This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3137302e3235342e3233322e302f32322d3234203d3e203237383433.roa
File:                     3137302e3235342e3233322e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier:          fgGI9X6Unfmm0D8gRQrlFCnLcemVPdvkLt2X++vKP+I=
Subject key identifier:   92:A0:F9:CB:6F:07:5C:B2:2B:A0:0D:77:08:B1:01:B0:B7:B2:37:9E
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       165924C367000028B751C1D862DF4C8D484C0439
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3137302e3235342e3233322e302f32322d3234203d3e203237383433.roa
Signing time:             Tue 06 Jan 2026 19:03:46 +0000
ROA not before:           Tue 06 Jan 2026 18:58:46 +0000
ROA not after:            Tue 05 Jan 2027 19:03:46 +0000
asID:                     27843
IP address blocks:        170.254.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 12:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:59:24:c3:67:00:00:28:b7:51:c1:d8:62:df:4c:8d:48:4c:04:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Jan  6 18:58:46 2026 GMT
            Not After : Jan  5 19:03:46 2027 GMT
        Subject: CN=92A0F9CB6F075CB22BA00D7708B101B0B7B2379E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8a:81:8b:b8:5b:43:d3:9e:a9:3f:dd:53:6a:
                    3e:f8:cf:72:0b:b2:11:b3:e7:ea:71:b8:19:13:1a:
                    43:cd:d6:25:3c:76:4c:af:31:74:e4:a4:56:67:d8:
                    9a:44:0f:18:ad:88:4e:4c:a3:87:64:1b:89:d1:93:
                    26:86:21:d1:af:47:a3:2d:58:ab:bb:7b:4b:94:6b:
                    37:fa:43:97:a5:e2:e3:20:f6:1f:95:57:ea:87:80:
                    d2:60:85:5a:8f:54:ff:25:b4:87:a0:22:6d:b7:8c:
                    f0:05:dc:10:a5:b9:74:91:dc:10:c4:60:d4:10:55:
                    fc:97:44:05:e3:28:2a:f4:48:fe:e5:0d:46:fa:62:
                    42:37:20:28:5c:cf:71:11:56:15:fa:ec:c3:97:9d:
                    05:17:0a:e3:e2:6f:da:cd:9f:a9:78:dc:d5:bf:01:
                    4d:c6:92:09:09:1d:27:c1:66:79:d2:7e:7d:7d:a0:
                    9f:d3:3f:7e:0c:9f:62:99:fa:64:22:29:81:01:18:
                    39:a1:cd:a7:db:31:7d:cd:68:c9:9c:01:33:e5:ad:
                    54:32:41:9e:4d:6c:27:a3:ef:ee:5d:6a:ba:dd:dd:
                    55:03:b6:74:b8:a0:10:de:03:70:82:4b:28:9a:70:
                    f5:de:72:9d:af:41:b1:5f:00:89:27:ab:14:7b:84:
                    06:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A0:F9:CB:6F:07:5C:B2:2B:A0:0D:77:08:B1:01:B0:B7:B2:37:9E
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3137302e3235342e3233322e302f32322d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:88:1f:46:12:58:d8:83:03:e7:32:f6:ac:43:30:b6:82:54:
         71:c6:b9:47:8f:d3:d3:a8:90:b1:a2:4c:52:31:40:ef:b5:ac:
