This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38372e302f32342d3234203d3e20323730313532.roa
File:                     3137372e3132342e38372e302f32342d3234203d3e20323730313532.roa (raw, json)
Hash identifier:          g9GGnxyXzyk68MkHss2gT7ilVFeIHBDMRf1RH1yXf4Y=
Subject key identifier:   99:8F:69:BE:75:54:36:13:90:6C:13:28:DF:E1:57:2E:F3:53:BD:D0
Certificate issuer:       /CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
Certificate serial:       7FF92C54363A3249E1D8720F1AD3E0EDC9868172
Authority key identifier: 68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38372e302f32342d3234203d3e20323730313532.roa
Signing time:             Tue 06 Jan 2026 19:47:38 +0000
ROA not before:           Tue 06 Jan 2026 19:42:38 +0000
ROA not after:            Tue 05 Jan 2027 19:47:38 +0000
asID:                     270152
IP address blocks:        177.124.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 11:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f9:2c:54:36:3a:32:49:e1:d8:72:0f:1a:d3:e0:ed:c9:86:81:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
        Validity
            Not Before: Jan  6 19:42:38 2026 GMT
            Not After : Jan  5 19:47:38 2027 GMT
        Subject: CN=998F69BE75543613906C1328DFE1572EF353BDD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:73:86:6e:5c:48:aa:dd:e7:1c:35:41:83:
                    7a:87:7c:e6:c6:67:be:1a:2f:0c:f1:42:e9:bb:45:
                    52:16:b1:f2:4c:d0:b4:5f:ee:b2:a4:6c:6d:d2:c3:
                    75:43:bd:12:a6:06:a1:cf:e1:32:37:90:6a:29:91:
                    e9:ff:3a:53:af:5a:e7:02:51:76:b9:07:37:91:c9:
                    f6:af:cc:07:d2:61:0f:7e:02:ad:1e:0a:88:d9:2f:
                    f2:03:02:eb:b6:cc:9b:9d:50:b1:45:e1:67:66:51:
                    96:15:f4:6a:34:c7:31:d7:cf:f9:46:e7:b6:d8:de:
                    97:c4:c3:eb:a8:f5:72:1a:8a:4f:11:a1:56:2d:50:
                    d0:a7:29:1e:d0:12:4e:67:11:25:70:f2:83:ff:18:
                    b9:95:ac:a5:ca:2e:96:1d:01:45:89:e5:50:00:64:
                    69:1e:b6:25:93:ff:fb:89:37:4d:89:d2:ea:bd:fe:
                    99:62:1d:3a:57:02:74:e6:ec:76:5f:1b:bc:04:41:
                    89:34:79:59:a2:f6:95:17:6a:58:e6:33:8b:b8:32:
                    f3:f1:d6:75:13:13:39:84:a4:2d:51:ae:b8:03:e7:
                    77:28:ae:31:b6:9b:58:5c:f5:bf:4a:6f:4a:4e:04:
                    48:42:81:34:fb:c6:b3:e0:62:86:55:94:2f:de:97:
                    cf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8F:69:BE:75:54:36:13:90:6C:13:28:DF:E1:57:2E:F3:53:BD:D0
            X509v3 Authority Key Identifier:
                keyid:68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38372e302f32342d3234203d3e20323730313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:62:1c:f6:e7:6d:b3:30:c7:32:b9:87:b4:15:3b:28:9a:a9:
         9d:ff:90:59:a7:2c:20:53:41:b4:22:ab:20:3f:34:b1:e7:59:
         15:ca:2b:71:dc:9b:2a:d7:57:d8:70:b1:7e:4c:a7:c3:be:61:
         e1:07:b7:a7:dd:8f:68:d4:29:d0:d2:81:e5:35:88:5d:cc:3b:
         dc:98:89:08:a9:e4:48:8f:ed:77:d3:40:56:32:6e:8e:b3:80:
         ff:8e:5e:e3:97:87:ca:e4:d1:1b:85:4c:65:9f:8b:8d:a4:4d:
         25:e3:4d:a9:cc:e3:bf:14:0a:de:94:30:5c:a6:08:ec:09:87:
         1e:de:12:ce:82:e2:ed:e4:d0:dd:49:61:40:81:4f:5a:ea:37:
         76:fd:0c:02:a1:e8:0d:76:65:ab:32:34:27:ae:75:06:e1:5b:
         86:63:bc:0c:15:a9:d3:97:e8:d1:e7:14:74:78:4d:a9:f1:ca:
         b9:78:78:b8:36:fc:49:ff:cc:2f:be:bb:f0:39:4a:5b:71:c8:
         3e:da:d4:dd:75:e0:09:30:31:72:a5:5f:58:45:ac:a5:74:3d:
         3c:12:67:cd:af:f0:ac:bb:13:aa:fc:94:66:10:24:4e:27:e2:
         64:c6:50:29:cd:03:74:61:e5:80:4c:5b:b1:3a:44:43:3b:90:
         f0:4c:ab:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:29:51 2026 by rpki-client