This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6862067C15EB95A773906B89FFF14090585769538990208F342EB6895A29FB33/0/3137302e3234352e3234302e302f32322d3234203d3e20323635363336.roa
File:                     3137302e3234352e3234302e302f32322d3234203d3e20323635363336.roa (raw, json)
Hash identifier:          ZD9fFIvNx54aclJ3FIck584l+1Ed6VQv4psQzD3bCTc=
Subject key identifier:   98:4D:C5:DC:8C:CD:FF:2B:F0:9B:76:AF:C2:91:27:99:75:4A:CC:B4
Certificate issuer:       /CN=5F9314810056A2A4DCE4D4071E6CE2CD03A4F642
Certificate serial:       301F525E6BB11853712F23A8180C523483F1716E
Authority key identifier: 5F:93:14:81:00:56:A2:A4:DC:E4:D4:07:1E:6C:E2:CD:03:A4:F6:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F9314810056A2A4DCE4D4071E6CE2CD03A4F642.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6862067C15EB95A773906B89FFF14090585769538990208F342EB6895A29FB33/0/3137302e3234352e3234302e302f32322d3234203d3e20323635363336.roa
Signing time:             Tue 06 Jan 2026 19:25:54 +0000
ROA not before:           Tue 06 Jan 2026 19:20:54 +0000
ROA not after:            Tue 05 Jan 2027 19:25:54 +0000
asID:                     265636
IP address blocks:        170.245.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6862067C15EB95A773906B89FFF14090585769538990208F342EB6895A29FB33/0/5F9314810056A2A4DCE4D4071E6CE2CD03A4F642.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6862067C15EB95A773906B89FFF14090585769538990208F342EB6895A29FB33/0/5F9314810056A2A4DCE4D4071E6CE2CD03A4F642.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F9314810056A2A4DCE4D4071E6CE2CD03A4F642.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 20:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1f:52:5e:6b:b1:18:53:71:2f:23:a8:18:0c:52:34:83:f1:71:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F9314810056A2A4DCE4D4071E6CE2CD03A4F642
        Validity
            Not Before: Jan  6 19:20:54 2026 GMT
            Not After : Jan  5 19:25:54 2027 GMT
        Subject: CN=984DC5DC8CCDFF2BF09B76AFC2912799754ACCB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:f4:0e:76:38:cc:d4:e1:aa:22:b6:43:7f:
                    73:cd:50:09:6f:78:72:47:de:cd:ec:47:e9:8b:36:
                    45:ec:88:f7:f1:0d:60:2b:01:58:40:25:7e:95:5e:
                    6f:b6:11:e6:60:c3:ac:7c:c6:37:cc:21:b0:ff:51:
                    cf:1c:8d:ad:65:db:96:96:0c:e2:a6:d1:49:7d:45:
                    eb:83:6f:f4:a7:04:ff:4e:3f:20:98:f2:4c:9d:f8:
                    a6:11:cd:34:fa:8c:5d:c9:fc:38:d7:bc:fc:25:9e:
                    2c:39:0d:29:a9:2a:d6:2b:1f:c6:5d:da:a9:3c:4d:
                    88:d3:76:f4:e4:02:d2:f1:5a:10:b4:3f:77:14:be:
                    ff:e2:b1:da:c4:6c:d9:dd:a0:28:fb:93:36:f3:3b:
                    d4:1d:ec:1b:81:5c:2b:ce:9b:51:b4:9a:7c:43:50:
                    fc:cc:cf:83:82:6d:71:76:ec:33:1e:ef:4b:7a:d4:
                    82:0e:c3:d4:48:01:76:ae:40:f0:7d:bb:da:8f:07:
                    88:67:d4:d2:e9:d7:06:8b:33:db:53:4f:62:eb:f2:
                    60:07:c8:52:a4:6d:a4:fb:3f:44:c4:2f:b5:e3:a9:
                    c0:3e:5a:5a:3f:16:90:af:92:af:83:81:ba:aa:5f:
                    e9:64:06:67:d3:64:c4:ab:ee:5a:63:ec:13:41:3a:
                    4b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4D:C5:DC:8C:CD:FF:2B:F0:9B:76:AF:C2:91:27:99:75:4A:CC:B4
            X509v3 Authority Key Identifier:
                keyid:5F:93:14:81:00:56:A2:A4:DC:E4:D4:07:1E:6C:E2:CD:03:A4:F6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6862067C15EB95A773906B89FFF14090585769538990208F342EB6895A29FB33/0/5F9314810056A2A4DCE4D4071E6CE2CD03A4F642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F9314810056A2A4DCE4D4071E6CE2CD03A4F642.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6862067C15EB95A773906B89FFF14090585769538990208F342EB6895A29FB33/0/3137302e3234352e3234302e302f32322d3234203d3e20323635363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:d4:da:cf:a6:ec:28:d8:14:d5:87:eb:79:8d:d6:91:54:af:
         ea:89:f6:b0:e5:f8:de:01:cd:b7:bf:97:64:19:1a:22:b2:3d:
         05:a0:e3:28:1d:b5:ae:8c:70:d8:7d:d2:fe:e2:4a:e7:59:36:
         28:5e:9c:23:b5:06:7e:72:70:64:31:ff:a4:9d:80:68:52:2d:
         6d:18:7a:37:c6:60:14:d2:0e:f4:ca:19:ab:9a:b5:38:59:c8:
         d5:80:bc:0a:5c:4f:80:99:74:d5:6e:77:96:5d:2b:12:fa:6e:
         51:f1:c5:29:a7:5e:28:6b:87:d5:66:82:5c:c7:38:05:bc:6b:
         d3:a0:ad:3b:65:63:22:6b:2a:f2:5f:5f:84:34:d2:c1:05:4d:
         56:7e:62:c3:8e:f3:af:cc:1d:10:20:81:a8:c9:bd:bf:c9:8b:
         c8:39:3f:08:ee:d5:20:26:85:02:7e:cd:ae:f4:a6:09:42:48:
         65:b2:da:b3:64:1e:79:36:e9:df:6d:c0:38:a7:ac:e1:f0:f7:
         56:20:e6:52:e3:f1:96:c0:ca:a7:f8:d0:53:7c:15:27:d1:52:
         db:4a:63:57:ab:f2:32:88:6d:45:c1:39:91:11:68:bb:81:8b:
         a8:24:06:0d:c5:4e:fb:98:69:df:54:e5:fd:2c:a5:b3:17:dd:
         62:1c:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 14 12:24:12 2026 by rpki-client