         74:94:79:04:30:1d:b2:dc:3e:96:ad:96:00:da:2c:ba:5d:b5:
         07:8a:d5:9f:b0:1b:79:ce:e6:58:06:3a:bb:52:26:4b:17:42:
         9e:6c:5a:ae:34:dc:aa:99:76:b8:61:15:c5:fb:78:4b:45:ee:
         7d:6d:ec:78:e6:c9:98:c6:a8:2e:0a:f4:41:b7:ee:d2:73:60:
         82:aa:38:1c:b5:7d:52:49:28:46:6c:fa:66:0d:9e:9c:17:21:
         8d:18:83:c8:4e:b3:6b:34:85:82:fa:14:e3:9d:1d:76:06:d0:
         e7:a3:6b:30:c5:35:bc:09:60:db:cc:a5:7c:0f:b8:db:c6:e7:
         45:06:e4:48:00:20:87:2a:bc:9e:bc:19:d8:37:94:42:74:53:
         06:52:d5:e5:86:59:73:3b:6f:e4:5a:bc:9f:88:dc:de:e7:80:
         8a:fd:14:0a:31:95:6c:25:2a:81:e3:6e:dc:80:1c:26:19:3f:
         52:6b:42:bd:f7:c1:67:9b:0f:00:7e:03:0e:37:fb:13:9d:34:
         ee:08:35:bb:13:c6:68:f6:3d:32:1b:b4:a0:ad:43:d5:75:49:
         cb:9b:30:91
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFlkkw2cAACi3UcHYYt9MjUhMBDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYwOEQzOEQ0NTcxQzA5QTgzQjQ1QUNGRDEwQUVCNzgy
NkNFOEY4NDAeFw0yNjAxMDYxODU4NDZaFw0yNzAxMDUxOTAzNDZaMDMxMTAvBgNV
BAMTKDkyQTBGOUNCNkYwNzVDQjIyQkEwMEQ3NzA4QjEwMUIwQjdCMjM3OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdioGLuFtD056pP91Taj74z3IL
shGz5+pxuBkTGkPN1iU8dkyvMXTkpFZn2JpEDxitiE5Mo4dkG4nRkyaGIdGvR6Mt
WKu7e0uUazf6Q5el4uMg9h+VV+qHgNJghVqPVP8ltIegIm23jPAF3BCluXSR3BDE
YNQQVfyXRAXjKCr0SP7lDUb6YkI3IChcz3ERVhX67MOXnQUXCuPib9rNn6l43NW/
AU3GkgkJHSfBZnnSfn19oJ/TP34Mn2KZ+mQiKYEBGDmhzafbMX3NaMmcATPlrVQy
QZ5NbCej7+5darrd3VUDtnS4oBDeA3CCSyiacPXecp2vQbFfAIknqxR7hAbjAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUkqD5y28HXLIroA13CLEBsLeyN54wHwYDVR0j
BBgwFoAUnwjTjUVxwJqDtFrP0QrreCbOj4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMTZFOEYxMDMxNDZCMjg1MDMzNTAyM0E3MEE2RDM5ODc0
NzY2MzY4REJEQTVGMDQ4RDU1OTcyQjk4RkQ4MzY3LzAvOUYwOEQzOEQ0NTcxQzA5
QTgzQjQ1QUNGRDEwQUVCNzgyNkNFOEY4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjA4RDM4RDQ1NzFDMDlBODNC
NDVBQ0ZEMTBBRUI3ODI2Q0U4Rjg0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE2RThGMTAzMTQ2QjI4NTAzMzUwMjNBNzBBNkQzOTg3NDc2NjM2OERC
REE1RjA0OEQ1NTk3MkI5OEZEODM2Ny8wLzMxMzczMDJlMzIzNTM0MmUzMjMzMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzgzNDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqv7o
MA0GCSqGSIb3DQEBCwUAA4IBAQBHiB9GEljYgwPnMvasQzC2glRxxrlHj9PTqJCx
okxSMUDvtax0lHkEMB2y3D6WrZYA2iy6XbUHitWfsBt5zuZYBjq7UiZLF0KebFqu
NNyqmXa4YRXF+3hLRe59bex45smYxqguCvRBt+7Sc2CCqjgctX1SSShGbPpmDZ6c
FyGNGIPITrNrNIWC+hTjnR12BtDno2swxTW8CWDbzKV8D7jbxudFBuRIACCHKrye
vBnYN5RCdFMGUtXlhllzO2/kWryfiNze54CK/RQKMZVsJSqB427cgBwmGT9Sa0K9
98Fnmw8AfgMON/sTnTTuCDW7E8Zo9j0yG7SgrUPVdUnLmzCR
-----END CERTIFICATE-----
Generated at Tue Jan 13 08:10:42 2026 by rpki-client