This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132362e302f32342d3234203d3e203237383233.roa
File:                     3137392e34332e3132362e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          00dsle29xNhixXqXd8To8TfYHBPqjjqYwrHGlQ6+ARo=
Subject key identifier:   60:DA:8E:92:C2:3D:C7:E8:30:63:8F:21:99:DE:9A:6F:43:8E:4D:EB
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       0D856B060E1D6869637D0FD64BBC3B20FB6FC941
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132362e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 06 Jan 2026 19:05:55 +0000
ROA not before:           Tue 06 Jan 2026 19:00:55 +0000
ROA not after:            Tue 05 Jan 2027 19:05:55 +0000
asID:                     27823
IP address blocks:        179.43.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:85:6b:06:0e:1d:68:69:63:7d:0f:d6:4b:bc:3b:20:fb:6f:c9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Jan  6 19:00:55 2026 GMT
            Not After : Jan  5 19:05:55 2027 GMT
        Subject: CN=60DA8E92C23DC7E830638F2199DE9A6F438E4DEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:65:8b:5a:6f:85:31:08:b0:85:23:94:9c:4a:
                    6f:b7:61:dc:c7:2a:44:a2:58:b0:a3:8d:e6:e7:76:
                    c1:82:49:df:d6:5c:60:cb:6c:3b:e7:14:35:e2:2f:
                    1c:7d:e5:c7:64:bb:a5:b4:20:11:a1:51:9b:6c:cb:
                    b5:b7:0e:3c:e9:d8:2f:84:ac:8a:69:41:e5:73:d2:
                    b1:39:31:50:25:d5:ca:a0:39:cd:1e:f9:24:8e:7b:
                    00:a5:88:e4:8e:72:8d:2d:1d:d7:03:e5:d1:c5:42:
                    10:0d:3e:c1:69:ac:01:78:07:8c:7e:f1:9b:e4:4f:
                    30:e8:1c:d8:49:64:d3:ae:c0:ff:91:10:c0:73:2b:
                    eb:f1:60:a7:d1:72:d0:e3:c3:26:bf:87:d2:34:60:
                    9c:d8:dd:cf:ab:91:52:99:6b:b0:90:45:1b:4d:fd:
                    f7:9c:09:00:cf:f1:9b:e4:6e:ed:bd:08:54:93:e0:
                    ff:27:c6:ab:6b:23:3b:22:95:9f:f0:46:88:8f:d5:
                    57:73:f9:ea:74:9b:80:10:4c:a2:66:96:e8:ad:6c:
                    08:85:a9:57:9b:5a:01:8f:86:ea:c1:02:e3:6e:50:
                    5d:91:6e:9c:fc:54:be:be:9e:2f:84:3e:e3:ab:a0:
                    f2:08:ec:d7:56:06:e4:50:a0:bf:62:f5:f2:b2:02:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DA:8E:92:C2:3D:C7:E8:30:63:8F:21:99:DE:9A:6F:43:8E:4D:EB
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132362e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:8f:c9:2d:c2:03:eb:f8:fe:e0:11:07:99:5d:24:53:84:af:
         80:6e:f0:b4:34:90:0b:c3:bd:e0:d8:5d:a0:27:97:5e:42:17:
         e9:50:51:7b:bb:76:e6:8b:b0:13:ea:99:5a:74:1c:1d:7e:9c:
         20:ef:8a:70:16:c8:cd:bb:ea:c8:a0:64:28:ba:be:da:01:70:
         72:20:e7:a2:d6:5b:1b:c6:2d:01:80:dd:e5:fe:58:49:f3:71:
         6f:0f:ea:ef:90:b1:59:ef:50:b4:6c:5c:3f:e0:73:27:35:20:
         db:23:80:04:f7:55:17:68:27:1a:9d:50:cf:e5:4a:17:3e:f4:
         19:e3:1c:9f:9a:d0:7d:70:ad:fd:04:5e:51:dd:9d:7c:da:c0:
         9f:53:55:b0:14:26:0a:3b:9d:1a:0b:48:c0:54:8e:e5:33:ae:
         b3:7b:42:da:34:55:1f:6e:a9:e9:43:2c:1e:90:3d:ca:09:96:
         2b:27:a5:ae:92:f0:33:ee:b4:71:02:30:7f:ff:9f:9d:ef:30:
         9a:3c:74:56:d4:d5:a4:c1:26:70:75:fc:03:8e:e5:eb:07:3b:
         c8:21:eb:9f:ac:7f:8f:6c:69:3a:00:f9:20:7e:6d:23:71:ef:
         20:b9:3c:ef:77:f7:d2:80:ff:48:69:01:70:8b:9a:6f:d2:2d:
         b5:15:4f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 22:15:01 2026 by rpki-client