This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3137302e3135302e35362e302f32322d3234203d3e203532323633.roa
File:                     3137302e3135302e35362e302f32322d3234203d3e203532323633.roa (raw, json)
Hash identifier:          TkLrwJy6zvSRcN39lPRxkkAe7Oww0L4syjqs76xeQYo=
Subject key identifier:   32:03:45:8B:7B:BA:64:8C:A3:69:5A:05:27:89:7E:14:43:EB:3E:DC
Certificate issuer:       /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial:       12E00AD0C0841261D91CB438C56BF5C48EAE76AA
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3137302e3135302e35362e302f32322d3234203d3e203532323633.roa
Signing time:             Tue 06 Jan 2026 19:41:08 +0000
ROA not before:           Tue 06 Jan 2026 19:36:08 +0000
ROA not after:            Tue 05 Jan 2027 19:41:08 +0000
asID:                     52263
IP address blocks:        170.150.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 14:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e0:0a:d0:c0:84:12:61:d9:1c:b4:38:c5:6b:f5:c4:8e:ae:76:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
        Validity
            Not Before: Jan  6 19:36:08 2026 GMT
            Not After : Jan  5 19:41:08 2027 GMT
        Subject: CN=3203458B7BBA648CA3695A0527897E1443EB3EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:59:24:f5:e7:06:21:a7:ed:31:99:95:24:69:
                    dc:81:fa:20:43:c7:64:0a:4a:ec:59:63:4e:b2:0d:
                    eb:a8:51:24:ed:f9:ed:04:da:45:7a:2e:e5:88:14:
                    00:72:42:76:ca:96:3c:f3:a6:79:c2:bf:a9:08:0d:
                    8d:cc:05:25:46:01:dc:4a:16:91:4f:23:61:e7:a5:
                    58:ce:5d:0c:37:78:53:7a:97:78:83:aa:0c:4b:1c:
                    ee:24:ac:a6:de:db:94:8d:28:c5:b7:5e:ce:91:91:
                    53:8d:10:62:59:7e:d8:c1:4c:02:38:35:6a:41:99:
                    c4:dd:b3:a9:72:6c:fa:32:c7:5e:65:19:4b:ab:14:
                    07:21:11:40:87:3f:98:0f:fa:63:87:cb:3d:7f:ed:
                    12:42:80:49:39:ee:1b:3e:a4:eb:ba:5a:46:54:fe:
                    6d:46:22:d5:8e:c1:0b:4c:83:d8:f5:d8:db:b1:47:
                    13:3b:72:8d:13:f4:15:dc:39:42:8f:b9:12:7f:e6:
                    73:95:24:93:0b:ee:f0:3e:71:0c:5d:bb:c4:b2:90:
                    8d:f5:cb:09:eb:1b:26:c0:4a:eb:56:1a:1c:76:cc:
                    4b:3a:f2:8c:24:73:08:43:e9:65:a1:d6:23:3b:21:
                    80:d7:00:36:ea:dd:78:8b:2a:e6:f3:98:e2:48:f3:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:03:45:8B:7B:BA:64:8C:A3:69:5A:05:27:89:7E:14:43:EB:3E:DC
            X509v3 Authority Key Identifier:
                keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3137302e3135302e35362e302f32322d3234203d3e203532323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:a8:22:22:0c:9b:8f:c6:48:78:ac:80:ff:af:2b:c9:31:3d:
