This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132312e302f32342d3234203d3e203237383233.roa
File:                     3137392e34332e3132312e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          WbFtyqxSKgBkrND0jWdfaoQYrHQpkeo+uZoFFL49Jao=
Subject key identifier:   7D:CE:22:87:57:01:8B:1A:DB:E0:32:B0:21:7A:FB:81:EF:6C:7C:D2
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       73355758605CD2A9970494732AF851BC8D9F3E7C
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132312e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 06 Jan 2026 19:05:49 +0000
ROA not before:           Tue 06 Jan 2026 19:00:49 +0000
ROA not after:            Tue 05 Jan 2027 19:05:49 +0000
asID:                     27823
IP address blocks:        179.43.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:35:57:58:60:5c:d2:a9:97:04:94:73:2a:f8:51:bc:8d:9f:3e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Jan  6 19:00:49 2026 GMT
            Not After : Jan  5 19:05:49 2027 GMT
        Subject: CN=7DCE228757018B1ADBE032B0217AFB81EF6C7CD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:48:33:8f:f2:39:4a:62:ed:55:ac:1d:41:05:
                    9b:2a:69:30:6b:a6:a5:d9:f4:88:97:69:26:26:76:
                    12:2f:d9:a7:e9:2f:d2:bb:14:a0:50:f2:29:43:93:
                    82:61:6e:ce:b6:c4:b9:24:f8:35:75:f5:aa:01:ff:
                    44:bd:66:4d:58:76:bc:97:2e:58:dc:67:af:7d:04:
                    67:6f:ea:92:68:f2:55:aa:38:83:12:1e:fc:96:05:
                    57:70:02:a4:48:f8:74:be:58:56:bd:bb:44:2e:5b:
                    2b:77:2e:10:5a:81:3e:fc:02:1d:89:45:2d:55:ce:
                    09:2c:db:71:2b:51:39:e6:e0:1b:37:b5:57:44:c6:
                    fa:d1:c9:2d:1e:99:86:5f:1f:36:69:68:d9:59:48:
                    23:9c:91:5e:65:bc:ce:e5:21:3a:4e:b4:51:43:ba:
                    c5:13:50:d7:82:2b:7b:7a:0e:ae:4d:96:8a:95:44:
                    51:9e:e6:27:55:6c:6e:ba:3a:7a:70:3e:fc:54:44:
                    86:60:02:16:45:51:7f:4f:63:08:25:19:7e:a2:06:
                    a6:f7:cc:7b:b3:09:45:c7:70:90:09:31:ea:67:99:
                    32:55:5f:e4:c4:10:db:93:e1:af:7a:f0:88:fe:38:
                    3e:73:15:ea:f2:d1:be:9a:43:a0:c7:4d:a0:73:e1:
                    d6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CE:22:87:57:01:8B:1A:DB:E0:32:B0:21:7A:FB:81:EF:6C:7C:D2
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132312e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:9e:f3:f9:0a:c1:34:76:f2:44:f0:ac:6c:c3:df:7a:ef:d5:
         b2:66:68:85:5d:be:e3:1e:fb:11:f4:2e:23:37:93:43:f3:f4:
         f1:69:3b:51:45:7e:3d:bd:67:ef:fa:f4:36:03:76:a5:6c:fb:
         e1:c6:2a:ea:4d:9e:ec:51:46:18:e0:6f:ef:97:78:41:e8:53:
         c1:69:25:49:83:59:bf:af:8b:a9:3a:6f:57:2d:01:7a:35:f8:
         1c:26:35:16:e3:3e:0e:44:07:f3:95:96:1c:bf:51:b8:5a:49:
         2c:69:22:70:8a:cf:00:1d:33:7c:98:2c:df:de:96:91:0f:95:
         d4:2b:f9:45:e8:e5:7b:92:5f:33:63:88:10:a7:a7:38:35:ff:
         da:6f:8e:3b:d2:c6:7a:29:94:a6:84:7d:65:11:94:0d:29:c2:
         50:ce:a2:4e:a9:fb:ca:79:04:44:33:b4:82:7c:65:8c:ec:42:
         2c:d8:bd:95:0d:09:97:e1:bb:3a:c9:d8:a2:dd:4e:f6:47:74:
         14:ca:24:71:4b:b5:22:ec:40:c5:13:be:b3:23:a8:bf:98:d9:
         ab:7b:e7:6f:ee:85:99:8b:41:63:5e:dc:1c:af:18:36:81:d2:
         e1:f8:3c:29:55:7c:20:52:4b:8c:98:fe:9d:b1:af:da:dd:13:
         b1:c2:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 22:15:10 2026 by rpki-client