This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e39362e302f32312d3234203d3e203532343432.roa
File:                     3137302e3231302e39362e302f32312d3234203d3e203532343432.roa (raw, json)
Hash identifier:          emKY9NpDcQAXL3JrObSj1rVdvnTO9RvfytANPvljQ/0=
Subject key identifier:   7E:76:2B:A1:F6:9B:83:F0:B4:E3:44:21:55:15:37:E4:59:12:18:9B
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       B0C4649B2C6B140EFDE1287802CAF0596A51A8
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e39362e302f32312d3234203d3e203532343432.roa
Signing time:             Tue 06 Jan 2026 19:22:08 +0000
ROA not before:           Tue 06 Jan 2026 19:17:08 +0000
ROA not after:            Tue 05 Jan 2027 19:22:08 +0000
asID:                     52442
IP address blocks:        170.210.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 07:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b0:c4:64:9b:2c:6b:14:0e:fd:e1:28:78:02:ca:f0:59:6a:51:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Jan  6 19:17:08 2026 GMT
            Not After : Jan  5 19:22:08 2027 GMT
        Subject: CN=7E762BA1F69B83F0B4E34421551537E45912189B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a9:40:e8:58:91:de:a2:58:a9:31:50:9e:07:
                    21:2d:d5:7e:6a:6a:88:57:88:7e:64:34:a3:2f:2c:
                    02:1f:5c:c0:2b:e2:e6:76:81:61:ea:c4:93:80:97:
                    83:79:a9:ae:9c:dd:88:7c:b6:37:48:a5:94:9b:7c:
                    6f:fe:f3:05:b8:77:62:42:76:8a:fe:6f:62:67:ba:
                    9a:6a:75:06:9f:0b:cc:7c:97:d1:5b:4a:79:70:b4:
                    6b:73:14:2f:a0:d5:6b:e5:4e:62:82:d2:47:a9:63:
                    19:3c:6e:64:ed:29:80:16:6d:dd:e4:fa:ae:a6:f4:
                    bb:f5:9a:e8:84:8f:c9:06:4a:14:5e:53:82:3e:c2:
                    85:64:8b:2d:57:ac:e6:eb:6f:77:fd:32:be:b2:f3:
                    b8:43:56:2c:c9:97:d2:34:5f:7c:e3:69:6a:58:ea:
                    90:aa:15:22:62:59:b8:94:f4:ef:36:1d:5f:2b:3d:
                    c5:46:83:b1:6c:7f:28:f6:a8:af:48:8e:1d:8c:3a:
                    70:a6:0d:4f:ed:ea:cd:9d:f2:48:f4:e1:67:0a:4e:
                    a9:27:50:36:0d:50:45:78:f5:79:4f:2a:6d:5f:20:
                    5f:43:6e:f3:26:8b:c8:fe:03:1f:e6:f0:88:03:9e:
                    46:1a:23:16:5c:b8:b7:a5:35:64:fc:9f:75:aa:e5:
                    b7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:76:2B:A1:F6:9B:83:F0:B4:E3:44:21:55:15:37:E4:59:12:18:9B
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e39362e302f32312d3234203d3e203532343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:16:69:28:99:e7:16:7a:e3:3a:2b:b8:f7:de:fd:3b:08:08:
         3e:6b:f8:61:84:44:c3:bc:38:e9:20:95:49:19:25:25:77:cd:
         81:f9:fe:a4:b7:50:04:a5:ba:09:4b:8e:4a:9f:ef:6d:5c:65:
         41:00:c3:6b:63:5d:33:cd:b9:87:e8:4e:08:9d:c5:d2:25:97:
         50:b6:31:9d:2b:6d:a0:89:a5:d9:4b:9c:e7:e5:8a:05:36:00:
         f2:79:94:27:ca:cb:4e:cd:7c:a2:83:0b:d6:20:1f:40:98:dd:
         7a:6e:cb:bb:e4:3a:92:ef:99:18:53:15:f9:8b:e9:71:6f:4a:
         d3:f9:85:aa:f0:7a:70:48:a7:1c:df:99:6f:72:4a:e6:3f:53:
         4b:11:b1:8e:4f:d9:2d:f7:85:a6:81:06:ac:69:70:d8:9a:42:
         a7:da:64:9e:ef:39:41:94:80:21:c1:d6:a2:0e:97:76:9e:ee:
         ca:9a:57:48:12:e9:62:b8:42:ed:99:47:b4:ce:a9:2e:fc:b3:
         00:86:d0:fc:cf:14:e5:7c:1e:37:f9:89:86:ab:02:a5:a7:e3:
         c5:13:c9:a0:c4:dc:f7:3d:cb:0e:0c:45:70:b7:cd:df:66:d5:
         cc:b1:eb:86:08:6d:8e:82:3c:5f:00:cd:94:5a:03:a6:ae:7e:
         cf:64:e2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:03:16 2026 by rpki-client