         1d:10:71:61:d7:a8:9d:75:9f:21:64:ac:16:bb:e2:60:27:02:
         37:d4:77:f9:1c:7c:fd:16:9c:25:69:28:de:9a:05:e6:c3:fa:
         47:af:23:f3:1f:d8:22:2d:cd:d4:1c:d0:24:8b:b1:6c:f7:e5:
         f1:64:34:fc:2a:c0:b7:98:22:53:46:e0:b8:31:bf:2a:0f:23:
         fe:13:e2:0e:e0:99:9d:6f:f8:ac:51:9f:aa:4e:7a:9b:64:7f:
         0d:b3:87:ee:e5:44:b3:da:77:07:d9:24:26:1b:59:b7:ca:55:
         1b:1a:a1:2b:77:29:8b:73:53:c7:c7:f2:77:f4:ae:7c:e9:34:
         bc:35:36:d2:91:82:53:25:ba:59:ac:42:8f:a4:64:22:45:00:
         62:4a:3c:35:a5:96:24:d3:ae:cc:76:f9:b5:98:90:11:94:6d:
         34:8c:b8:d4:7d:58:08:cf:76:56:03:8f:08:94:d4:ca:de:51:
         c8:bd:f1:8f:8a:52:ad:2e:4f:a2:d1:d8:44:6f:e1:4c:d0:69:
         8b:48:31:0d:ff:ad:55:4c:62:2c:6f:36:ea:3d:24:37:2a:b7:
         8c:63:eb:90:09:5c:8d:f6:80:51:eb:3b:ba:cf:60:24:fc:bf:
         21:01:95:53
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEuAK0MCEEmHZHLQ4xWv1xI6udqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I0ODcxQUE3MDNGQTk4RjY2MzkzNUJGQzI0NENDMUI5
OUFEOEE0OTAeFw0yNjAxMDYxOTM2MDhaFw0yNzAxMDUxOTQxMDhaMDMxMTAvBgNV
BAMTKDMyMDM0NThCN0JCQTY0OENBMzY5NUEwNTI3ODk3RTE0NDNFQjNFREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOWST15wYhp+0xmZUkadyB+iBD
x2QKSuxZY06yDeuoUSTt+e0E2kV6LuWIFAByQnbKljzzpnnCv6kIDY3MBSVGAdxK
FpFPI2HnpVjOXQw3eFN6l3iDqgxLHO4krKbe25SNKMW3Xs6RkVONEGJZftjBTAI4
NWpBmcTds6lybPoyx15lGUurFAchEUCHP5gP+mOHyz1/7RJCgEk57hs+pOu6WkZU
/m1GItWOwQtMg9j12NuxRxM7co0T9BXcOUKPuRJ/5nOVJJML7vA+cQxdu8SykI31
ywnrGybASutWGhx2zEs68owkcwhD6WWh1iM7IYDXADbq3XiLKubzmOJI8yFlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUMgNFi3u6ZIyjaVoFJ4l+FEPrPtwwHwYDVR0j
BBgwFoAUy0hxqnA/qY9mOTW/wkTMG5mtikkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQ0REN0VGNEM4QzE2MEI1MzQwODAxQjc4MzlENkE4NjhF
NEREMzQ4Njc5M0FENjAzODM3NjU1MDQ0M0QwMUYyLzAvQ0I0ODcxQUE3MDNGQTk4
RjY2MzkzNUJGQzI0NENDMUI5OUFEOEE0OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjQ4NzFBQTcwM0ZBOThGNjYz
OTM1QkZDMjQ0Q0MxQjk5QUQ4QTQ5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUNERDdFRjRDOEMxNjBCNTM0MDgwMUI3ODM5RDZBODY4RTRERDM0ODY3
OTNBRDYwMzgzNzY1NTA0NDNEMDFGMi8wLzMxMzczMDJlMzEzNTMwMmUzNTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjMyMzYzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqqWODAN
BgkqhkiG9w0BAQsFAAOCAQEAeKgiIgybj8ZIeKyA/68ryTE9HRBxYdeonXWfIWSs
FrviYCcCN9R3+Rx8/RacJWko3poF5sP6R68j8x/YIi3N1BzQJIuxbPfl8WQ0/CrA
t5giU0bguDG/Kg8j/hPiDuCZnW/4rFGfqk56m2R/DbOH7uVEs9p3B9kkJhtZt8pV
GxqhK3cpi3NTx8fyd/SufOk0vDU20pGCUyW6WaxCj6RkIkUAYko8NaWWJNOuzHb5
tZiQEZRtNIy41H1YCM92VgOPCJTUyt5RyL3xj4pSrS5PotHYRG/hTNBpi0gxDf+t
VUxiLG826j0kNyq3jGPrkAlcjfaAUes7us9gJPy/IQGVUw==
-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:39 2026 by rpki-client