This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3137302e302e38302e302f32322d3234203d3e203232343131.roa
File:                     3137302e302e38302e302f32322d3234203d3e203232343131.roa (raw, json)
Hash identifier:          RfjjHhNfK9IlGOigO9vOaP2VeZ4XiJ63dMyeP2mLUI8=
Subject key identifier:   4B:69:6A:E5:83:3B:73:8E:16:F8:53:5A:99:41:A2:55:79:C9:42:CA
Certificate issuer:       /CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
Certificate serial:       3467ACC3D6192FC70D20DDBABD3575FCB4D000FB
Authority key identifier: AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3137302e302e38302e302f32322d3234203d3e203232343131.roa
Signing time:             Tue 06 Jan 2026 18:59:10 +0000
ROA not before:           Tue 06 Jan 2026 18:54:10 +0000
ROA not after:            Tue 05 Jan 2027 18:59:10 +0000
asID:                     22411
IP address blocks:        170.0.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 17:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:67:ac:c3:d6:19:2f:c7:0d:20:dd:ba:bd:35:75:fc:b4:d0:00:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
        Validity
            Not Before: Jan  6 18:54:10 2026 GMT
            Not After : Jan  5 18:59:10 2027 GMT
        Subject: CN=4B696AE5833B738E16F8535A9941A25579C942CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:15:5f:48:d8:05:f1:0a:45:51:e2:9e:11:ff:
                    85:eb:e5:d1:27:c8:73:55:86:ef:1d:a3:d5:c2:8f:
                    cc:42:79:7c:ab:28:9c:9d:f9:14:01:8e:26:e3:1c:
                    d8:54:c7:bd:ed:e0:23:2d:f9:9f:7a:d0:a3:99:ba:
                    30:52:1d:95:1c:02:a4:fc:0e:8e:eb:ce:69:eb:b1:
                    6c:ef:c3:c3:b9:07:8a:c6:41:43:dc:45:0a:64:80:
                    b0:2f:1f:b4:29:e1:3b:48:43:14:f5:13:a4:39:c5:
                    33:41:7b:ce:e3:80:5d:c4:d4:78:85:f4:08:be:f4:
                    0c:c9:7c:9f:07:a0:3d:33:46:13:0c:05:e6:3a:cd:
                    46:9a:bc:c9:a4:67:f2:75:2c:ed:af:23:86:c8:63:
                    90:ac:13:d5:f7:4a:6d:6c:3c:9f:b9:a9:57:fe:3b:
                    08:3b:f3:68:bb:9e:24:75:64:8b:d0:42:3a:cb:ea:
                    3f:c6:9e:f3:cb:09:29:25:58:4f:7d:00:34:b4:a5:
                    7b:a0:70:c6:aa:38:c8:05:55:2d:b8:b6:34:93:e8:
                    2a:42:11:eb:da:39:7a:88:6a:79:fd:69:27:d1:29:
                    02:d6:82:56:2a:ad:bd:e6:9b:56:be:19:38:43:1d:
                    52:b3:53:50:38:8b:29:a7:ac:dc:7c:97:a6:db:8a:
                    32:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:69:6A:E5:83:3B:73:8E:16:F8:53:5A:99:41:A2:55:79:C9:42:CA
            X509v3 Authority Key Identifier:
                keyid:AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3137302e302e38302e302f32322d3234203d3e203232343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:9a:47:99:d6:0b:be:7a:9e:7e:aa:1d:7b:3e:3c:63:f3:9f:
         84:97:e9:3d:2e:14:2e:2a:2c:08:15:4f:37:63:89:d9:d5:4d:
         8c:03:2a:70:77:e1:4b:02:05:68:73:84:97:92:54:d1:6c:45:
         43:ba:d1:9d:98:27:a7:19:23:94:11:19:06:ae:ea:8f:99:84:
         0d:34:cc:08:c4:6c:a8:c3:df:53:51:ab:ee:77:42:47:44:97:
         e1:d3:8c:71:a1:42:d1:b5:cc:39:b6:99:b0:f2:bf:76:19:eb:
         57:9b:03:f7:81:41:da:15:66:ca:14:75:06:0d:e3:e0:68:7b:
         e4:fc:f6:22:c7:fc:f6:57:08:6c:cd:db:13:4d:a9:5a:d8:2e:
         b1:fc:f0:08:77:6a:53:19:f6:25:04:0e:50:4b:99:a5:04:ad:
         3b:9c:a0:bc:8e:68:6e:45:35:e5:94:b3:ed:99:ca:9c:3f:6e:
         84:7f:0a:f7:23:2b:5a:35:72:4e:17:43:9b:5a:30:b6:6e:1b:
         b2:b0:f1:f4:57:0c:9d:03:99:ec:8a:70:6a:17:9c:42:cf:a7:
         27:11:90:65:77:2f:c4:66:a3:48:6b:e3:ef:0b:e4:96:2a:07:
         be:2b:b2:1e:b6:07:b9:70:68:db:0b:d9:42:af:df:6b:0d:2c:
         5f:cd:d7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:30:52 2026 by rpki-client