This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38322e3134342e302f32322d3234203d3e20323633373137.roa
File:                     3137302e38322e3134342e302f32322d3234203d3e20323633373137.roa (raw, json)
Hash identifier:          h2JJoAyIZ2v37FMSzdGb8hQjktWsDoTyv0j0pXqrLPQ=
Subject key identifier:   C1:3E:E0:02:4B:CD:49:2F:EB:B3:5D:7F:24:53:4A:15:71:8A:FD:FF
Certificate issuer:       /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial:       11371C9759EEEB202E203F1F4A3E6D294036735B
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38322e3134342e302f32322d3234203d3e20323633373137.roa
Signing time:             Tue 06 Jan 2026 19:38:35 +0000
ROA not before:           Tue 06 Jan 2026 19:33:35 +0000
ROA not after:            Tue 05 Jan 2027 19:38:35 +0000
asID:                     263717
IP address blocks:        170.82.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 09:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:37:1c:97:59:ee:eb:20:2e:20:3f:1f:4a:3e:6d:29:40:36:73:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
        Validity
            Not Before: Jan  6 19:33:35 2026 GMT
            Not After : Jan  5 19:38:35 2027 GMT
        Subject: CN=C13EE0024BCD492FEBB35D7F24534A15718AFDFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:54:71:32:6f:fd:6d:ae:3f:26:f0:d7:e9:
                    d1:a2:6a:78:ac:ae:ae:70:ad:ef:1d:27:b9:35:ed:
                    85:58:ce:c9:d9:88:89:85:fd:e7:b7:f4:d1:c9:39:
                    f0:98:76:1e:66:8c:1b:36:4d:67:c1:bd:9a:4c:0a:
                    d0:61:e5:50:79:62:0b:fe:97:e7:ea:22:0f:fc:b5:
                    cf:49:0b:03:df:f3:ae:ed:7e:77:a0:ca:fd:f5:e3:
                    20:70:70:90:86:7a:41:95:70:02:31:bc:74:14:82:
                    1f:e3:51:ef:98:e3:9e:a3:dd:d1:54:34:05:fc:ad:
                    1a:26:db:bc:3c:6e:d7:b5:9c:e4:7b:22:1c:71:2f:
                    14:cd:50:8d:10:12:14:10:14:ef:36:fc:99:8e:bd:
                    5d:68:c4:f3:cb:cc:ad:ab:02:03:c0:4c:0e:20:43:
                    65:24:92:88:47:2f:61:6f:54:54:61:f3:4a:ce:23:
                    a8:67:ce:8e:42:2f:f6:da:fe:8e:cf:60:8a:a1:ad:
                    02:60:70:1a:61:e0:b9:d9:c6:43:e1:3c:e7:71:22:
                    db:8f:a7:4e:48:1f:b4:54:d7:be:8b:d2:8a:45:f2:
                    4b:6b:0b:0c:3c:50:e4:5f:79:6c:2a:8b:af:2f:c4:
                    6e:af:4d:00:77:c1:c4:86:02:a6:f8:1e:75:44:d9:
                    c0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3E:E0:02:4B:CD:49:2F:EB:B3:5D:7F:24:53:4A:15:71:8A:FD:FF
            X509v3 Authority Key Identifier:
                keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38322e3134342e302f32322d3234203d3e20323633373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:d0:77:70:e2:ae:fa:56:d5:bc:77:10:a3:a9:12:2b:17:3f:
         9f:0a:31:e8:14:9f:79:7e:13:80:6c:ff:fa:59:eb:79:da:50:
         ba:24:6e:b3:f0:4b:31:d4:97:96:eb:a2:70:1f:ea:75:6e:a7:
         25:09:57:d7:f0:16:fa:5a:e2:eb:bf:38:10:41:b7:18:43:8a:
         79:dc:62:b2:4a:3c:64:20:a7:b1:07:12:b1:ef:46:f9:15:e0:
         ee:d7:01:53:89:9f:95:b9:48:f9:1b:16:c3:0a:95:af:62:af:
         45:a6:1e:4a:a9:7b:c2:26:3e:d0:97:06:9f:00:d6:c6:ff:7f:
         c7:bd:08:c9:d2:79:3c:10:49:4b:b5:bd:94:3f:c7:eb:40:25:
         46:09:78:22:cf:4a:77:0c:c8:79:c3:cd:4d:7f:ac:4b:08:6f:
         cf:a9:64:43:e2:6b:3d:fc:27:2f:e6:fe:fb:f6:3a:f9:44:81:
         f1:2c:49:7b:2e:cb:88:a5:9b:58:13:00:88:36:16:f1:fe:ca:
         3c:e7:35:b9:e6:84:2c:cf:e5:bd:95:9c:b5:92:e7:f3:22:15:
         5b:2b:d0:26:0d:00:39:c0:9e:45:c0:e6:c3:3d:0e:d8:3b:b5:
         7e:b5:08:04:6d:88:3d:1a:51:c5:af:99:4f:c1:fd:3e:78:85:
         57:8e:66:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 16:24:16 2026 by rpki-client