This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/3137302e3234362e34302e302f32322d3234203d3e20323635363338.roa
File:                     3137302e3234362e34302e302f32322d3234203d3e20323635363338.roa (raw, json)
Hash identifier:          uSo2DbW3oBMRWEo7Je5n6a4tJEVDIbgbJt9H0lxt9Nk=
Subject key identifier:   E1:DA:94:32:8F:CA:49:44:44:BE:7C:D3:FE:5B:CA:E5:02:F9:63:B4
Certificate issuer:       /CN=B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2
Certificate serial:       0B406BB7192EC7CA82548EC710257E68EBBD1F5B
Authority key identifier: B0:F4:9E:E9:CC:97:82:F6:D3:2C:63:D1:3D:1D:07:69:A3:0E:44:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/3137302e3234362e34302e302f32322d3234203d3e20323635363338.roa
Signing time:             Tue 06 Jan 2026 19:17:49 +0000
ROA not before:           Tue 06 Jan 2026 19:12:49 +0000
ROA not after:            Tue 05 Jan 2027 19:17:49 +0000
asID:                     265638
IP address blocks:        170.246.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 07:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:40:6b:b7:19:2e:c7:ca:82:54:8e:c7:10:25:7e:68:eb:bd:1f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2
        Validity
            Not Before: Jan  6 19:12:49 2026 GMT
            Not After : Jan  5 19:17:49 2027 GMT
        Subject: CN=E1DA94328FCA494444BE7CD3FE5BCAE502F963B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:93:42:62:78:b8:7f:d3:2c:78:97:5e:38:
                    2c:1b:22:0b:32:39:55:6c:b1:1c:cc:cd:a1:04:8f:
                    81:4f:99:35:d7:18:26:c5:6c:5d:00:48:f0:1f:e4:
                    04:0c:4b:42:67:2f:d6:b6:80:68:af:62:40:5e:9d:
                    e7:4c:45:41:99:3a:ee:34:b0:1d:7a:eb:1d:c2:9c:
                    e6:9e:ef:15:2b:bc:ca:0c:52:a3:3a:f8:52:2d:f9:
                    cf:da:81:10:25:b6:bb:23:c0:55:22:aa:4a:b4:61:
                    80:7c:6d:1a:3c:a4:73:de:eb:89:85:24:bd:ae:de:
                    8f:94:37:19:2e:00:b1:3a:df:46:ce:ba:72:28:14:
                    ff:e5:fc:62:a7:31:3c:61:24:36:3d:e9:63:63:c7:
                    6b:32:84:6b:d6:5e:81:bc:4a:90:93:8d:ab:08:91:
                    10:b7:be:2a:cd:48:5f:c8:38:c0:ba:a8:13:d9:e1:
                    dc:7e:32:04:3d:be:13:0e:0d:03:3c:66:35:f5:d8:
                    fb:4f:6d:26:86:4d:fd:56:db:a9:94:0f:7e:8c:46:
                    0d:51:9b:c2:bb:19:b7:0c:89:a5:9d:44:ea:eb:f5:
                    7d:a8:3d:38:00:ab:3d:e9:81:d7:e5:3b:a6:8d:0f:
                    0b:95:47:53:1e:39:42:26:91:bd:55:fe:15:71:23:
                    f1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DA:94:32:8F:CA:49:44:44:BE:7C:D3:FE:5B:CA:E5:02:F9:63:B4
            X509v3 Authority Key Identifier:
                keyid:B0:F4:9E:E9:CC:97:82:F6:D3:2C:63:D1:3D:1D:07:69:A3:0E:44:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/3137302e3234362e34302e302f32322d3234203d3e20323635363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:20:8a:78:5c:7c:1f:63:5d:04:59:d4:54:f3:88:29:8f:78:
         d4:8c:82:b0:e1:93:87:c9:d8:7e:81:81:e9:93:0d:40:05:9e:
         93:71:26:47:27:e8:34:a6:35:de:38:d3:d8:91:0f:4b:ce:ee:
         b7:c8:66:86:62:03:6e:4a:eb:5a:d9:61:b2:d6:6d:50:68:92:
         92:56:34:b2:6a:22:69:8c:21:b1:7f:5f:88:f4:9a:ec:bb:c4:
         36:d8:7e:95:11:d4:58:0a:69:5c:5b:52:58:7c:d9:88:17:77:
         b3:35:c7:ef:54:65:44:c9:69:d8:3c:b4:95:60:82:3a:bb:57:
         30:13:67:11:13:39:f5:3f:7b:59:db:75:46:61:7f:c2:e3:7e:
         71:fc:b8:e3:c0:ca:47:80:e5:55:da:de:58:d4:e7:e4:c0:b4:
         0f:d6:bc:13:25:5d:f3:37:36:c0:f6:f1:63:5e:db:d6:44:d2:
         e0:28:13:55:0c:ca:1a:56:b2:63:7c:3e:ae:89:b4:32:4a:9b:
         08:e1:83:8c:0b:3c:5a:ca:e7:d1:31:67:34:ca:90:2a:3b:5c:
         c9:33:d6:6e:ee:db:9d:fe:3e:df:37:b1:8c:9c:83:1b:c5:44:
         1e:9b:29:bd:7a:c2:4a:d2:28:e5:e2:9f:26:ad:80:f8:1c:19:
         97:31:cb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 06:52:04 2026 by rpki-client