This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/3137302e38302e3232382e302f32322d3234203d3e20323634383330.roa
File:                     3137302e38302e3232382e302f32322d3234203d3e20323634383330.roa (raw, json)
Hash identifier:          2j/wEABW+3HSGZRhfhnn3UfDoYTPSd6oT/OnAqVnOxg=
Subject key identifier:   41:C8:E7:BE:7F:B7:FB:59:1B:73:2A:72:40:47:DB:A8:00:93:3E:82
Certificate issuer:       /CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
Certificate serial:       7BD19C732E7106129913E805E5189A274AD0F0A7
Authority key identifier: EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/3137302e38302e3232382e302f32322d3234203d3e20323634383330.roa
Signing time:             Tue 06 Jan 2026 20:50:05 +0000
ROA not before:           Tue 06 Jan 2026 20:45:05 +0000
ROA not after:            Tue 05 Jan 2027 20:50:05 +0000
asID:                     264830
IP address blocks:        170.80.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d1:9c:73:2e:71:06:12:99:13:e8:05:e5:18:9a:27:4a:d0:f0:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
        Validity
            Not Before: Jan  6 20:45:05 2026 GMT
            Not After : Jan  5 20:50:05 2027 GMT
        Subject: CN=41C8E7BE7FB7FB591B732A724047DBA800933E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1a:91:7d:3e:47:ba:fe:da:b3:60:02:ed:b2:
                    38:d4:45:e8:49:50:18:39:20:ad:3a:21:bc:46:c2:
                    a8:87:82:40:ef:77:4a:4e:4d:3f:08:03:e0:15:f7:
                    09:2a:ab:a9:8a:16:c0:41:35:9e:ed:05:6c:c2:8d:
                    04:37:d0:4d:f3:59:a9:a7:75:43:5c:e5:58:97:2d:
                    5a:93:1c:14:b5:e5:a6:ce:5a:b2:1f:82:68:01:aa:
                    4a:50:dc:25:05:5e:3a:5f:34:80:75:70:ce:81:56:
                    c8:67:39:fd:fa:9f:a7:b3:23:44:73:62:cd:ae:e2:
                    27:9b:4d:7e:ef:f5:95:ae:58:14:c8:bd:24:d5:e4:
                    18:b0:8b:c4:04:c4:89:1f:13:52:ee:f8:10:d0:eb:
                    4a:95:3a:1d:94:b4:f2:cb:47:b9:a3:5b:c5:5c:45:
                    e6:cc:da:87:a7:1f:39:d3:08:2e:e7:6e:76:3c:a9:
                    89:eb:7c:03:19:c5:4c:37:de:cc:1e:30:39:56:e2:
                    59:ed:d7:25:76:02:c3:96:87:a2:79:b8:f3:b2:28:
                    a4:40:b0:5b:fd:8f:2a:e6:a2:26:f8:f5:c6:f8:fa:
                    83:59:32:e8:c4:e3:b2:8c:1d:ec:84:22:26:21:5c:
                    27:be:84:ca:06:e8:13:d8:85:fd:d5:b5:47:a3:2d:
                    61:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C8:E7:BE:7F:B7:FB:59:1B:73:2A:72:40:47:DB:A8:00:93:3E:82
            X509v3 Authority Key Identifier:
                keyid:EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/3137302e38302e3232382e302f32322d3234203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:0f:db:19:36:9e:90:40:19:be:38:bb:83:a7:c7:08:db:c5:
