This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38342e302f32322d3232203d3e203238343332.roa
File:                     3137372e3132342e38342e302f32322d3232203d3e203238343332.roa (raw, json)
Hash identifier:          jgt0IgW8n93qqLbsgETNmP05umZPnfNB+4SOg7lwG3c=
Subject key identifier:   FE:95:1E:91:C4:02:1A:80:06:B7:11:11:36:12:EF:E5:44:E9:E3:F2
Certificate issuer:       /CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
Certificate serial:       3AEA1373601CAA5A175C194AEDC30FFC13B59047
Authority key identifier: 68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38342e302f32322d3232203d3e203238343332.roa
Signing time:             Tue 06 Jan 2026 19:47:37 +0000
ROA not before:           Tue 06 Jan 2026 19:42:37 +0000
ROA not after:            Tue 05 Jan 2027 19:47:37 +0000
asID:                     28432
IP address blocks:        177.124.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ea:13:73:60:1c:aa:5a:17:5c:19:4a:ed:c3:0f:fc:13:b5:90:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
        Validity
            Not Before: Jan  6 19:42:37 2026 GMT
            Not After : Jan  5 19:47:37 2027 GMT
        Subject: CN=FE951E91C4021A8006B711113612EFE544E9E3F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:99:89:13:ed:6f:9e:e5:71:54:8f:ff:23:
                    97:94:00:08:b4:49:c8:f7:c0:24:d2:6e:72:22:5c:
                    cf:49:8e:f5:34:71:c6:0a:93:7c:74:72:15:44:25:
                    5e:42:82:8f:1b:75:8d:e6:77:f4:f2:69:21:17:2b:
                    72:8a:d5:ec:14:26:60:c2:40:08:08:5c:6e:7a:ca:
                    c3:c5:70:ea:02:b8:fc:f3:21:ee:7e:40:7e:d1:a8:
                    34:63:58:ea:e9:3f:c8:c3:8b:75:c0:35:ad:b0:56:
                    24:b0:83:ed:66:37:37:48:34:55:c2:63:c6:c6:08:
                    ff:82:a8:ef:84:48:44:2a:ef:2a:6d:9a:30:3c:5f:
                    40:85:5c:a2:1d:f6:ef:d2:ca:9a:94:58:c9:46:1d:
                    ab:bd:2d:b6:fd:b2:40:71:75:c6:b8:24:f6:51:16:
                    0d:49:d4:36:0b:7a:98:30:2e:f2:21:c8:a3:1d:45:
                    5c:c5:d4:1c:51:91:bb:84:f7:26:28:51:24:d0:41:
                    d4:38:cb:d1:3e:96:23:94:3c:30:da:9e:75:b0:d3:
                    62:40:9c:81:83:42:30:4e:58:7b:14:da:38:a6:8c:
                    20:48:d4:91:83:4c:3a:9e:05:85:c6:3e:70:18:59:
                    16:83:a6:c2:3e:f9:98:2e:d8:07:ae:3d:e4:c3:cb:
                    d6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:95:1E:91:C4:02:1A:80:06:B7:11:11:36:12:EF:E5:44:E9:E3:F2
            X509v3 Authority Key Identifier:
                keyid:68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38342e302f32322d3232203d3e203238343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:aa:f7:f5:97:43:fc:cf:68:63:b3:ad:1c:82:d8:4b:38:d9:
         93:ee:9c:35:8f:84:38:d6:74:47:ea:43:85:ff:33:7c:52:eb:
         bc:3f:1c:8e:8a:a0:4a:4f:c8:19:ca:38:9f:31:22:9a:e9:1a:
         fd:16:4e:98:1b:64:7e:6f:fa:17:da:3a:f9:60:cc:be:32:a4:
         40:66:b2:a4:11:1b:c2:1f:d9:43:83:88:69:89:27:7c:81:05:
         35:3e:e8:18:05:b3:33:c3:a2:46:2b:1c:c6:6f:7b:77:77:70:
         8d:16:eb:be:fc:e5:59:d1:d8:84:d4:be:a6:57:fc:a0:18:14:
         74:76:d7:82:8a:84:12:19:3d:a3:1a:41:67:d2:9c:49:b4:bc:
         24:96:18:72:3f:55:e6:a0:98:1d:52:e6:8b:12:4d:92:5f:b9:
         f1:7d:e1:7f:0c:83:75:62:13:ee:30:2e:f5:08:4e:d4:3b:64:
         c7:f1:9b:48:3c:3e:2a:7c:42:f7:f7:18:20:17:ca:ed:97:00:
         de:5d:68:b4:7f:6d:bb:4b:8c:de:d0:83:2a:ea:bc:9e:7f:ec:
         8e:d9:f4:9a:c9:4b:17:c9:2c:8e:d8:50:74:14:b6:1a:4f:27:
         bc:e8:e1:5e:bf:92:92:de:69:b0:0c:13:ba:45:0f:ec:b8:25:
         42:18:e4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:42:35 2026 by rpki-client