This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e302f32322d3232203d3e20323634373430.roa
File:                     3137302e3233392e3138302e302f32322d3232203d3e20323634373430.roa (raw, json)
Hash identifier:          2Ja7PrhUYfFrlOedHjFNHNbkatK4HTz1YMF9bjnr91g=
Subject key identifier:   5F:9A:EF:E8:34:3B:53:CC:71:9B:4F:68:3B:45:3F:49:79:D0:28:34
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       7BC2510D2FCAD394321829CAD1E25B62318A7447
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e302f32322d3232203d3e20323634373430.roa
Signing time:             Tue 06 Jan 2026 19:37:57 +0000
ROA not before:           Tue 06 Jan 2026 19:32:57 +0000
ROA not after:            Tue 05 Jan 2027 19:37:57 +0000
asID:                     264740
IP address blocks:        170.239.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 19:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c2:51:0d:2f:ca:d3:94:32:18:29:ca:d1:e2:5b:62:31:8a:74:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Jan  6 19:32:57 2026 GMT
            Not After : Jan  5 19:37:57 2027 GMT
        Subject: CN=5F9AEFE8343B53CC719B4F683B453F4979D02834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:82:84:52:ce:22:6a:7c:4c:95:35:ce:6b:ca:
                    2f:b7:ac:29:69:61:b7:ca:fa:8d:df:e7:ae:4e:7b:
                    34:18:a0:7c:f5:95:c0:6a:6f:96:84:45:3e:cc:52:
                    a5:f8:86:ba:98:83:db:e1:a7:28:cd:cc:1c:9f:90:
                    fa:1f:67:04:fe:d6:5f:73:c1:73:e9:41:ae:1e:b7:
                    46:c4:a1:11:b3:55:43:0f:4d:62:86:ad:64:43:5a:
                    95:e9:d5:84:30:35:e2:e0:18:d3:84:8c:29:83:c9:
                    25:24:0c:17:e6:1b:8d:c3:0f:e5:82:0d:df:1f:06:
                    34:23:6c:d2:e1:39:13:da:5a:32:fd:1b:7a:37:9e:
                    d0:22:df:8e:5d:cb:0d:51:aa:c0:f9:ba:ca:aa:f9:
                    86:62:37:37:db:db:cd:d9:03:a0:82:5b:6b:c4:fa:
                    7b:13:3a:47:70:af:21:73:61:a9:64:9b:8d:29:1b:
                    8a:31:8a:39:a9:80:47:f6:c1:05:4e:c4:30:10:77:
                    5b:3a:b6:fe:fa:80:12:2e:24:f8:b6:39:76:46:e4:
                    79:e5:2e:69:b3:c6:80:45:45:1b:3c:5a:14:ed:89:
                    d6:7f:57:4f:49:cd:25:bf:f7:e0:8a:41:b6:15:b1:
                    b6:fd:e1:c5:c2:9f:f5:d3:20:dd:b4:2e:42:e6:db:
                    16:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9A:EF:E8:34:3B:53:CC:71:9B:4F:68:3B:45:3F:49:79:D0:28:34
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e302f32322d3232203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:74:14:b8:17:0d:fa:c9:a2:aa:63:89:2c:dd:09:ed:8c:64:
         7e:a7:cf:24:71:61:c3:66:c8:27:9f:4b:9f:0a:09:11:20:df:
