This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5305CF7C6D863640C213C1595D4BFA8B63CAF6746A545157580A962730D6C05A/0/3137302e38342e3230342e302f32322d3232203d3e203532353037.roa
File:                     3137302e38342e3230342e302f32322d3232203d3e203532353037.roa (raw, json)
Hash identifier:          BvzExsZeblLjzhpRQ8YP9unLUcgO0o2TiP6pEgyr09s=
Subject key identifier:   5C:A5:FC:31:30:7A:3A:0C:DD:95:D2:A3:CB:D6:2D:65:1A:30:F7:62
Certificate issuer:       /CN=145FA5C6B5E0C033980D417FAB67E5AA4A815176
Certificate serial:       0DBCF7C30F8C42B1DFA80AC1E8DFF36AF2BB43AE
Authority key identifier: 14:5F:A5:C6:B5:E0:C0:33:98:0D:41:7F:AB:67:E5:AA:4A:81:51:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/145FA5C6B5E0C033980D417FAB67E5AA4A815176.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5305CF7C6D863640C213C1595D4BFA8B63CAF6746A545157580A962730D6C05A/0/3137302e38342e3230342e302f32322d3232203d3e203532353037.roa
Signing time:             Tue 06 Jan 2026 20:56:40 +0000
ROA not before:           Tue 06 Jan 2026 20:51:40 +0000
ROA not after:            Tue 05 Jan 2027 20:56:40 +0000
asID:                     52507
IP address blocks:        170.84.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5305CF7C6D863640C213C1595D4BFA8B63CAF6746A545157580A962730D6C05A/0/145FA5C6B5E0C033980D417FAB67E5AA4A815176.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5305CF7C6D863640C213C1595D4BFA8B63CAF6746A545157580A962730D6C05A/0/145FA5C6B5E0C033980D417FAB67E5AA4A815176.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/145FA5C6B5E0C033980D417FAB67E5AA4A815176.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 07:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:bc:f7:c3:0f:8c:42:b1:df:a8:0a:c1:e8:df:f3:6a:f2:bb:43:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145FA5C6B5E0C033980D417FAB67E5AA4A815176
        Validity
            Not Before: Jan  6 20:51:40 2026 GMT
            Not After : Jan  5 20:56:40 2027 GMT
        Subject: CN=5CA5FC31307A3A0CDD95D2A3CBD62D651A30F762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:04:99:34:37:30:f9:20:58:54:8e:85:9c:c5:
                    b2:25:d3:f4:dd:6d:1d:bc:e1:dc:84:3e:d0:c7:2f:
                    a4:9e:20:2b:d4:57:30:73:4f:5d:90:dc:51:fe:7f:
                    98:2b:5e:b7:4c:20:39:4f:e7:28:4d:a0:13:77:be:
                    69:35:3b:43:80:a0:12:30:93:2e:0e:53:60:26:58:
                    1a:95:39:69:4a:f3:0b:ea:3e:54:50:f2:ab:29:2a:
                    e4:0a:ec:97:ec:99:d3:64:5c:ac:58:7a:f6:48:b6:
                    b2:82:7b:6a:91:ee:f2:9f:b6:8c:4f:52:ce:1b:01:
                    c0:8c:aa:35:34:ae:e5:2e:6e:2a:e2:cd:0c:d3:7b:
                    c1:78:a8:16:68:da:d8:5e:70:b7:c7:cd:54:93:17:
                    c0:e3:f4:c4:08:62:86:76:c1:bd:d1:aa:3b:4b:a5:
                    52:92:f6:dd:02:10:4a:c0:2a:4e:f7:14:a2:df:d3:
                    0e:71:d9:f6:68:9f:89:79:72:2b:1a:b5:cb:45:69:
                    fe:78:44:c8:76:32:b0:18:e8:51:01:62:92:7e:bf:
                    20:b7:f7:44:7b:35:48:94:f7:c7:aa:a8:f0:c7:c6:
                    8e:ca:6a:67:7e:e5:c7:d7:df:6b:4e:67:4b:52:4c:
                    44:bc:71:1b:58:83:50:23:45:df:92:bb:46:cd:5a:
                    6e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A5:FC:31:30:7A:3A:0C:DD:95:D2:A3:CB:D6:2D:65:1A:30:F7:62
            X509v3 Authority Key Identifier:
