This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3137392e36302e39362e302f32302d3233203d3e203237393630.roa
File:                     3137392e36302e39362e302f32302d3233203d3e203237393630.roa (raw, json)
Hash identifier:          sm/tjP/XjIgtW3x2GJlSJDnSKppSiHdqfWH6lI7y/jc=
Subject key identifier:   5F:2C:D5:AC:4D:76:86:A2:15:A9:A5:52:AF:08:F3:6A:29:95:41:0C
Certificate issuer:       /CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
Certificate serial:       45F8B1CC22331FF6C36EE31D22A18F10F73ABF96
Authority key identifier: DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3137392e36302e39362e302f32302d3233203d3e203237393630.roa
Signing time:             Tue 06 Jan 2026 19:25:48 +0000
ROA not before:           Tue 06 Jan 2026 19:20:48 +0000
ROA not after:            Tue 05 Jan 2027 19:25:48 +0000
asID:                     27960
IP address blocks:        179.60.96.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 16:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f8:b1:cc:22:33:1f:f6:c3:6e:e3:1d:22:a1:8f:10:f7:3a:bf:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
        Validity
            Not Before: Jan  6 19:20:48 2026 GMT
            Not After : Jan  5 19:25:48 2027 GMT
        Subject: CN=5F2CD5AC4D7686A215A9A552AF08F36A2995410C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:11:7c:7b:39:7e:ec:b9:3c:19:6d:e3:78:
                    c4:49:3b:82:77:e5:12:24:a2:84:09:e9:ec:29:12:
                    73:47:6e:dd:c3:af:6e:5f:9e:49:c6:bc:41:b6:6d:
                    3a:cd:db:76:cd:77:de:de:c6:22:10:0c:fa:5e:07:
                    bb:64:33:b3:50:b9:90:ec:de:61:aa:38:60:c0:74:
                    5d:65:d3:42:e7:e7:26:14:43:34:a2:77:bc:75:66:
                    d7:96:55:06:4d:76:33:74:14:7f:93:b3:5b:f8:e0:
                    64:4e:09:48:8c:5b:75:4d:a1:4d:04:93:f4:40:d4:
                    2b:8a:7f:05:bd:68:44:b3:a9:84:f0:c3:e0:70:c6:
                    c7:33:12:0f:79:35:ec:4a:ed:b5:ae:e5:7a:40:7b:
                    d1:d4:28:a2:55:77:a2:f7:0c:74:88:e2:59:3e:80:
                    24:d0:8d:c3:d3:17:8b:67:6f:ba:32:c2:6a:b1:a3:
                    2b:b7:d2:66:0f:73:25:3a:95:33:26:b6:39:d4:4a:
                    96:2c:ba:c0:e2:71:8e:83:f3:ac:44:0b:6a:96:b0:
                    03:81:a5:3e:b9:d3:b8:f0:dd:d5:09:97:c6:11:2c:
                    a3:0e:9d:d9:40:86:3e:f9:60:f8:8e:3f:7a:42:26:
                    5b:92:52:95:d4:e8:87:35:52:64:0f:6f:78:71:13:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2C:D5:AC:4D:76:86:A2:15:A9:A5:52:AF:08:F3:6A:29:95:41:0C
            X509v3 Authority Key Identifier:
                keyid:DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3137392e36302e39362e302f32302d3233203d3e203237393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:c6:9c:31:eb:3c:de:35:5e:3c:ea:a2:2c:dd:41:1d:bc:aa:
         e5:84:4c:f9:b4:f7:67:8f:5f:ac:f6:5c:3c:00:58:8f:c1:5b:
         da:16:72:8b:95:ec:cd:5d:3c:32:c2:e1:6e:27:25:ed:cb:e7:
         46:e8:8b:5c:c2:be:48:4d:1e:b3:50:a0:a2:28:e4:82:a5:d9:
         d4:e3:c2:55:f2:86:77:8e:43:ed:07:c9:66:37:6f:1f:9c:47:
         46:7d:d4:ac:7d:63:6c:57:de:8c:22:d3:46:fd:01:49:a2:a9:
         cb:86:54:eb:d8:30:1a:ad:55:46:cb:a3:ad:07:ed:ba:46:50:
         e3:78:e6:01:ab:a0:0c:17:1f:8f:f3:c9:72:4f:b5:71:0b:90:
         ae:9c:33:23:15:27:7d:c8:80:93:12:b1:a7:80:7c:3f:b2:32:
         bf:a4:fd:d2:ce:fd:3d:17:c3:cb:e2:5c:f4:9b:51:f9:65:7f:
         78:6f:ec:be:cd:78:99:90:37:ba:23:37:42:13:d1:81:00:9d:
         b3:d4:91:fc:b2:4c:77:5e:21:fd:fa:ef:28:a1:d0:18:ca:71:
         7d:4f:e9:64:94:2b:2f:9f:76:54:ae:8c:43:7f:cc:05:cf:7c:
         f8:9b:7a:90:8c:6c:ba:49:24:fb:97:60:93:ba:ed:93:4a:dd:
         fc:26:45:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:54:54 2026 by rpki-client