This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/3137302e38322e3234372e302f32342d3234203d3e20323634383433.roa
File:                     3137302e38322e3234372e302f32342d3234203d3e20323634383433.roa (raw, json)
Hash identifier:          kr+LgasUTjEVzgqwUWSGEg3ucTFCK0qx5S4GXXvPyl4=
Subject key identifier:   17:EC:19:E0:52:CD:4E:5C:9D:73:19:48:3F:5B:9E:71:D1:50:FF:89
Certificate issuer:       /CN=816EC1F9E069407800183BB75F557CA6DBF5A3AA
Certificate serial:       2D811113909D7FD719925D812A78B76939DD0869
Authority key identifier: 81:6E:C1:F9:E0:69:40:78:00:18:3B:B7:5F:55:7C:A6:DB:F5:A3:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/3137302e38322e3234372e302f32342d3234203d3e20323634383433.roa
Signing time:             Tue 06 Jan 2026 19:03:14 +0000
ROA not before:           Tue 06 Jan 2026 18:58:14 +0000
ROA not after:            Tue 05 Jan 2027 19:03:14 +0000
asID:                     264843
IP address blocks:        170.82.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:81:11:13:90:9d:7f:d7:19:92:5d:81:2a:78:b7:69:39:dd:08:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816EC1F9E069407800183BB75F557CA6DBF5A3AA
        Validity
            Not Before: Jan  6 18:58:14 2026 GMT
            Not After : Jan  5 19:03:14 2027 GMT
        Subject: CN=17EC19E052CD4E5C9D7319483F5B9E71D150FF89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:27:c5:7f:1a:b5:3e:bd:01:66:ae:d3:42:da:
                    c1:e8:b7:15:56:91:92:58:4b:4b:44:b7:5e:36:b7:
                    00:90:b4:3d:55:cb:0f:40:5e:58:8a:9f:33:fa:55:
                    8b:53:24:8c:67:df:be:d3:73:7c:92:23:42:2e:aa:
                    22:45:cd:19:30:15:0d:3b:8a:8f:5c:02:55:b9:7d:
                    e0:7d:9b:ef:12:67:91:8e:ed:b3:89:09:4d:1b:c9:
                    02:b3:35:e2:a3:b9:14:fb:e5:41:0b:8b:51:78:37:
                    0f:d2:ff:08:bf:bd:71:9b:73:64:f8:d4:aa:34:0a:
                    0e:f0:49:1d:de:76:87:ca:ab:0b:9b:59:fe:b1:13:
                    70:e6:44:0a:03:36:70:3d:16:f6:25:10:85:39:cb:
                    42:57:c6:e2:27:1e:58:6e:81:06:57:a9:f4:53:5e:
                    d9:b5:d2:6f:6f:c7:8d:da:7d:a3:f6:fa:75:30:04:
                    00:60:14:89:f1:5d:e1:26:e8:5f:28:e5:e5:04:db:
                    3c:e4:3e:2e:f1:45:55:58:dd:e6:65:b2:2c:17:1f:
                    71:70:a2:7d:14:07:04:b7:c7:60:1b:c5:70:66:c1:
                    0a:64:9a:76:4d:3d:4b:62:8e:25:74:5c:11:59:e9:
                    30:b7:89:a6:d5:bb:f5:5a:f1:c8:bc:f2:92:34:03:
                    10:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EC:19:E0:52:CD:4E:5C:9D:73:19:48:3F:5B:9E:71:D1:50:FF:89
            X509v3 Authority Key Identifier:
                keyid:81:6E:C1:F9:E0:69:40:78:00:18:3B:B7:5F:55:7C:A6:DB:F5:A3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/3137302e38322e3234372e302f32342d3234203d3e20323634383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:5c:f6:0e:71:3f:bc:b6:4e:72:2f:88:7e:cd:54:bc:c0:29:
         39:41:48:0f:2d:7b:63:aa:f8:95:72:d3:d2:de:df:d3:f9:77:
         3b:fa:13:8e:20:d6:1a:79:48:9c:a1:27:8b:78:c3:82:06:cc:
         7c:be:18:05:fc:8d:8c:56:11:07:31:95:c2:ef:cd:6a:33:8b:
         ae:31:86:80:6e:f9:9e:c0:06:e2:53:5a:db:23:4c:5e:12:00:
         1e:4c:32:11:5e:4f:0d:52:4c:f5:8e:ac:19:5f:44:1f:4e:02:
         12:36:67:3d:c9:4e:ee:21:ad:55:a3:69:99:49:9e:0e:6f:2a:
         ae:65:db:76:de:54:f8:a0:6e:09:63:10:6b:15:49:5d:85:e5:
         8d:55:ed:e6:79:f8:59:8a:52:83:d8:d4:f1:f0:48:96:06:19:
         30:2a:50:bc:3b:c0:b8:50:8b:d1:af:93:94:86:7b:e2:a9:33:
         10:79:4f:08:32:e0:6c:57:07:71:67:3f:41:03:a1:10:80:55:
         4d:24:1b:ef:2a:a4:31:b1:00:2e:0c:b7:df:27:cf:b5:ea:b9:
         3e:5f:2e:35:8b:9d:de:d9:3f:e4:a0:a4:b9:9e:8f:4b:67:62:
         11:74:f3:63:cf:f3:24:89:df:6e:26:c5:50:6b:e5:fe:ad:90:
         2e:dc:a3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:15:19 2026 by rpki-client