This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/3137372e3132362e33322e302f32322d3232203d3e20323731383032.roa
File:                     3137372e3132362e33322e302f32322d3232203d3e20323731383032.roa (raw, json)
Hash identifier:          1AqUUbxMuSLcFpANAXuxMveXogHwfHhKasB4w85yDBM=
Subject key identifier:   FC:78:34:64:A8:5A:AB:4B:F1:B2:11:BC:26:ED:5B:5C:5D:75:94:92
Certificate issuer:       /CN=F54F6694D527A6831B6534FF31AE6F8C3BCCAADA
Certificate serial:       410E0C44B13B9703FF534FB9F43E969E669A26D9
Authority key identifier: F5:4F:66:94:D5:27:A6:83:1B:65:34:FF:31:AE:6F:8C:3B:CC:AA:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/3137372e3132362e33322e302f32322d3232203d3e20323731383032.roa
Signing time:             Tue 06 Jan 2026 19:06:56 +0000
ROA not before:           Tue 06 Jan 2026 19:01:56 +0000
ROA not after:            Tue 05 Jan 2027 19:06:56 +0000
asID:                     271802
IP address blocks:        177.126.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0e:0c:44:b1:3b:97:03:ff:53:4f:b9:f4:3e:96:9e:66:9a:26:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F54F6694D527A6831B6534FF31AE6F8C3BCCAADA
        Validity
            Not Before: Jan  6 19:01:56 2026 GMT
            Not After : Jan  5 19:06:56 2027 GMT
        Subject: CN=FC783464A85AAB4BF1B211BC26ED5B5C5D759492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:be:90:e7:11:08:5b:c6:d0:2c:49:56:11:
                    24:9c:77:44:1c:2a:04:2e:ec:7f:a0:93:94:fb:65:
                    1f:6c:dd:1e:7f:21:b2:af:e0:c4:4e:c8:7e:89:38:
                    1d:9d:38:c7:5b:e9:f1:d5:be:85:ab:62:c6:f7:3f:
                    16:24:71:06:ec:fa:82:97:f5:46:1e:e2:e1:61:58:
                    d5:1b:33:90:57:e5:95:9b:84:60:64:d2:73:25:6f:
                    a0:64:f2:be:af:2e:87:9d:24:ea:60:dc:38:d6:00:
                    f2:a9:ba:75:0d:e9:00:9e:9a:c4:01:94:be:d2:b8:
                    7c:04:7c:38:4f:0d:0f:a2:ce:d3:b9:0e:3c:0d:60:
                    cb:84:54:05:fa:f3:17:59:4d:2d:b2:26:00:af:f0:
                    b8:7d:e4:2d:3c:f6:ab:cc:44:a2:9a:88:61:8a:79:
                    95:3f:37:50:1c:c5:c4:26:08:ec:b2:84:2d:c2:ab:
                    1f:3e:5c:31:0d:16:20:63:4b:32:ae:7c:98:75:89:
                    01:37:e5:03:cb:81:80:8f:96:06:87:9b:7d:ff:f5:
                    b2:85:45:22:60:bb:b8:c4:76:0a:b1:31:e8:45:b5:
                    6f:90:41:f8:f8:15:4f:e7:57:b5:12:14:7d:be:30:
                    1d:d9:f6:f0:23:ed:44:cf:b2:3e:b2:71:90:8f:9a:
                    dd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:78:34:64:A8:5A:AB:4B:F1:B2:11:BC:26:ED:5B:5C:5D:75:94:92
            X509v3 Authority Key Identifier:
                keyid:F5:4F:66:94:D5:27:A6:83:1B:65:34:FF:31:AE:6F:8C:3B:CC:AA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/3137372e3132362e33322e302f32322d3232203d3e20323731383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:a6:b6:fe:5a:7d:35:2e:f7:ed:35:05:81:b3:4c:fe:fa:27:
         7b:da:e1:ab:77:24:d3:f7:d4:f8:05:ff:cf:da:f4:e6:bf:42:
         95:4a:fd:58:d8:70:1e:b6:26:e3:1c:2d:0c:15:4b:46:4f:4d:
         2c:37:4d:c0:4e:dc:d8:9c:64:b3:eb:70:02:4a:8c:c9:44:f7:
         4a:3f:d5:ad:56:00:2f:b2:68:a8:2d:47:89:bb:24:2e:bf:d0:
         53:56:a2:8a:fa:fa:af:94:d4:1b:47:22:cf:f1:5b:6a:a7:3d:
         d5:4e:3a:e5:c5:49:ab:e9:bb:21:94:70:bc:eb:29:9a:2a:66:
         fb:02:88:a7:fd:16:38:68:62:53:51:a0:63:aa:cd:a6:26:72:
         7f:4d:51:98:dc:26:c8:f2:5b:ca:08:36:4c:1c:f2:b3:e6:0f:
         5c:95:14:c0:15:a8:f6:84:8a:1e:62:15:50:87:8c:f4:a7:1c:
         3c:7b:eb:57:f5:76:ec:b2:69:90:a5:56:69:0a:58:d5:08:23:
         57:97:c5:8d:86:3c:c3:7f:f5:62:37:79:b0:53:21:10:3b:c5:
         85:0c:72:3e:df:38:2e:c0:36:4a:7d:fd:c7:18:79:1a:65:b8:
         7a:7b:e2:ad:22:39:db:f8:c8:56:84:6e:c3:90:20:fa:c4:3c:
         f6:cc:d6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:01:13 2026 by rpki-client