This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3137302e3233312e37362e302f32322d3234203d3e203237383333.roa
File:                     3137302e3233312e37362e302f32322d3234203d3e203237383333.roa (raw, json)
Hash identifier:          xBEfD4vz69p1svLz59ZZIXkvoquIg+OTMv7ERFYDy2k=
Subject key identifier:   B8:2F:EE:D6:63:64:71:70:68:5A:46:2C:7E:BC:B8:42:E8:36:E7:1F
Certificate issuer:       /CN=BB049027AED3847EFEF3E2D27C66FE9D520E44B1
Certificate serial:       4BE27F6FC5259D01B864ED4B522AA07C2AF4075A
Authority key identifier: BB:04:90:27:AE:D3:84:7E:FE:F3:E2:D2:7C:66:FE:9D:52:0E:44:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3137302e3233312e37362e302f32322d3234203d3e203237383333.roa
Signing time:             Tue 06 Jan 2026 19:21:09 +0000
ROA not before:           Tue 06 Jan 2026 19:16:09 +0000
ROA not after:            Tue 05 Jan 2027 19:21:09 +0000
asID:                     27833
IP address blocks:        170.231.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 20:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e2:7f:6f:c5:25:9d:01:b8:64:ed:4b:52:2a:a0:7c:2a:f4:07:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB049027AED3847EFEF3E2D27C66FE9D520E44B1
        Validity
            Not Before: Jan  6 19:16:09 2026 GMT
            Not After : Jan  5 19:21:09 2027 GMT
        Subject: CN=B82FEED663647170685A462C7EBCB842E836E71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:9c:2c:d2:a3:1e:21:ae:8b:e8:d9:33:da:
                    ac:00:2c:b9:d7:52:2c:a1:94:d6:d0:83:1d:43:36:
                    96:4e:5a:1b:f1:42:36:b3:a5:8e:6b:2b:41:0d:1c:
                    d3:8f:6d:56:d4:52:65:91:c4:39:c9:af:1b:d3:da:
                    fe:40:b1:14:ad:9a:25:a6:66:7d:31:16:8b:8d:63:
                    41:8f:14:be:3c:c7:9e:74:b3:99:71:dd:c4:63:e8:
                    b8:b0:53:35:f7:0f:3a:62:4b:e1:dd:44:b9:53:4f:
                    05:f9:d9:fe:44:b7:f1:af:7d:38:bb:ec:9c:c9:85:
                    fb:68:f5:0a:80:90:65:7d:91:ee:fa:d3:90:39:89:
                    31:1b:14:ad:c4:ee:9d:99:42:82:ca:0d:19:d4:8d:
                    63:73:4b:79:ba:08:33:56:0c:e6:cd:b5:53:ae:4c:
                    ac:bb:20:36:32:bd:7d:bd:11:8c:03:13:cb:a8:19:
                    0b:79:16:33:c4:12:6d:97:86:65:f1:6b:73:e8:d7:
                    97:d8:da:fb:a1:7f:df:27:31:6c:61:8b:1e:34:2e:
                    34:b6:b0:8d:f8:20:71:78:21:d1:2d:9b:fe:a1:bb:
                    89:86:43:a5:64:db:fa:1d:d0:e0:c8:0b:40:95:ee:
                    c0:49:a5:dc:6f:ca:75:2e:d2:b4:36:32:52:30:71:
                    06:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2F:EE:D6:63:64:71:70:68:5A:46:2C:7E:BC:B8:42:E8:36:E7:1F
            X509v3 Authority Key Identifier:
                keyid:BB:04:90:27:AE:D3:84:7E:FE:F3:E2:D2:7C:66:FE:9D:52:0E:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/3137302e3233312e37362e302f32322d3234203d3e203237383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:81:f7:72:f2:dc:9e:fa:88:60:95:53:5d:6b:8d:58:47:bb:
         63:19:3e:89:29:48:69:11:06:9a:6f:e0:8d:98:0b:77:86:a2:
         f1:de:96:89:00:55:47:94:f1:2d:32:2b:0e:ac:3a:b7:84:22:
         ab:6f:2f:63:f5:16:52:0f:2d:54:77:da:65:f6:25:ab:04:74:
         ae:56:bd:47:7d:6d:3d:58:f6:d0:c2:18:d3:0d:8b:d4:40:99:
         e9:f9:2a:32:12:ce:b9:4e:03:9e:84:c3:e6:fb:fa:0b:1f:7c:
         48:b1:ee:13:ee:82:04:77:02:49:d3:ac:0c:60:28:85:a6:7e:
         89:87:b4:8f:2c:25:07:39:33:87:17:3f:05:40:92:ad:44:01:
         09:b0:76:db:c6:e0:cd:7e:fc:ef:37:36:9c:0a:9c:80:e6:82:
         57:a4:ab:be:2e:f2:a9:7d:86:e7:e4:f2:61:83:1e:ef:b5:a0:
         3a:a7:11:e3:1d:dd:bf:77:5b:88:b4:2b:09:58:3f:b3:41:22:
         92:65:8c:a1:2e:76:61:b2:03:2a:92:9a:62:e9:ed:a8:6b:82:
         c6:54:6d:70:c4:3b:3d:7a:87:dd:25:4e:25:5e:75:67:fc:c6:
         dc:b1:90:2c:d8:89:09:dc:9b:66:cc:9f:43:62:88:0c:e9:79:
         d6:d6:31:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 12:17:56 2026 by rpki-client