This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3137302e38342e3231322e302f32322d3234203d3e203237373932.roa
File:                     3137302e38342e3231322e302f32322d3234203d3e203237373932.roa (raw, json)
Hash identifier:          rwJ8Ir6CS7Wq/dsJt8m2dYWpAmLb4TzBE9iXQ25PxQI=
Subject key identifier:   3F:77:B7:E3:88:76:F2:18:A5:2C:EA:56:E2:52:5B:B7:69:1F:36:1E
Certificate issuer:       /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Certificate serial:       0AE6351998ACDF00689675644254FFE1E4DCAAE4
Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3137302e38342e3231322e302f32322d3234203d3e203237373932.roa
Signing time:             Tue 06 Jan 2026 19:15:44 +0000
ROA not before:           Tue 06 Jan 2026 19:10:44 +0000
ROA not after:            Tue 05 Jan 2027 19:15:44 +0000
asID:                     27792
IP address blocks:        170.84.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 06:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e6:35:19:98:ac:df:00:68:96:75:64:42:54:ff:e1:e4:dc:aa:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
        Validity
            Not Before: Jan  6 19:10:44 2026 GMT
            Not After : Jan  5 19:15:44 2027 GMT
        Subject: CN=3F77B7E38876F218A52CEA56E2525BB7691F361E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:3d:41:6b:0f:6a:17:1a:fe:65:4a:35:c8:
                    8d:b7:98:99:0b:2f:2e:e6:b4:ac:09:1d:c9:00:ba:
                    d8:20:11:b3:74:ec:fe:9e:d6:6b:24:8f:7b:34:d3:
                    77:03:98:d2:7d:1d:1c:f9:e5:52:c9:68:42:69:4d:
                    5a:8b:f5:27:cc:2c:7f:a5:c6:5f:bc:6a:58:69:82:
                    ab:6d:88:9d:17:27:9f:a3:ab:26:ad:8e:82:a5:fc:
                    86:68:77:7b:f3:51:99:86:1f:f1:72:6e:5b:a6:53:
                    e0:7f:e5:b1:2e:6c:51:e5:10:bd:41:cc:bc:f1:2f:
                    94:f4:d4:b6:5c:24:19:77:19:70:d8:2e:17:6c:f2:
                    27:c0:d6:8a:35:27:ab:52:33:02:09:9f:b3:03:4a:
                    62:d2:07:9a:07:5f:32:92:0a:8b:03:d1:cd:26:84:
                    34:40:72:b9:d2:4d:c4:fc:fa:f8:da:b5:12:d1:0a:
                    7a:ee:6a:00:0b:69:dc:b2:cc:d0:72:d8:ad:da:b9:
                    6b:e8:3c:a7:db:72:3f:e9:d1:d1:ef:9d:f4:46:4e:
                    f6:45:7e:64:91:75:2f:5f:eb:dd:2b:27:fd:3e:39:
                    65:33:85:fe:7e:a5:91:18:76:36:fc:51:47:9b:3f:
                    0c:ed:c5:9c:d0:a5:b0:df:49:df:ee:95:0a:df:05:
                    01:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:77:B7:E3:88:76:F2:18:A5:2C:EA:56:E2:52:5B:B7:69:1F:36:1E
            X509v3 Authority Key Identifier:
                keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3137302e38342e3231322e302f32322d3234203d3e203237373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:bb:a7:85:55:3b:4b:7d:41:a6:03:0a:df:d3:0a:23:96:c8:
         0a:bc:58:67:7e:e8:a3:76:b8:2b:3a:37:80:da:9e:9b:86:44:
         71:9d:8f:9e:85:68:4c:9e:d2:b5:45:71:27:b8:cc:e1:92:65:
         04:66:60:d3:f7:01:3f:24:f6:4a:df:5a:dc:a6:28:8f:bf:dc:
         43:15:8d:fb:02:42:35:91:bf:7c:23:30:29:e2:fd:c5:fd:5c:
         dd:f2:88:75:99:58:9d:2b:95:5c:28:67:26:c1:42:08:d7:3c:
         bd:57:bc:88:8d:7b:3c:eb:71:4b:f3:68:f6:60:81:11:93:e7:
         54:62:e4:d9:bf:22:6f:ca:47:4d:cf:d0:5f:4c:d3:fe:98:c5:
         9a:62:cc:36:54:d4:2d:61:15:96:43:6c:e1:f4:61:25:bf:46:
         fb:82:93:64:b5:59:69:f4:37:c7:23:33:9a:ee:5b:08:b3:c9:
         27:f8:4b:60:00:bb:e8:4a:c0:76:56:2b:32:e5:55:ea:83:ac:
         63:ad:de:8a:97:fb:bc:bd:5c:de:9e:e3:74:54:c4:7c:21:79:
         20:80:87:a3:73:06:82:88:18:16:a4:3f:bf:a5:3b:57:b8:3d:
         6c:94:09:4d:94:60:b9:d6:93:f5:e3:e5:37:f8:f6:a8:83:6e:
         cb:41:22:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:00:14 2026 by rpki-client