:1f:5f:e1:92:aa:e4:ae:3c:a0:
                    66:3a:f0:15:d0:89:6c:c9:be:26:7a:a7:e8:10:0b:
                    99:e1:6a:80:bd:81:52:93:72:6d:d6:2c:ad:e6:71:
                    18:5d:59:35:37:48:82:52:5c:34:d9:67:5b:d7:96:
                    cf:cc:5f:8f:28:72:b1:48:db:27:45:2f:02:92:a3:
                    40:c2:2d:75:bd:b8:af:2f:55:14:d9:f6:8d:90:58:
                    04:5d:b3:22:c5:28:b4:84:27:bd:91:0d:2a:ac:96:
                    a0:2c:6c:2f:0a:bb:07:65:31:b8:d5:b0:28:c7:67:
                    b1:63:cc:36:3c:4e:0f:a3:6b:ff:6d:df:1b:9a:d3:
                    b3:3a:54:ee:90:a1:84:fd:c8:65:fc:37:08:49:1f:
                    f5:f4:4c:af:5b:9f:9c:6f:d2:3a:03:fe:ca:50:cb:
                    6d:50:b5:0e:9e:09:7b:00:4d:80:89:e1:bc:a1:fb:
                    26:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:63:1D:24:B7:99:6B:E3:08:11:76:3A:B3:12:88:07:FA:E3:35:DE
            X509v3 Authority Key Identifier:
                keyid:25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/3137302e3234372e39362e302f32322d3234203d3e20323635363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:a1:9a:ed:9a:20:1d:5e:1c:22:c4:94:3c:b7:8e:16:03:9f:
         f6:52:d6:22:9a:b9:4c:42:ca:51:27:0e:58:4f:01:c7:d0:0d:
         79:a3:19:2b:e0:56:7f:93:6a:9f:3e:37:ad:12:e6:29:aa:12:
         ca:8e:1f:ee:ae:e5:05:26:95:c7:aa:94:9b:d6:08:79:1a:54:
         84:67:ac:7b:a3:54:52:20:13:8a:02:ca:ea:d1:b2:dc:c3:cf:
         35:80:76:c7:c9:70:f9:c3:ed:f5:78:98:d5:d8:6d:a9:7b:a6:
         95:46:80:88:c7:06:1b:24:83:60:37:24:0a:e4:96:c6:7b:4a:
         dd:c2:96:64:5d:4c:aa:fe:ad:1b:f7:be:29:ee:bc:1c:6b:91:
         fb:60:e1:8c:ed:cc:4d:69:0d:e6:e9:2f:ca:0f:32:10:1f:25:
         f7:b7:10:5c:69:fd:f6:90:9f:cc:1a:ca:48:c5:b2:2c:0c:76:
         56:00:ff:9c:66:49:3c:be:48:8e:20:56:ac:85:0f:54:6b:14:
         de:00:9a:0f:0b:53:88:3b:97:bd:3a:33:34:cc:b9:ea:4e:76:
         9d:61:24:26:9a:a6:08:77:89:73:da:eb:4c:49:27:55:30:c5:
         5e:c9:10:51:5c:f1:c8:a6:24:b9:c8:8c:81:7a:98:51:50:8c:
         6a:58:4c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:00:01 2026 by rpki-client