This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3137302e3233392e3130302e302f32322d3234203d3e203232343131.roa
File:                     3137302e3233392e3130302e302f32322d3234203d3e203232343131.roa (raw, json)
Hash identifier:          hCLjz/0DRLDCDigSR73ZcZ+9HNlnIz8bVRlDFPGSSLo=
Subject key identifier:   0A:CD:17:1D:05:4E:4A:1F:E0:FC:12:5F:26:2F:E4:F9:AB:6A:17:8E
Certificate issuer:       /CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
Certificate serial:       474183A1FD310E054B01D0C042307BAD739492BC
Authority key identifier: AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3137302e3233392e3130302e302f32322d3234203d3e203232343131.roa
Signing time:             Tue 06 Jan 2026 18:59:11 +0000
ROA not before:           Tue 06 Jan 2026 18:54:11 +0000
ROA not after:            Tue 05 Jan 2027 18:59:11 +0000
asID:                     22411
IP address blocks:        170.239.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 17:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:41:83:a1:fd:31:0e:05:4b:01:d0:c0:42:30:7b:ad:73:94:92:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
        Validity
            Not Before: Jan  6 18:54:11 2026 GMT
            Not After : Jan  5 18:59:11 2027 GMT
        Subject: CN=0ACD171D054E4A1FE0FC125F262FE4F9AB6A178E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:00:3f:c6:47:a3:3a:c4:7b:6b:4c:c2:fd:
                    b0:42:e2:0b:ec:c2:7d:a4:90:9f:29:3a:1b:7f:bb:
                    4c:7d:19:ca:f7:07:f7:dc:c0:fe:98:e4:a2:99:4d:
                    8c:ae:f8:7a:92:e0:45:92:6d:d8:e8:13:e2:19:e5:
                    f6:f1:a0:c0:03:c9:b2:06:f7:75:75:2a:58:39:98:
                    62:f3:b3:a7:e4:c0:b3:0e:6b:3f:6d:c9:7a:d9:e3:
                    cd:da:cc:0b:72:04:ee:18:6e:55:06:33:80:55:1e:
                    6c:a5:4d:be:43:ce:f2:91:9b:bf:4e:e7:34:29:8d:
                    a8:51:fa:72:19:fc:de:bd:cb:0d:89:52:e3:dd:33:
                    71:a9:56:86:1d:fe:55:ee:85:4b:47:f3:49:72:d2:
                    86:8a:75:11:46:2e:d4:ed:ec:21:f1:05:89:f9:10:
                    8f:16:ad:21:97:a4:1b:54:70:f8:df:9c:b4:2d:3f:
                    bf:86:a5:75:65:2f:f7:de:f8:c4:aa:dc:f6:4d:18:
                    1f:4f:46:f0:5d:b7:87:1e:f7:d6:29:3c:8a:61:8a:
                    27:36:41:8d:bc:c2:ce:68:81:ea:a4:ed:3b:9b:6f:
                    06:c6:af:d7:9b:04:80:08:3f:33:ca:fc:72:fa:cf:
                    bf:06:18:68:9c:b5:df:88:18:09:44:80:da:56:ff:
                    0c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CD:17:1D:05:4E:4A:1F:E0:FC:12:5F:26:2F:E4:F9:AB:6A:17:8E
            X509v3 Authority Key Identifier:
                keyid:AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3137302e3233392e3130302e302f32322d3234203d3e203232343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:8b:fc:65:aa:6e:b0:29:1b:f1:f5:fd:ff:8e:d4:5e:eb:76:
         31:f4:e8:74:e3:da:3b:ec:35:3a:5e:a9:90:40:06:e7:74:aa:
         03:70:4c:e4:68:8d:1e:06:83:70:d4:02:62:da:b6:4a:2a:47:
         36:42:a6:1c:b5:ae:75:4c:f2:53:d2:d5:be:ed:67:16:6d:bf:
         80:21:d2:48:41:d4:d4:a9:7c:84:da:d4:7e:79:3b:f6:6c:ff:
         df:0e:2c:b8:7c:e2:1e:b8:fe:a2:18:cf:43:81:ad:db:cb:0a:
         ec:e2:49:c6:f3:38:87:0c:8c:f1:8e:04:bd:86:aa:0f:45:a5:
         57:a7:e2:98:67:e5:f3:7e:3e:1e:86:3e:17:f5:24:85:22:05:
         7d:e6:97:aa:3c:eb:1c:19:b5:40:0f:70:8a:bd:4b:4a:81:ca:
         c5:f1:07:eb:4d:7e:b6:9c:e2:a0:5c:be:51:09:44:9f:59:06:
         a0:ff:b5:c5:c6:6d:9c:8a:5e:d9:3a:05:6e:e0:4e:91:e9:b9:
         80:db:1f:d9:2d:23:6e:10:2d:32:9c:2b:e1:d9:68:6e:ec:e1:
         4d:67:e2:27:cd:cd:3a:1b:0e:0f:c9:de:19:09:9f:73:92:9c:
         9e:c5:12:05:66:df:79:ec:3e:dc:4d:81:7b:61:b1:e0:66:2e:
         f2:65:87:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:31:32 2026 by rpki-client