This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/3137302e3233312e35322e302f32322d3234203d3e20323632323632.roa
File:                     3137302e3233312e35322e302f32322d3234203d3e20323632323632.roa (raw, json)
Hash identifier:          YRH2C9Hn8damEbPNcipgb7756hDxVbz+tNK0+uhGURY=
Subject key identifier:   2A:0C:3A:68:97:D1:E8:A4:4F:7F:0A:97:20:61:8A:20:43:22:B3:F2
Certificate issuer:       /CN=810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56
Certificate serial:       38B564FB803C26D16C5B3706F640CBD4B149F777
Authority key identifier: 81:0A:CF:84:85:1B:AE:45:EB:A4:09:3A:F8:E0:EB:E4:CB:3B:7D:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/3137302e3233312e35322e302f32322d3234203d3e20323632323632.roa
Signing time:             Tue 06 Jan 2026 19:27:58 +0000
ROA not before:           Tue 06 Jan 2026 19:22:58 +0000
ROA not after:            Tue 05 Jan 2027 19:27:58 +0000
asID:                     262262
IP address blocks:        170.231.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b5:64:fb:80:3c:26:d1:6c:5b:37:06:f6:40:cb:d4:b1:49:f7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56
        Validity
            Not Before: Jan  6 19:22:58 2026 GMT
            Not After : Jan  5 19:27:58 2027 GMT
        Subject: CN=2A0C3A6897D1E8A44F7F0A9720618A204322B3F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:df:fe:dd:ad:b3:15:35:c4:44:4f:eb:0a:fe:
                    3f:66:76:20:8c:49:8b:10:b5:80:ed:af:7f:d6:2e:
                    b9:9f:3a:0e:d2:81:44:df:c1:f9:02:65:1c:d9:6c:
                    e0:2f:23:ee:2c:1e:71:d1:b4:07:ff:54:6e:28:92:
                    5b:4d:31:69:de:4f:15:14:86:53:28:3e:f8:d6:70:
                    8a:71:b9:fd:9c:83:5f:f2:d5:c1:24:9f:f1:82:25:
                    11:a1:f5:28:ff:4d:02:01:3b:c6:a6:00:34:37:07:
                    68:64:06:e6:b1:81:e3:97:08:74:d5:76:e4:ae:10:
                    90:8d:82:f6:6b:e6:0a:d2:f6:1b:64:af:3a:9b:f0:
                    49:6f:a3:d9:a3:92:eb:59:ef:5a:5c:3f:2e:c8:04:
                    69:81:d4:56:8c:90:48:34:c1:90:80:db:7f:f6:cc:
                    37:60:d2:e1:e8:7c:b8:e8:82:bb:c4:07:91:0b:ba:
                    84:a2:95:d3:30:ff:44:04:61:6b:88:6c:79:43:2c:
                    12:06:87:25:ea:83:2d:a7:da:96:32:6a:93:d9:98:
                    97:9a:d7:f5:2a:48:05:c5:d0:ec:5e:e2:6e:9e:d4:
                    27:68:11:03:b3:10:7e:65:3d:64:12:6b:e2:67:a8:
                    80:41:cd:76:4f:2e:d3:44:f0:04:dc:2c:fb:46:48:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0C:3A:68:97:D1:E8:A4:4F:7F:0A:97:20:61:8A:20:43:22:B3:F2
            X509v3 Authority Key Identifier:
                keyid:81:0A:CF:84:85:1B:AE:45:EB:A4:09:3A:F8:E0:EB:E4:CB:3B:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/3137302e3233312e35322e302f32322d3234203d3e20323632323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:e8:73:eb:6b:09:f4:73:ad:2b:94:47:cc:da:d4:2a:3a:d2:
         c1:b5:29:72:21:7b:05:dc:cb:86:f9:a5:0d:30:31:f7:bd:71:
         96:43:7f:cb:50:a9:1e:d5:57:1d:8f:25:02:05:7e:55:80:06:
         b7:8b:de:ff:06:01:41:b7:f3:9a:dc:0e:62:09:bc:01:b8:10:
         aa:a4:a9:c0:4e:13:54:c7:16:fc:b8:fc:54:ea:9d:50:a5:56:
         4e:6d:64:73:ef:07:65:80:56:99:f3:38:69:41:65:43:dd:0f:
         58:ff:ea:1f:32:35:86:ba:92:93:71:2c:8d:b6:08:db:8b:2f:
         39:6a:10:f0:6f:31:a3:84:73:ad:cb:c2:88:c0:9f:8b:f5:af:
         75:0d:ec:fd:0c:57:83:0e:eb:7a:2d:61:e1:47:1b:8a:b4:30:
         4c:ec:8e:8b:15:97:af:5a:6e:ef:9e:62:a1:aa:2b:ee:48:fc:
         a3:08:22:b5:8a:38:c6:ed:fa:81:ae:5a:e8:67:d5:06:f1:72:
         5a:7b:13:bd:bc:64:fa:57:2a:1b:24:17:c2:41:79:94:52:98:
         0e:2b:bf:b1:90:77:ad:f7:a3:6f:cd:bd:f3:d8:c3:30:34:e1:
         77:c0:f6:61:62:08:04:73:8a:a8:57:b0:5e:81:4e:7f:4e:e2:
         d6:b6:ea:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:16:56 2026 by rpki-client