This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/3137302e37382e3133362e302f32322d3234203d3e20323635363934.roa
File:                     3137302e37382e3133362e302f32322d3234203d3e20323635363934.roa (raw, json)
Hash identifier:          2kpY8d91XhiLQZhQTWLErN/PgKK3GL1RW+KAN3ts1yY=
Subject key identifier:   9D:6A:34:19:BF:EC:01:02:12:C7:5A:FA:23:79:CA:F6:68:C4:D8:0D
Certificate issuer:       /CN=004D8C9FCE585D1D2D59E2275E877AC70968F585
Certificate serial:       15E672D0A328B02AF0F7CFDCCFD6EE50E97E0343
Authority key identifier: 00:4D:8C:9F:CE:58:5D:1D:2D:59:E2:27:5E:87:7A:C7:09:68:F5:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/3137302e37382e3133362e302f32322d3234203d3e20323635363934.roa
Signing time:             Tue 06 Jan 2026 19:21:35 +0000
ROA not before:           Tue 06 Jan 2026 19:16:35 +0000
ROA not after:            Tue 05 Jan 2027 19:21:35 +0000
asID:                     265694
IP address blocks:        170.78.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 06:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e6:72:d0:a3:28:b0:2a:f0:f7:cf:dc:cf:d6:ee:50:e9:7e:03:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004D8C9FCE585D1D2D59E2275E877AC70968F585
        Validity
            Not Before: Jan  6 19:16:35 2026 GMT
            Not After : Jan  5 19:21:35 2027 GMT
        Subject: CN=9D6A3419BFEC010212C75AFA2379CAF668C4D80D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c5:ad:9b:7c:a8:67:9c:c5:4e:40:a6:47:44:
                    c7:13:1e:07:a5:44:7a:65:f9:7c:b3:d8:8f:92:38:
                    ad:13:7f:89:83:2c:d2:c2:8e:7d:ce:38:a1:4b:d7:
                    76:9f:28:e5:1e:c4:a0:db:cf:c7:f2:ea:1a:13:58:
                    eb:db:0c:32:41:c0:dd:63:09:4b:8c:1d:44:42:c5:
                    ae:e0:16:00:44:47:5d:8c:f7:f8:cf:cc:cf:8f:97:
                    69:4d:44:19:a0:67:05:0e:b6:ab:c4:15:38:73:c1:
                    3d:5a:28:d6:dc:dd:45:95:76:fb:5a:26:0e:e4:cf:
                    c4:89:91:9b:99:de:54:99:c8:7c:f0:01:2d:1b:56:
                    16:d9:ca:fb:df:0f:a7:e9:9c:75:29:e7:ff:bd:20:
                    92:ce:0c:90:5e:86:35:a8:da:95:5e:18:83:77:3f:
                    9d:7a:e5:d1:48:bd:e9:73:0d:d7:84:22:cf:84:c4:
                    15:8c:ca:af:ff:16:fd:66:8d:b6:8c:2a:c9:c8:af:
                    5f:bb:c7:e3:0e:db:35:ad:a9:43:17:09:19:ca:3f:
                    0e:75:c4:b6:06:58:2f:7c:37:6e:d6:b5:34:e3:78:
                    80:fe:0d:ea:01:9a:80:63:fb:4c:1a:0b:92:e3:94:
                    4e:69:0f:ed:09:46:7e:a9:db:25:cc:32:16:6a:ce:
                    fd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6A:34:19:BF:EC:01:02:12:C7:5A:FA:23:79:CA:F6:68:C4:D8:0D
            X509v3 Authority Key Identifier:
                keyid:00:4D:8C:9F:CE:58:5D:1D:2D:59:E2:27:5E:87:7A:C7:09:68:F5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/3137302e37382e3133362e302f32322d3234203d3e20323635363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:50:5e:9e:5e:c1:c1:38:36:b4:b1:06:fb:07:45:58:81:5c:
         e3:ff:5c:79:b3:cb:65:e7:c0:3d:5c:b9:f5:5e:48:89:a2:18:
         e0:74:0c:a8:35:2a:03:9b:c7:7a:e0:76:3c:fb:31:85:2e:3b:
         60:0c:8e:f0:a4:99:d2:1f:4e:99:02:35:af:0a:db:c7:6a:a5:
         3f:e2:9f:e2:5b:d9:91:09:1c:4d:d2:72:f0:f1:b4:eb:c0:ce:
         73:15:33:7f:f9:c4:d4:75:44:61:61:53:49:d7:d0:1a:fb:cc:
         28:a5:62:16:ee:e9:83:f9:bf:ad:80:ff:29:9b:7c:08:08:b2:
         fb:be:09:79:26:85:4f:20:c5:5b:4d:5d:8c:d5:ed:f6:5b:08:
         48:80:e1:30:01:ae:5b:1d:39:ba:9a:ca:8b:f7:dc:ad:a9:e7:
         b8:93:09:92:b4:55:83:1d:19:b9:0e:a0:e0:9b:5c:08:3f:43:
         2b:e1:ec:ee:74:61:93:a9:45:bb:56:36:83:f9:cf:a6:e7:74:
         8b:e0:ce:ec:12:64:9c:26:11:f6:9a:85:c3:47:25:09:0a:1a:
         0a:56:13:20:61:30:92:fb:a1:d4:f4:19:cd:aa:df:f8:84:1e:
         0e:c9:33:e6:bc:81:3f:bc:ec:37:0e:b5:67:f2:b9:48:47:32:
         3b:1a:d7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:08:26 2026 by rpki-client