This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3137302e3234362e3135362e302f32322d3234203d3e203532323633.roa
File:                     3137302e3234362e3135362e302f32322d3234203d3e203532323633.roa (raw, json)
Hash identifier:          zCIrkUPupVoyZbhGazHWVP6ofrQfyaZOJf67y9jg7T8=
Subject key identifier:   B5:A5:3C:A1:1F:C0:BF:76:40:58:A4:92:98:56:16:C5:D3:A4:D5:8D
Certificate issuer:       /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial:       6A417AB00EA86F22A2C895A34D5A59B0E17CE05D
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3137302e3234362e3135362e302f32322d3234203d3e203532323633.roa
Signing time:             Tue 06 Jan 2026 19:41:09 +0000
ROA not before:           Tue 06 Jan 2026 19:36:09 +0000
ROA not after:            Tue 05 Jan 2027 19:41:09 +0000
asID:                     52263
IP address blocks:        170.246.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 14:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:41:7a:b0:0e:a8:6f:22:a2:c8:95:a3:4d:5a:59:b0:e1:7c:e0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
        Validity
            Not Before: Jan  6 19:36:09 2026 GMT
            Not After : Jan  5 19:41:09 2027 GMT
        Subject: CN=B5A53CA11FC0BF764058A492985616C5D3A4D58D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5a:35:3b:92:93:a6:d8:a3:40:f1:29:c4:d3:
                    79:d2:8e:e7:42:00:7a:a8:55:8e:ff:45:f5:8d:33:
                    81:c7:72:84:f5:f7:1a:d0:8f:b9:32:c6:37:4c:65:
                    ea:7f:dc:85:68:ad:f4:37:98:7a:9d:f2:bc:c3:58:
                    a5:68:ac:49:ee:b5:9f:b2:6a:ac:30:6d:26:2e:bd:
                    61:d7:e4:b4:8e:aa:04:cc:de:cf:b4:7b:38:af:74:
                    0f:53:b6:c4:c7:ce:07:6c:e2:ec:54:e8:8b:4e:96:
                    e6:8b:14:9d:fd:ad:60:b5:74:4a:9b:68:37:1a:23:
                    6c:55:ea:fb:10:f3:e7:f9:6e:a5:83:06:16:97:68:
                    03:c8:a3:a1:8d:3b:e0:a7:01:76:d7:47:d8:5f:af:
                    20:b1:f0:06:9a:ff:41:8d:bb:5d:cd:33:0d:fb:f1:
                    32:d1:59:83:d8:6d:20:9d:24:05:c8:10:b4:bf:2b:
                    9c:8a:30:ff:76:96:bc:82:05:52:32:0e:8d:c2:e9:
                    97:c7:d5:a3:b9:b0:bb:95:d2:4d:aa:52:c8:c5:4f:
                    15:f2:b4:cd:e6:81:fc:cc:36:47:db:06:e4:c2:81:
                    b0:bc:3a:e4:1b:dc:82:37:77:fe:32:63:2a:cd:cc:
                    19:d8:1f:16:8c:9b:b2:2d:f1:75:ff:f8:e5:51:86:
                    77:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A5:3C:A1:1F:C0:BF:76:40:58:A4:92:98:56:16:C5:D3:A4:D5:8D
            X509v3 Authority Key Identifier:
                keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3137302e3234362e3135362e302f32322d3234203d3e203532323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:21:6d:78:0b:d6:06:2b:f5:9e:06:6e:42:4a:0d:ae:2f:70:
         b5:ea:6b:8c:bf:38:18:1a:24:cd:90:ea:fe:b7:33:7a:06:ce:
         51:bf:62:90:98:67:e6:d6:ac:ff:9a:5a:88:92:47:6b:95:de:
         6d:a3:25:66:1d:e5:82:b9:64:9e:a7:ac:f1:bd:b0:b8:33:a6:
         f7:c8:5f:db:f8:95:2b:28:74:cc:7f:43:89:dc:31:9e:ee:d9:
         84:90:12:87:8a:cb:ea:1e:45:43:c5:7e:48:11:ed:a1:fc:34:
         03:3d:8c:a5:64:bb:31:f0:79:9f:36:a4:b3:01:f6:b6:68:66:
         cf:a8:0f:9f:78:28:ae:d2:3a:8c:fb:52:91:8b:9b:a2:3c:ee:
         f0:01:1c:8e:aa:8a:64:d4:fe:36:5d:78:26:9e:bf:d1:01:8e:
         43:2b:47:ee:ee:db:7d:96:e0:ec:9d:87:a2:42:92:1a:c5:72:
         ed:dc:de:65:7e:8c:01:88:3c:fc:0c:67:49:dd:04:b8:25:57:
         4e:89:61:2e:02:03:e2:df:fd:89:ee:7b:69:91:b4:be:54:08:
         75:14:3c:88:d8:2a:66:80:1d:80:67:e4:87:59:82:a2:f3:8c:
         fa:ac:e2:4a:f1:33:5d:32:6c:ff:fe:e2:b3:89:fa:29:99:3c:
         a0:c5:08:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:23:13 2026 by rpki-client