This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/3137302e3234352e3133332e302f32342d3234203d3e20323730303936.roa
File:                     3137302e3234352e3133332e302f32342d3234203d3e20323730303936.roa (raw, json)
Hash identifier:          dD3ETNAhzmtbK045kW7X0HxTnCo2lQ+5S6EIjNWF21M=
Subject key identifier:   BD:18:DD:B7:30:06:6A:29:82:5C:51:CF:C7:54:3A:C2:9A:39:24:63
Certificate issuer:       /CN=7C73575E363469E69249C4583641D2A482F859B2
Certificate serial:       4AC6D5E420A0BB2EF25FD60DC608FB277FA442F6
Authority key identifier: 7C:73:57:5E:36:34:69:E6:92:49:C4:58:36:41:D2:A4:82:F8:59:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C73575E363469E69249C4583641D2A482F859B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/3137302e3234352e3133332e302f32342d3234203d3e20323730303936.roa
Signing time:             Tue 06 Jan 2026 18:57:52 +0000
ROA not before:           Tue 06 Jan 2026 18:52:52 +0000
ROA not after:            Tue 05 Jan 2027 18:57:52 +0000
asID:                     270096
IP address blocks:        170.245.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/7C73575E363469E69249C4583641D2A482F859B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/7C73575E363469E69249C4583641D2A482F859B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C73575E363469E69249C4583641D2A482F859B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c6:d5:e4:20:a0:bb:2e:f2:5f:d6:0d:c6:08:fb:27:7f:a4:42:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C73575E363469E69249C4583641D2A482F859B2
        Validity
            Not Before: Jan  6 18:52:52 2026 GMT
            Not After : Jan  5 18:57:52 2027 GMT
        Subject: CN=BD18DDB730066A29825C51CFC7543AC29A392463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:db:13:74:f4:2a:43:da:fa:3c:42:82:61:65:
                    b8:88:0c:a0:8e:6a:2d:31:b8:63:e5:d9:44:92:34:
                    b2:6e:aa:00:07:73:8e:47:1b:6c:7d:bc:00:27:48:
                    ee:63:b0:7b:02:53:66:6d:3c:ac:90:01:29:b2:ac:
                    c7:cd:54:ea:1a:84:aa:bd:4c:9f:06:e6:5f:f6:d3:
                    20:94:e8:23:5b:16:e4:58:4b:a4:17:88:44:30:09:
                    d2:b7:cc:67:a5:f3:9a:c3:a0:57:96:51:83:5f:e9:
                    1c:1a:24:2d:62:a0:81:d2:1b:84:4e:01:10:36:b7:
                    ec:67:cf:cd:47:cc:95:61:d0:d4:c8:00:3a:fd:12:
                    83:8e:b5:ed:c0:11:55:8a:4c:81:a1:58:c3:a1:a0:
                    28:ec:9f:74:c7:e3:6f:53:75:17:87:64:7f:5a:de:
                    7e:84:9b:33:74:79:fd:ce:51:ab:43:d3:76:a6:d6:
                    40:51:40:dc:a4:f0:c6:16:c4:45:08:03:92:ae:4c:
                    7b:ec:31:2e:fa:fc:6a:9b:e3:90:b2:a2:15:d6:dc:
                    00:77:53:c2:f8:82:4c:c3:12:01:6b:12:5c:af:ff:
                    97:2f:99:02:dc:a6:9f:1a:d6:c8:d4:4a:0e:b9:1b:
                    66:8c:b7:aa:18:23:45:78:7b:0e:af:45:fe:e0:ef:
                    de:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:18:DD:B7:30:06:6A:29:82:5C:51:CF:C7:54:3A:C2:9A:39:24:63
            X509v3 Authority Key Identifier:
                keyid:7C:73:57:5E:36:34:69:E6:92:49:C4:58:36:41:D2:A4:82:F8:59:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/7C73575E363469E69249C4583641D2A482F859B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C73575E363469E69249C4583641D2A482F859B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/3137302e3234352e3133332e302f32342d3234203d3e20323730303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:ac:d2:d8:31:87:da:47:af:8c:a6:c2:df:ce:22:a7:6d:d6:
         c3:f2:3f:60:e1:1a:1b:f7:ec:19:2c:b5:62:5f:35:e6:80:df:
         30:35:92:4e:ff:7a:22:f7:65:ad:f3:21:d7:f7:60:5d:f9:7d:
         ff:84:55:79:44:76:17:74:77:e3:17:f8:2e:fe:01:d9:14:fd:
         a1:ab:4e:d0:35:bb:b5:f9:46:4a:03:65:62:6a:d1:a2:ce:f7:
         45:84:95:87:09:e0:10:1a:71:39:8c:8d:dc:55:9f:62:61:05:
         f3:82:65:f2:ad:a2:6c:ba:8d:fb:ba:a4:e4:29:ca:ad:f4:ff:
         bf:7b:c0:d0:e6:93:aa:68:09:b7:15:e7:0e:70:49:a7:bf:3c:
         22:c7:cc:2b:76:a1:11:05:28:c9:e3:c0:a1:9c:f9:00:09:1c:
         20:4e:84:6b:bd:be:f8:2b:b2:be:5b:8d:09:32:8b:f6:5e:42:
         49:05:a7:e0:70:65:4b:91:cb:59:3e:e3:0a:58:87:17:3a:d7:
         b0:05:a4:41:0a:dc:4b:0d:3c:6a:fc:e2:97:4a:52:96:67:4b:
         14:7d:3a:b2:0f:8f:83:a5:03:ea:82:25:17:36:26:b7:2a:cd:
         dd:15:a7:96:69:48:c6:e9:47:85:23:3d:f4:06:f6:ed:12:be:
         e1:66:17:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 17:44:22 2026 by rpki-client