This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38382e302f32322d3232203d3e20323637383537.roa
File:                     3137302e37392e38382e302f32322d3232203d3e20323637383537.roa (raw, json)
Hash identifier:          2sY9jnNhVQfuSSHwY4gILu14Y6FFIX6kOv9/GKqeCQY=
Subject key identifier:   C9:09:29:7B:B3:00:27:A8:C5:1B:98:A9:63:A9:34:9F:D5:F2:C8:32
Certificate issuer:       /CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
Certificate serial:       4D873D8513A479A621FC327D40DB445EAAC08F59
Authority key identifier: 0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38382e302f32322d3232203d3e20323637383537.roa
Signing time:             Tue 06 Jan 2026 19:22:48 +0000
ROA not before:           Tue 06 Jan 2026 19:17:48 +0000
ROA not after:            Tue 05 Jan 2027 19:22:48 +0000
asID:                     267857
IP address blocks:        170.79.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 08:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:87:3d:85:13:a4:79:a6:21:fc:32:7d:40:db:44:5e:aa:c0:8f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
        Validity
            Not Before: Jan  6 19:17:48 2026 GMT
            Not After : Jan  5 19:22:48 2027 GMT
        Subject: CN=C909297BB30027A8C51B98A963A9349FD5F2C832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:e8:f0:36:32:4e:9b:7a:b0:2e:a8:3a:bb:
                    bd:14:a6:f0:c6:9a:43:65:04:cf:91:11:de:34:e2:
                    37:01:eb:d9:b3:76:9b:e2:1e:8c:7a:f9:39:f3:83:
                    0e:aa:ff:a5:07:0b:3a:38:d7:79:e0:88:7e:8d:44:
                    99:5e:41:ec:4d:34:e8:e5:31:2f:7d:4a:4f:50:82:
                    df:6c:26:75:67:cf:48:ca:3c:33:5b:10:f5:10:04:
                    15:4e:20:87:a3:d3:a7:a6:b1:1b:36:a4:4e:e8:90:
                    4d:19:a8:ee:86:11:f9:c5:d2:48:f8:50:2a:d6:c5:
                    4d:3e:b7:3c:f2:29:06:de:b8:e3:b2:d4:ac:2c:d4:
                    0a:95:b9:2e:01:44:60:a7:b5:37:f7:93:0f:ad:68:
                    97:ea:c7:7f:90:06:24:26:b4:30:a4:c6:91:29:41:
                    7a:01:53:72:7f:62:68:1b:07:39:12:25:6c:7d:a0:
                    51:9a:d4:e0:31:6b:50:e2:0a:91:cf:9e:a9:29:0e:
                    8a:d6:6a:b5:e7:7f:17:50:b8:89:6e:04:e0:a9:68:
                    4b:6c:e3:b2:1a:3f:9c:10:90:d8:e2:a9:98:92:57:
                    c9:e0:67:62:14:b4:c7:f1:20:07:89:21:5e:f7:34:
                    be:ba:22:20:8b:2e:c9:0c:79:2d:d9:10:57:84:99:
                    73:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:09:29:7B:B3:00:27:A8:C5:1B:98:A9:63:A9:34:9F:D5:F2:C8:32
            X509v3 Authority Key Identifier:
                keyid:0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38382e302f32322d3232203d3e20323637383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:40:a9:ba:76:f6:4a:ac:ea:ab:e1:24:43:f1:58:bb:19:4d:
