This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3137302e3234372e3231362e302f32322d3234203d3e20323732393831.roa
File:                     3137302e3234372e3231362e302f32322d3234203d3e20323732393831.roa (raw, json)
Hash identifier:          tcnaNP/MdLbce9nRmgtxMUaCDNpy2bZxx1aSm3CjdHw=
Subject key identifier:   04:29:40:A3:7F:87:EC:73:1C:CF:D7:D1:40:84:34:F2:DC:25:A2:DC
Certificate issuer:       /CN=93A905B35648C76DDC2B5F7E48FE13AA127FC4AF
Certificate serial:       660CD09B2BCD2F621AD1B2D0C519AB9622638F90
Authority key identifier: 93:A9:05:B3:56:48:C7:6D:DC:2B:5F:7E:48:FE:13:AA:12:7F:C4:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3137302e3234372e3231362e302f32322d3234203d3e20323732393831.roa
Signing time:             Tue 06 Jan 2026 18:59:41 +0000
ROA not before:           Tue 06 Jan 2026 18:54:41 +0000
ROA not after:            Tue 05 Jan 2027 18:59:41 +0000
asID:                     272981
IP address blocks:        170.247.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 06:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0c:d0:9b:2b:cd:2f:62:1a:d1:b2:d0:c5:19:ab:96:22:63:8f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93A905B35648C76DDC2B5F7E48FE13AA127FC4AF
        Validity
            Not Before: Jan  6 18:54:41 2026 GMT
            Not After : Jan  5 18:59:41 2027 GMT
        Subject: CN=042940A37F87EC731CCFD7D1408434F2DC25A2DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:14:b3:5a:c9:52:be:3b:fc:03:79:50:5f:c0:
                    2b:f1:fb:65:fa:3a:14:8c:60:95:ee:ac:64:b1:dd:
                    04:dc:db:a6:8a:8f:d1:8e:46:1b:b1:5c:82:99:de:
                    3f:4d:61:7b:61:3c:d4:76:43:cf:20:9a:33:83:33:
                    59:7e:72:89:a0:47:94:d2:e3:9f:de:8b:eb:18:8d:
                    5c:90:c8:4c:4d:51:2e:0c:76:de:67:54:cb:ac:0d:
                    94:8a:9d:0e:03:9a:0f:0a:47:5c:6f:32:31:46:f4:
                    60:6f:01:1f:2c:63:80:23:78:a7:a3:cb:3a:36:0b:
                    57:f8:ff:b4:91:79:b6:48:b7:5a:1e:1a:a1:aa:1c:
                    65:33:d9:92:43:ae:1a:38:bc:2a:b5:f0:59:24:75:
                    e2:0a:76:7f:74:a3:97:b9:32:ff:cb:3b:8b:b1:09:
                    45:fe:9d:ad:aa:ca:50:d3:a7:07:df:b8:b4:21:d8:
                    c2:ad:6b:7b:ce:a3:7a:3c:af:4e:e8:09:c7:d4:70:
                    aa:fa:09:e0:7a:e1:69:c8:42:aa:98:d5:4e:9a:22:
                    cd:9d:e9:1e:f0:b6:a4:bd:23:34:f5:10:1d:f3:57:
                    d6:c0:f2:cd:ac:91:af:30:65:a4:8f:2a:07:87:f2:
                    9f:a2:a8:0b:d0:67:8c:56:cd:54:b7:b4:da:f2:95:
                    f4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:29:40:A3:7F:87:EC:73:1C:CF:D7:D1:40:84:34:F2:DC:25:A2:DC
            X509v3 Authority Key Identifier:
                keyid:93:A9:05:B3:56:48:C7:6D:DC:2B:5F:7E:48:FE:13:AA:12:7F:C4:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3137302e3234372e3231362e302f32322d3234203d3e20323732393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:7e:d7:ff:8c:e2:e3:36:3c:57:a6:24:f7:f3:cc:89:93:3b:
         ea:70:3c:c1:cd:de:de:2b:35:93:0b:80:db:b9:c5:1f:16:55:
         37:f6:29:c0:83:23:02:01:88:63:ff:45:6f:75:cf:06:86:b0:
         38:9e:5d:e1:ea:ba:bc:b2:6a:3b:e3:27:01:f1:18:07:98:3c:
         48:5f:05:51:0a:36:95:16:cb:79:e1:d4:fe:98:6e:bd:14:56:
         d9:ce:ba:11:ba:df:00:17:d6:fd:ab:c1:46:f1:0d:ca:77:87:
         02:b1:a2:0b:bb:91:1f:76:81:f1:d2:53:aa:d5:23:90:8f:b4:
         71:08:2b:44:85:b0:ac:a4:51:49:d7:95:86:9b:08:de:17:e0:
         a4:fc:2e:45:b7:58:b4:4e:61:ef:e6:87:6e:07:4a:81:c3:74:
         63:cf:b6:7f:83:76:38:55:c0:fc:06:31:74:8d:a9:31:fc:4a:
         89:91:eb:5c:a3:64:a0:cf:83:29:be:91:49:12:9b:a9:13:08:
         84:bc:c4:9b:37:f1:d7:eb:00:01:72:78:42:53:32:91:5e:9b:
         e5:2d:5c:28:8a:7e:a0:ee:36:90:fb:4c:c0:c0:0a:b5:e7:0a:
         a6:bc:a4:00:b8:67:eb:ae:89:3b:19:6c:35:d9:d1:e4:6e:b5:
         9e:10:a7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 23:14:51 2026 by rpki-client