                keyid:14:5F:A5:C6:B5:E0:C0:33:98:0D:41:7F:AB:67:E5:AA:4A:81:51:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5305CF7C6D863640C213C1595D4BFA8B63CAF6746A545157580A962730D6C05A/0/145FA5C6B5E0C033980D417FAB67E5AA4A815176.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/145FA5C6B5E0C033980D417FAB67E5AA4A815176.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5305CF7C6D863640C213C1595D4BFA8B63CAF6746A545157580A962730D6C05A/0/3137302e38342e3230342e302f32322d3232203d3e203532353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:65:66:71:85:61:21:96:80:5c:73:b6:dd:ac:77:d0:9c:42:
         ca:67:48:b8:31:39:c1:0f:57:32:f5:6a:4c:a0:f6:c7:96:09:
         3c:5f:7b:65:e0:ed:75:52:8e:72:b8:9b:6b:64:0e:d0:40:28:
         58:84:30:29:b1:1e:35:5c:dc:f4:1d:96:1c:2e:e3:d1:35:25:
         ce:c2:d9:15:79:23:92:5e:7e:24:e8:e8:64:03:0a:5c:7b:50:
         cc:fc:14:89:6a:de:16:de:ad:22:ea:c9:2b:8f:d5:65:e7:da:
         59:78:88:4b:1e:49:d8:a3:d6:69:b7:91:7b:95:ac:0a:80:a5:
         57:26:a4:c1:34:1f:ea:5c:32:46:42:13:31:fe:de:74:53:cf:
         eb:d3:e9:98:86:29:51:fb:63:e9:b1:44:6d:24:3b:0d:dd:ab:
         e8:32:91:53:34:a9:2a:31:56:dc:8e:fc:5e:c7:2d:51:e4:8d:
         e3:84:83:4e:25:07:36:1a:a1:11:c6:db:0c:83:9c:44:95:67:
         07:42:ff:5f:c9:63:ee:f6:24:4c:70:de:49:b8:ee:3c:78:5e:
         8b:86:d7:90:a5:46:69:7c:9f:41:74:f6:1a:ae:7b:29:e0:38:
         80:8e:85:5e:9d:cf:9c:d1:c1:1a:64:33:d6:3a:03:b8:5a:2a:
         61:f0:a8:b3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDbz3ww+MQrHfqArB6N/zavK7Q64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ1RkE1QzZCNUUwQzAzMzk4MEQ0MTdGQUI2N0U1QUE0
QTgxNTE3NjAeFw0yNjAxMDYyMDUxNDBaFw0yNzAxMDUyMDU2NDBaMDMxMTAvBgNV
BAMTKDVDQTVGQzMxMzA3QTNBMENERDk1RDJBM0NCRDYyRDY1MUEzMEY3NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsBJk0NzD5IFhUjoWcxbIl0/Td
bR284dyEPtDHL6SeICvUVzBzT12Q3FH+f5grXrdMIDlP5yhNoBN3vmk1O0OAoBIw
ky4OU2AmWBqVOWlK8wvqPlRQ8qspKuQK7JfsmdNkXKxYevZItrKCe2qR7vKftoxP
Us4bAcCMqjU0ruUubirizQzTe8F4qBZo2thecLfHzVSTF8Dj9MQIYoZ2wb3RqjtL
pVKS9t0CEErAKk73FKLf0w5x2fZon4l5cisatctFaf54RMh2MrAY6FEBYpJ+vyC3
90R7NUiU98eqqPDHxo7Kamd+5cfX32tOZ0tSTES8cRtYg1AjRd+Su0bNWm7VAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUXKX8MTB6OgzdldKjy9YtZRow92IwHwYDVR0j
BBgwFoAUFF+lxrXgwDOYDUF/q2flqkqBUXYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MzA1Q0Y3QzZEODYzNjQwQzIxM0MxNTk1RDRCRkE4QjYz
Q0FGNjc0NkE1NDUxNTc1ODBBOTYyNzMwRDZDMDVBLzAvMTQ1RkE1QzZCNUUwQzAz
Mzk4MEQ0MTdGQUI2N0U1QUE0QTgxNTE3Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNDVGQTVDNkI1RTBDMDMzOTgw
RDQxN0ZBQjY3RTVBQTRBODE1MTc2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTMwNUNGN0M2RDg2MzY0MEMyMTNDMTU5NUQ0QkZBOEI2M0NBRjY3NDZB
NTQ1MTU3NTgwQTk2MjczMEQ2QzA1QS8wLzMxMzczMDJlMzgzNDJlMzIzMDM0MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjM1MzAzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqpUzDAN
BgkqhkiG9w0BAQsFAAOCAQEAuGVmcYVhIZaAXHO23ax30JxCymdIuDE5wQ9XMvVq
TKD2x5YJPF97ZeDtdVKOcriba2QO0EAoWIQwKbEeNVzc9B2WHC7j0TUlzsLZFXkj
kl5+JOjoZAMKXHtQzPwUiWreFt6tIurJK4/VZefaWXiISx5J2KPWabeRe5WsCoCl
VyakwTQf6lwyRkITMf7edFPP69PpmIYpUftj6bFEbSQ7Dd2r6DKRUzSpKjFW3I78
XsctUeSN44SDTiUHNhqhEcbbDIOcRJVnB0L/X8lj7vYkTHDeSbjuPHhei4bXkKVG
aXyfQXT2Gq57KeA4gI6FXp3PnNHBGmQz1joDuFoqYfCosw==
-----END CERTIFICATE-----
Generated at Tue Jan 13 08:12:25 2026 by rpki-client