         3e:81:a3:ef:0c:71:c6:09:f0:ae:4c:b8:5f:38:5b:35:1a:32:
         7b:4e:20:dd:ae:86:d7:59:a6:37:2f:5a:63:d8:4c:d8:40:35:
         c1:9d:4d:07:c9:cc:4c:d0:b3:0c:8f:cf:cf:be:d9:c0:7f:ae:
         b9:9a:1d:0b:9d:fb:df:2e:d2:ed:74:f1:25:dc:ba:9c:b9:c4:
         de:a9:22:97:c7:34:88:e0:49:cc:30:3b:29:1f:70:6c:c3:c8:
         b0:ce:37:c7:99:b9:a5:99:3c:55:41:fd:b1:79:6a:f5:c6:b1:
         3d:1e:3d:be:73:8c:06:f7:d7:b6:b2:19:a0:08:05:00:9e:37:
         e3:42:54:62:c8:cd:a2:41:a5:78:82:2b:be:65:9b:37:3f:37:
         33:5f:ae:ca:e4:27:22:03:77:1c:21:32:11:c5:62:d8:1e:21:
         85:dc:f0:90:6e:21:ee:94:33:40:52:ce:cf:f6:c9:01:06:f4:
         35:02:e4:44:4d:29:0c:41:3d:40:f8:3d:ce:2b:c5:4f:fb:4f:
         15:9e:d5:5f:54:cb:15:74:f1:be:44:0f:df:96:17:88:43:22:
         f8:4c:85:1d:b6:dd:d0:59:c5:c9:37:53:cb:7b:27:cc:56:37:
         08:17:13:08
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTYc9hROkeaYh/DJ9QNtEXqrAj1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENDNUFBNEJFREVBOUE4M0JERTg4MjJBNzc0NzIxMTBC
N0E1N0M3NjAeFw0yNjAxMDYxOTE3NDhaFw0yNzAxMDUxOTIyNDhaMDMxMTAvBgNV
BAMTKEM5MDkyOTdCQjMwMDI3QThDNTFCOThBOTYzQTkzNDlGRDVGMkM4MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGXejwNjJOm3qwLqg6u70UpvDG
mkNlBM+REd404jcB69mzdpviHox6+Tnzgw6q/6UHCzo413ngiH6NRJleQexNNOjl
MS99Sk9Qgt9sJnVnz0jKPDNbEPUQBBVOIIej06emsRs2pE7okE0ZqO6GEfnF0kj4
UCrWxU0+tzzyKQbeuOOy1Kws1AqVuS4BRGCntTf3kw+taJfqx3+QBiQmtDCkxpEp
QXoBU3J/YmgbBzkSJWx9oFGa1OAxa1DiCpHPnqkpDorWarXnfxdQuIluBOCpaEts
47IaP5wQkNjiqZiSV8ngZ2IUtMfxIAeJIV73NL66IiCLLskMeS3ZEFeEmXNdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUyQkpe7MAJ6jFG5ipY6k0n9XyyDIwHwYDVR0j
BBgwFoAUDMWqS+3qmoO96IIqd0chELelfHYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yODM4OUI1RTNCMThCN0RBRjUyRDAzMzUzRERFRDI5NUE4
MDk2OTY0M0Q5MkREOUQ4MkRBRUZFOUQwQjczOTc1LzAvMENDNUFBNEJFREVBOUE4
M0JERTg4MjJBNzc0NzIxMTBCN0E1N0M3Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQ0M1QUE0QkVERUE5QTgzQkRF
ODgyMkE3NzQ3MjExMEI3QTU3Qzc2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjgzODlCNUUzQjE4QjdEQUY1MkQwMzM1M0RERUQyOTVBODA5Njk2NDNE
OTJERDlEODJEQUVGRTlEMEI3Mzk3NS8wLzMxMzczMDJlMzczOTJlMzgzODJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNzM4MzUzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqpPWDAN
BgkqhkiG9w0BAQsFAAOCAQEAr0Cpunb2Sqzqq+EkQ/FYuxlNPoGj7wxxxgnwrky4
XzhbNRoye04g3a6G11mmNy9aY9hM2EA1wZ1NB8nMTNCzDI/Pz77ZwH+uuZodC537
3y7S7XTxJdy6nLnE3qkil8c0iOBJzDA7KR9wbMPIsM43x5m5pZk8VUH9sXlq9cax
PR49vnOMBvfXtrIZoAgFAJ4340JUYsjNokGleIIrvmWbNz83M1+uyuQnIgN3HCEy
EcVi2B4hhdzwkG4h7pQzQFLOz/bJAQb0NQLkRE0pDEE9QPg9zivFT/tPFZ7VX1TL
FXTxvkQP35YXiEMi+EyFHbbd0FnFyTdTy3snzFY3CBcTCA==
-----END CERTIFICATE-----
Generated at Mon Jan 12 02:36:43 2026 by rpki-client