This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e32382e302f32322d3234203d3e20323637363939.roa
File:                     3137302e3235342e32382e302f32322d3234203d3e20323637363939.roa (raw, json)
Hash identifier:          HJO4QQC99z7t692ngX70Go7XGLlqCOim9j0aiXC+iSQ=
Subject key identifier:   F2:2B:A9:4B:57:C0:26:44:88:9D:7C:82:DB:08:54:98:1D:31:1E:73
Certificate issuer:       /CN=DF4F03C5770C7BA39912813367B5E868005CCD99
Certificate serial:       51D613AF8378908AD3E715211ABC45143133A76F
Authority key identifier: DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e32382e302f32322d3234203d3e20323637363939.roa
Signing time:             Tue 06 Jan 2026 20:55:44 +0000
ROA not before:           Tue 06 Jan 2026 20:50:44 +0000
ROA not after:            Tue 05 Jan 2027 20:55:44 +0000
asID:                     267699
IP address blocks:        170.254.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 17:35:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d6:13:af:83:78:90:8a:d3:e7:15:21:1a:bc:45:14:31:33:a7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF4F03C5770C7BA39912813367B5E868005CCD99
        Validity
            Not Before: Jan  6 20:50:44 2026 GMT
            Not After : Jan  5 20:55:44 2027 GMT
        Subject: CN=F22BA94B57C02644889D7C82DB0854981D311E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0e:15:53:13:8c:f9:ed:50:19:c0:a5:44:3e:
                    e3:3f:bc:1a:89:89:25:cd:1d:e0:3f:cf:a6:b4:97:
                    3e:49:89:5d:17:f8:31:95:cc:73:51:4b:02:9c:f4:
                    2d:03:53:31:6e:bd:47:b2:ef:ad:06:46:c7:d6:c0:
                    cb:13:bb:7c:ed:b1:e6:e6:44:fb:0e:2e:df:cf:b5:
                    98:56:2b:0c:e6:e9:39:8c:9f:72:07:66:31:8e:69:
                    d1:f3:ba:f5:3c:f0:48:16:d2:cc:94:4d:1c:b8:b5:
                    ec:22:fe:da:af:a6:36:fa:89:28:6a:7f:91:72:d8:
                    14:f2:78:9c:b8:e9:9b:a7:29:0d:8a:b6:7b:85:46:
                    1f:9d:18:20:91:78:50:23:75:3f:3e:6e:47:55:40:
                    de:d6:e6:32:d6:d0:7a:f8:7a:4d:77:e5:c3:95:f2:
                    51:81:3a:08:ec:b3:ed:87:cc:99:11:dc:89:e1:f5:
                    ab:43:c9:cf:8e:a1:6e:69:91:b4:4d:ca:62:33:ee:
                    1e:21:2a:f9:87:7b:d7:de:31:59:13:40:33:25:33:
                    32:85:84:c4:43:49:75:5e:85:b1:fb:f0:7e:20:e5:
                    fe:b2:4b:04:53:f6:fa:c8:b2:02:d6:e7:20:73:e0:
                    d1:a2:2d:aa:28:f2:af:1d:00:2b:26:5c:b9:f3:e0:
                    a1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2B:A9:4B:57:C0:26:44:88:9D:7C:82:DB:08:54:98:1D:31:1E:73
            X509v3 Authority Key Identifier:
                keyid:DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e32382e302f32322d3234203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:28:01:ce:96:27:a3:32:60:04:fd:fb:e9:03:af:f9:11:e7:
         20:e6:24:69:29:e1:8e:59:29:b0:4e:5a:25:7c:ff:9b:b8:9f:
         b6:6f:11:da:f4:72:2b:e4:93:54:f8:f2:50:b6:87:c3:6b:7f:
         a1:30:a5:0c:b7:3b:4f:df:2f:51:f8:33:66:9c:f8:23:ab:65:
         5e:bb:10:6c:96:a6:de:f6:2a:8b:81:e5:56:2d:eb:22:0c:fd:
         ce:29:c3:a7:b6:d6:a1:61:8b:14:22:2d:f9:ce:b0:24:d9:29:
         65:80:a2:ad:fb:76:83:8a:84:06:34:18:61:bd:1b:2d:20:c5:
         f6:07:af:c1:8e:81:c4:fa:86:e1:79:15:c1:70:03:f6:e8:a1:
         1c:bf:24:8c:09:b0:d0:85:bf:cc:dd:a9:63:ed:91:0b:b0:a5:
         3a:c0:2c:74:90:93:5c:14:64:67:00:54:0a:81:fe:98:8b:45:
         01:c7:02:e3:4f:2b:bb:c8:29:f1:40:e8:8a:38:26:ab:4a:96:
         3a:2b:a5:45:64:75:9b:fc:5c:75:71:ac:61:13:c4:f8:e4:b3:
         af:da:a9:33:52:5a:73:21:7d:c6:3d:68:61:71:17:11:04:8e:
         b2:25:fb:25:7e:55:9c:a1:f0:67:6f:49:af:dc:43:af:87:03:
         a7:64:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:33:34 2026 by rpki-client