         6a:52:9f:c5:39:ef:3e:87:39:18:49:69:41:2a:5d:20:04:23:
         cf:1b:28:0a:37:63:20:51:b1:6b:61:54:fc:50:a8:09:1a:12:
         62:fe:8c:53:c4:e5:c2:ea:70:37:79:f7:5c:a3:d4:0c:4e:24:
         bd:24:c3:75:18:2f:ac:28:78:8c:37:9f:fe:16:27:c9:6d:8f:
         00:b7:0b:da:e8:36:72:25:32:28:e4:1f:e9:be:ad:95:d0:5c:
         77:45:c5:09:f0:19:a0:f6:dd:b1:28:6b:ad:44:d0:67:13:36:
         99:d9:df:13:48:61:0a:11:f2:6a:e7:c6:df:d3:cf:4b:17:0e:
         8b:13:fe:d1:94:80:3b:77:82:79:e5:09:6a:4a:7c:cf:9c:93:
         b4:cb:19:4d:24:6d:06:d9:0c:7f:51:b5:ee:71:77:a1:9a:1d:
         fd:8e:d5:40:87:ed:fa:54:45:1a:56:b9:c0:71:70:9c:66:67:
         95:21:e6:7d:cc:0e:0f:85:db:6a:47:57:1b:00:98:da:57:5b:
         b5:48:22:50:95:25:5c:c1:db:59:40:3a:1d:49:a0:ef:4e:69:
         43:5c:30:97:fc:2d:63:0e:c4:49:53:3e:57:67:f8:86:44:52:
         06:7d:9c:09
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUe9Gccy5xBhKZE+gF5RiaJ0rQ8KcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVGQ0Y2MjQ3Njk5ODYzM0Y4RDYyQzAyMEMwNzRGRUY1
Q0QwMDc3RTAeFw0yNjAxMDYyMDQ1MDVaFw0yNzAxMDUyMDUwMDVaMDMxMTAvBgNV
BAMTKDQxQzhFN0JFN0ZCN0ZCNTkxQjczMkE3MjQwNDdEQkE4MDA5MzNFODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlGpF9Pke6/tqzYALtsjjURehJ
UBg5IK06IbxGwqiHgkDvd0pOTT8IA+AV9wkqq6mKFsBBNZ7tBWzCjQQ30E3zWamn
dUNc5ViXLVqTHBS15abOWrIfgmgBqkpQ3CUFXjpfNIB1cM6BVshnOf36n6ezI0Rz
Ys2u4iebTX7v9ZWuWBTIvSTV5Biwi8QExIkfE1Lu+BDQ60qVOh2UtPLLR7mjW8Vc
RebM2oenHznTCC7nbnY8qYnrfAMZxUw33sweMDlW4lnt1yV2AsOWh6J5uPOyKKRA
sFv9jyrmoib49cb4+oNZMujE47KMHeyEIiYhXCe+hMoG6BPYhf3VtUejLWGfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQcjnvn+3+1kbcypyQEfbqACTPoIwHwYDVR0j
BBgwFoAU7vz2JHaZhjP41iwCDAdP71zQB34wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MTNENzJBQkE1QzFGNUFFMUJFOTc2NjdFREY0RTBGODNG
OEQzODgwQjlBRjEwOUJEQ0FBOTc4RUVFNTA4NkUxLzAvRUVGQ0Y2MjQ3Njk5ODYz
M0Y4RDYyQzAyMEMwNzRGRUY1Q0QwMDc3RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRUZDRjYyNDc2OTk4NjMzRjhE
NjJDMDIwQzA3NEZFRjVDRDAwNzdFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDEzRDcyQUJBNUMxRjVBRTFCRTk3NjY3RURGNEUwRjgzRjhEMzg4MEI5
QUYxMDlCRENBQTk3OEVFRTUwODZFMS8wLzMxMzczMDJlMzgzMDJlMzIzMjM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzgzMzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqlDk
MA0GCSqGSIb3DQEBCwUAA4IBAQBYD9sZNp6QQBm+OLuDp8cI28VqUp/FOe8+hzkY
SWlBKl0gBCPPGygKN2MgUbFrYVT8UKgJGhJi/oxTxOXC6nA3efdco9QMTiS9JMN1
GC+sKHiMN5/+FifJbY8Atwva6DZyJTIo5B/pvq2V0Fx3RcUJ8Bmg9t2xKGutRNBn
EzaZ2d8TSGEKEfJq58bf089LFw6LE/7RlIA7d4J55QlqSnzPnJO0yxlNJG0G2Qx/
UbXucXehmh39jtVAh+36VEUaVrnAcXCcZmeVIeZ9zA4PhdtqR1cbAJjaV1u1SCJQ
lSVcwdtZQDodSaDvTmlDXDCX/C1jDsRJUz5XZ/iGRFIGfZwJ
-----END CERTIFICATE-----
Generated at Thu Jan 29 06:05:03 2026 by rpki-client