This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3137302e38302e3130382e302f32322d3234203d3e20323633383132.roa
File:                     3137302e38302e3130382e302f32322d3234203d3e20323633383132.roa (raw, json)
Hash identifier:          t7BPaqbOosQfpwqU0Xrh1cZmZDAjMcrTtcbCzMpzEeo=
Subject key identifier:   D7:A5:62:CE:EE:33:9C:42:54:E7:53:93:93:D2:48:89:24:3D:B5:31
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       047D179979E97D5D13758E53BA77B380CB7467B4
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3137302e38302e3130382e302f32322d3234203d3e20323633383132.roa
Signing time:             Tue 06 Jan 2026 19:44:51 +0000
ROA not before:           Tue 06 Jan 2026 19:39:51 +0000
ROA not after:            Tue 05 Jan 2027 19:44:51 +0000
asID:                     263812
IP address blocks:        170.80.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 12:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7d:17:99:79:e9:7d:5d:13:75:8e:53:ba:77:b3:80:cb:74:67:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Jan  6 19:39:51 2026 GMT
            Not After : Jan  5 19:44:51 2027 GMT
        Subject: CN=D7A562CEEE339C4254E7539393D24889243DB531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c2:a3:f6:df:0a:8f:0f:e7:54:32:af:9b:5f:
                    5f:f8:2a:a1:51:61:aa:49:44:df:02:fd:36:3f:c5:
                    0c:3a:dc:46:33:e5:a0:52:62:e2:a0:c1:46:9c:b5:
                    d5:f0:8c:02:66:d4:b4:c0:c5:7e:1b:e1:b3:3c:cd:
                    8d:56:f9:3b:9b:66:a8:bc:73:ef:a2:ba:97:51:1e:
                    75:63:10:0c:a0:3f:ad:3b:8f:da:e6:a3:a0:c6:99:
                    0f:8d:d0:8d:14:4a:9a:84:b5:0d:a2:4a:6b:e6:ef:
                    74:9e:e1:34:d1:5e:5b:19:38:9d:11:eb:b8:c1:f3:
                    1e:a9:77:80:3c:27:ec:a9:31:06:2b:90:91:d6:8a:
                    ec:4d:33:35:b1:ae:b6:37:b2:06:18:ed:3b:ae:8d:
                    6e:aa:e5:0f:4f:44:9d:9f:18:84:cd:09:da:68:24:
                    5e:54:bb:a1:0b:ce:f3:61:50:09:88:75:c6:f1:a1:
                    e9:9b:e8:a5:45:e7:e1:a7:79:54:6f:74:c7:4f:8c:
                    b5:cf:0c:a6:cd:18:f8:5f:00:62:0a:9a:88:52:27:
                    10:c7:f9:65:3c:68:16:e1:8c:ec:d0:74:80:9d:17:
                    37:55:55:c8:43:67:8d:ec:1a:b5:9c:2f:2c:4e:2e:
                    9c:ed:fc:d4:f2:65:a6:35:30:db:0b:52:f1:80:d3:
                    a8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A5:62:CE:EE:33:9C:42:54:E7:53:93:93:D2:48:89:24:3D:B5:31
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3137302e38302e3130382e302f32322d3234203d3e20323633383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:fe:fb:e0:46:2c:01:56:4c:b7:ba:d0:4b:7a:20:5e:b5:ca:
         60:3a:9f:e6:a2:d9:4e:25:c4:ad:19:92:7a:01:09:90:03:3a:
         8b:96:8d:25:c1:47:db:56:48:f1:6d:77:4e:4c:22:22:c7:cb:
         c2:de:f1:e3:57:c9:28:14:3a:b2:76:0e:1e:9a:8a:aa:43:d6:
         a7:a2:c4:a8:a6:4c:03:45:7f:aa:02:7a:bb:cf:74:4e:cf:8f:
         4d:43:53:82:d5:17:f3:79:bf:eb:0a:90:97:71:0a:40:fe:df:
         b7:a8:b6:37:a8:ac:30:f2:e6:af:3c:e6:3d:c5:54:83:4d:49:
         d0:c3:fe:59:8f:09:e4:62:97:90:c6:5b:4b:6d:1e:88:dc:74:
         aa:17:ab:c4:37:f0:ba:6c:35:18:3b:f4:c2:16:08:99:73:2e:
         38:a9:00:3d:47:48:db:e5:5d:9c:fc:af:73:3a:3a:9f:aa:7a:
         af:8f:25:54:f5:1d:b3:cf:2e:ce:4b:f5:d8:f6:8d:78:5a:b9:
         80:ae:a5:ef:a2:d7:3c:0a:06:e2:8c:72:70:44:0a:b4:7f:72:
         49:1f:84:d7:40:56:ab:3d:90:c6:7b:dd:46:15:17:72:ec:f4:
         ca:02:45:c8:fb:95:7f:9a:78:44:88:4c:0f:91:a2:e4:10:8c:
         7e:71:40:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:40:53 2026 by rpki-client