This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/3137302e38302e3136382e302f32322d3234203d3e203532343434.roa
File:                     3137302e38302e3136382e302f32322d3234203d3e203532343434.roa (raw, json)
Hash identifier:          Tk/5p7N5ZHz72+6tND3NmTrW5LR2yD3ainV70aeprsA=
Subject key identifier:   DF:D8:2A:5C:40:FF:E1:52:F8:B8:5F:9C:01:75:FE:BA:F9:FD:EA:11
Certificate issuer:       /CN=B33031ED49C5CD9D439BD38100D10BFD779C4683
Certificate serial:       4F237A489434C663216202C275E9DE64102FB471
Authority key identifier: B3:30:31:ED:49:C5:CD:9D:43:9B:D3:81:00:D1:0B:FD:77:9C:46:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/3137302e38302e3136382e302f32322d3234203d3e203532343434.roa
Signing time:             Tue 06 Jan 2026 19:43:03 +0000
ROA not before:           Tue 06 Jan 2026 19:38:03 +0000
ROA not after:            Tue 05 Jan 2027 19:43:03 +0000
asID:                     52444
IP address blocks:        170.80.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:23:7a:48:94:34:c6:63:21:62:02:c2:75:e9:de:64:10:2f:b4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B33031ED49C5CD9D439BD38100D10BFD779C4683
        Validity
            Not Before: Jan  6 19:38:03 2026 GMT
            Not After : Jan  5 19:43:03 2027 GMT
        Subject: CN=DFD82A5C40FFE152F8B85F9C0175FEBAF9FDEA11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:9f:a2:0d:dd:d9:7e:7b:a7:1c:2a:62:ab:
                    4c:16:51:a8:7e:9b:3b:04:54:2f:9f:03:13:82:a8:
                    19:d9:5e:79:1b:72:26:80:db:40:b3:85:f2:18:55:
                    5a:53:0b:07:c1:22:f9:5c:90:36:2c:02:41:6b:66:
                    ba:88:66:b4:4d:86:cb:b6:52:86:94:bf:c0:e4:6b:
                    a8:2d:02:b8:4c:56:4a:f1:e7:40:d2:a0:1d:7d:d0:
                    a1:5c:f5:67:66:5d:17:52:be:45:6a:73:e5:67:1b:
                    10:5a:a1:fb:53:f8:59:99:94:b1:32:a5:2a:c0:6e:
                    28:d5:0f:98:d4:51:30:13:17:80:2e:de:7b:6e:b3:
                    1e:2b:0d:60:35:aa:1a:d1:a1:a1:08:2b:55:a7:c1:
                    8e:ba:ae:9f:6a:fb:83:eb:70:4f:06:d7:80:96:62:
                    85:ea:43:a4:b9:7e:4c:ca:95:83:73:3e:b9:15:a1:
                    a0:4c:fa:a1:b4:96:68:94:e2:6b:c4:d2:1b:ca:e7:
                    95:53:25:cf:3b:d0:ae:f9:2a:5f:a7:6a:e7:39:b7:
                    e5:92:ad:bd:d4:f7:c6:a7:63:4e:d8:67:0b:0c:cf:
                    01:4a:a6:c8:d4:de:b4:30:12:28:20:f4:61:a9:de:
                    64:c9:94:e5:bf:b6:7a:5c:52:42:d2:90:02:6c:13:
                    42:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D8:2A:5C:40:FF:E1:52:F8:B8:5F:9C:01:75:FE:BA:F9:FD:EA:11
            X509v3 Authority Key Identifier:
                keyid:B3:30:31:ED:49:C5:CD:9D:43:9B:D3:81:00:D1:0B:FD:77:9C:46:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B33031ED49C5CD9D439BD38100D10BFD779C4683.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C3DCD134D6C2BBC15295709504834DBAD7AC33D95AEC8228564D09869C17E2C/0/3137302e38302e3136382e302f32322d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:32:37:11:4b:bb:c8:b9:71:78:70:ef:0a:91:8c:30:63:40:
         ba:7e:32:0d:72:83:84:14:1d:a3:b9:85:7a:66:d0:c1:b3:89:
         c8:65:a6:a5:61:cc:cd:08:6f:37:d0:95:68:48:c6:8a:cd:65:
         b6:10:5d:da:d8:5c:ff:e2:f7:08:5b:6c:44:2b:fb:7c:d1:5b:
         5f:16:e2:05:b5:2a:7c:af:99:61:cb:7b:1c:e1:bf:e2:d7:b8:
         66:b3:86:17:50:95:31:f0:51:ce:a3:c7:2d:4a:5b:1a:2a:3e:
         31:f3:db:70:5c:96:91:0d:1a:3c:b7:4e:20:d2:fa:3d:39:7b:
         92:d3:97:e3:6b:3a:a4:c9:05:27:6c:e4:1c:87:c7:a9:9f:09:
         e8:76:d6:f5:57:b5:05:43:ae:0a:1f:27:5e:a9:11:f8:fa:e7:
         91:54:2f:0e:00:5c:15:7b:ba:d3:48:5a:84:e0:02:ed:6e:d4:
         71:d0:58:b2:19:0e:9d:66:e5:1e:87:d9:72:04:39:cf:a1:20:
         93:d1:7b:51:d0:02:0e:b4:dc:05:a6:21:51:35:cc:3f:f0:4d:
         7c:8b:b5:e5:81:20:9e:21:0d:ef:50:2a:63:da:c0:9c:b3:0c:
         c8:f8:c7:e8:01:1e:fb:c4:f1:3d:c0:9f:dd:d5:30:69:71:ee:
         0a:d8:f9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:42:23 2026 by rpki-client