This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e20323633373137.roa
File:                     3137302e38342e3137322e302f32322d3234203d3e20323633373137.roa (raw, json)
Hash identifier:          X9ltBbG/vqJdmhKRlHHz28RR4F+UgU0KSqBZxdYks8s=
Subject key identifier:   26:2A:82:F0:19:BF:8D:6A:03:E3:E7:9C:99:78:95:05:B5:FE:13:FB
Certificate issuer:       /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial:       52F87313F6F30F6DE8994F6E2FC5664D90D1C1DD
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e20323633373137.roa
Signing time:             Tue 06 Jan 2026 19:38:35 +0000
ROA not before:           Tue 06 Jan 2026 19:33:35 +0000
ROA not after:            Tue 05 Jan 2027 19:38:35 +0000
asID:                     263717
IP address blocks:        170.84.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f8:73:13:f6:f3:0f:6d:e8:99:4f:6e:2f:c5:66:4d:90:d1:c1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
        Validity
            Not Before: Jan  6 19:33:35 2026 GMT
            Not After : Jan  5 19:38:35 2027 GMT
        Subject: CN=262A82F019BF8D6A03E3E79C99789505B5FE13FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:19:cc:d6:5b:a8:cc:6c:ae:fb:9a:ff:6a:
                    a3:6d:95:b5:d4:85:74:72:44:35:15:39:17:a8:9d:
                    60:de:b5:5b:84:e0:04:9e:92:18:f1:bb:5f:e2:c0:
                    34:f4:72:66:7d:64:74:2a:20:65:a5:37:b8:02:ab:
                    93:d0:09:d1:0a:7b:0a:b8:16:7d:98:45:e3:37:11:
                    0e:6b:c6:c0:33:d1:41:95:fb:04:6f:3a:6d:a6:19:
                    ef:50:5e:cd:7f:71:d5:b8:2a:13:1c:ff:ac:27:85:
                    a5:b6:af:87:56:89:58:58:28:c7:36:f6:78:44:8c:
                    b1:50:49:6c:ae:95:9f:27:5c:c5:0e:a3:c6:b9:42:
                    ff:03:83:ef:fb:89:f7:a0:f6:54:f0:ae:4a:35:9a:
                    9c:44:20:65:1d:48:a1:b3:9f:84:60:0a:a1:63:2b:
                    c6:06:90:43:8e:f3:1b:8c:26:72:03:b4:8c:7f:2d:
                    7c:76:b4:a7:98:2f:96:2e:75:e1:f0:6e:24:f8:01:
                    6b:28:89:57:70:9f:c9:4d:df:04:db:82:9e:a3:f8:
                    93:f7:f2:9e:00:cd:03:ef:85:95:86:cf:20:d4:69:
                    27:7c:37:69:f9:62:09:4f:7c:d1:7b:1f:a7:1c:98:
                    9a:c4:c0:46:ba:35:86:42:3c:a1:77:07:e8:50:b1:
                    72:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2A:82:F0:19:BF:8D:6A:03:E3:E7:9C:99:78:95:05:B5:FE:13:FB
            X509v3 Authority Key Identifier:
                keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e20323633373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:7b:28:f2:a4:ff:f4:83:12:54:a3:e1:52:3b:0c:f9:4e:e7:
         a9:9b:ca:8e:28:7d:e0:e8:20:b4:7f:0a:63:b7:c5:ed:37:ab:
         2a:ff:7d:76:0d:a5:d6:d5:53:e5:37:4b:e9:c0:46:a3:d4:4f:
         51:03:da:3d:ad:b4:16:9f:12:b8:ba:19:b3:b7:ae:dd:5d:93:
         82:96:41:9b:25:1a:6b:15:bd:ae:e8:cd:d3:99:e8:a2:17:65:
         d3:df:0a:9e:1c:16:07:48:ee:8d:f3:76:c7:ce:25:f5:a3:fa:
         40:6a:35:06:09:a3:f0:a3:36:15:d8:00:52:31:7b:df:58:5d:
         e4:44:38:2d:f1:50:ee:ea:9d:c2:50:0c:48:ac:37:f5:2b:9c:
         d0:a1:38:8d:86:d7:0c:f3:db:42:e1:83:42:4e:61:2c:70:35:
         d8:ba:3f:83:0d:bd:79:54:fc:ea:98:93:c2:b8:c1:6e:54:6d:
         60:c8:02:41:d8:77:97:e0:5a:19:10:bb:b8:aa:68:bb:29:0f:
         e9:2b:5b:84:41:8d:55:be:1a:bb:89:9f:93:91:dd:e8:7b:07:
         9c:65:47:3a:84:81:17:1b:96:21:a9:0b:01:10:a3:78:e4:f9:
         e9:f9:cf:b6:64:33:18:1f:d4:f6:20:ec:11:8b:92:5d:03:75:
         0c:09:8d:28
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUvhzE/bzD23omU9uL8VmTZDRwd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlDQjIxNjUwOENFRjM4Q0IyQTY4RTQ1RUJGNEQ0MTg1
MzFFMzc5OTAeFw0yNjAxMDYxOTMzMzVaFw0yNzAxMDUxOTM4MzVaMDMxMTAvBgNV
BAMTKDI2MkE4MkYwMTlCRjhENkEwM0UzRTc5Qzk5Nzg5NTA1QjVGRTEzRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTUBnM1luozGyu+5r/aqNtlbXU
hXRyRDUVOReonWDetVuE4ASekhjxu1/iwDT0cmZ9ZHQqIGWlN7gCq5PQCdEKewq4
Fn2YReM3EQ5rxsAz0UGV+wRvOm2mGe9QXs1/cdW4KhMc/6wnhaW2r4dWiVhYKMc2
9nhEjLFQSWyulZ8nXMUOo8a5Qv8Dg+/7ifeg9lTwrko1mpxEIGUdSKGzn4RgCqFj
K8YGkEOO8xuMJnIDtIx/LXx2tKeYL5YudeHwbiT4AWsoiVdwn8lN3wTbgp6j+JP3
8p4AzQPvhZWGzyDUaSd8N2n5YglPfNF7H6ccmJrEwEa6NYZCPKF3B+hQsXIFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUJiqC8Bm/jWoD4+ecmXiVBbX+E/swHwYDVR0j
BBgwFoAUicshZQjO84yypo5F6/TUGFMeN5kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMjYzNjk1OTAyNkQ1QTY4N0Q2RjA2OEJFQ0E1Q0FCRTVF
OEU5QUI2MEEwOEYzMEVBQzNGMzI0OUY0MzcyQjdELzAvODlDQjIxNjUwOENFRjM4
Q0IyQTY4RTQ1RUJGNEQ0MTg1MzFFMzc5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OUNCMjE2NTA4Q0VGMzhDQjJB
NjhFNDVFQkY0RDQxODUzMUUzNzk5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzI2MzY5NTkwMjZENUE2ODdENkYwNjhCRUNBNUNBQkU1RThFOUFCNjBB
MDhGMzBFQUMzRjMyNDlGNDM3MkI3RC8wLzMxMzczMDJlMzgzNDJlMzEzNzMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzczMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqlSs
MA0GCSqGSIb3DQEBCwUAA4IBAQCweyjypP/0gxJUo+FSOwz5Tuepm8qOKH3g6CC0
fwpjt8XtN6sq/312DaXW1VPlN0vpwEaj1E9RA9o9rbQWnxK4uhmzt67dXZOClkGb
JRprFb2u6M3TmeiiF2XT3wqeHBYHSO6N83bHziX1o/pAajUGCaPwozYV2ABSMXvf
WF3kRDgt8VDu6p3CUAxIrDf1K5zQoTiNhtcM89tC4YNCTmEscDXYuj+DDb15VPzq
mJPCuMFuVG1gyAJB2HeX4FoZELu4qmi7KQ/pK1uEQY1Vvhq7iZ+Tkd3oewecZUc6
hIEXG5YhqQsBEKN45Pnp+c+2ZDMYH9T2IOwRi5JdA3UMCY0o
-----END CERTIFICATE-----
Generated at Tue Jan 13 06:43:43 2026 by rpki-client