         96:02:24:b2:c0:d2:b9:a7:61:15:4a:9a:a1:86:23:8d:07:d7:
         34:38:93:d2:a4:c6:e6:fd:2e:15:8a:43:1f:25:1c:5d:8d:a7:
         8a:2a:45:fc:aa:64:44:2d:4d:23:62:39:ae:12:6a:7c:03:16:
         53:dc:f5:23:6d:3f:5a:03:3d:7c:86:40:5c:01:42:15:a5:e3:
         a1:01:d5:80:cf:a8:f4:46:85:9a:26:fc:5c:b6:ba:15:64:ae:
         d8:d3:40:07:ed:46:f3:bc:0c:af:dd:5d:80:eb:f9:25:f1:5b:
         6c:d2:4d:b3:cd:35:0b:90:9d:1e:4a:ff:18:ee:52:48:f0:dc:
         1b:0e:6d:d1:aa:b4:7b:31:ff:56:54:e9:6a:1b:e8:e5:eb:cc:
         1f:e1:34:0a:37:61:17:83:e8:29:d9:91:f4:57:e3:a5:00:d3:
         60:17:95:8c:25:36:25:cf:7d:64:94:fc:e1:9a:22:f8:aa:94:
         e8:b6:95:9c:3c:f4:34:4c:9f:4a:81:f5:99:55:2f:cb:bf:eb:
         57:cb:a6:ec:cc:a9:5e:f2:7c:02:a4:ec:60:9a:55:79:47:af:
         df:03:00:ff
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUe8JRDS/K05QyGCnK0eJbYjGKdEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNGQzk0MjFFQkIzNzQ4NkNCMkQ4RkIxNzAyNTVBNzdD
MTNENjA5MTAeFw0yNjAxMDYxOTMyNTdaFw0yNzAxMDUxOTM3NTdaMDMxMTAvBgNV
BAMTKDVGOUFFRkU4MzQzQjUzQ0M3MTlCNEY2ODNCNDUzRjQ5NzlEMDI4MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChgoRSziJqfEyVNc5ryi+3rClp
YbfK+o3f565OezQYoHz1lcBqb5aERT7MUqX4hrqYg9vhpyjNzByfkPofZwT+1l9z
wXPpQa4et0bEoRGzVUMPTWKGrWRDWpXp1YQwNeLgGNOEjCmDySUkDBfmG43DD+WC
Dd8fBjQjbNLhORPaWjL9G3o3ntAi345dyw1RqsD5usqq+YZiNzfb283ZA6CCW2vE
+nsTOkdwryFzYalkm40pG4oxijmpgEf2wQVOxDAQd1s6tv76gBIuJPi2OXZG5Hnl
LmmzxoBFRRs8WhTtidZ/V09JzSW/9+CKQbYVsbb94cXCn/XTIN20LkLm2xbPAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUX5rv6DQ7U8xxm09oO0U/SXnQKDQwHwYDVR0j
BBgwFoAUY/yUIeuzdIbLLY+xcCVad8E9YJEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQUZDMTE0OUE2NEJCMzg0RkQxOTI4NzlGN0RDMTVBNzM1
QjU5QTA2ODIyQTJDNkVCODMzRThGQjZBNTVCMzg4LzAvNjNGQzk0MjFFQkIzNzQ4
NkNCMkQ4RkIxNzAyNTVBNzdDMTNENjA5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82M0ZDOTQyMUVCQjM3NDg2Q0Iy
RDhGQjE3MDI1NUE3N0MxM0Q2MDkxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUFGQzExNDlBNjRCQjM4NEZEMTkyODc5RjdEQzE1QTczNUI1OUEwNjgy
MkEyQzZFQjgzM0U4RkI2QTU1QjM4OC8wLzMxMzczMDJlMzIzMzM5MmUzMTM4MzAy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzQzNzM0MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKq
77QwDQYJKoZIhvcNAQELBQADggEBAGp0FLgXDfrJoqpjiSzdCe2MZH6nzyRxYcNm
yCefS58KCREg35YCJLLA0rmnYRVKmqGGI40H1zQ4k9Kkxub9LhWKQx8lHF2Np4oq
RfyqZEQtTSNiOa4SanwDFlPc9SNtP1oDPXyGQFwBQhWl46EB1YDPqPRGhZom/Fy2
uhVkrtjTQAftRvO8DK/dXYDr+SXxW2zSTbPNNQuQnR5K/xjuUkjw3BsObdGqtHsx
/1ZU6Wob6OXrzB/hNAo3YReD6CnZkfRX46UA02AXlYwlNiXPfWSU/OGaIviqlOi2
lZw89DRMn0qB9ZlVL8u/61fLpuzMqV7yfAKk7GCaVXlHr98DAP8=
-----END CERTIFICATE-----
Generated at Tue Jan 13 14:08:21 2026 by rpki-client