This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3137392e36332e3235322e302f32322d3234203d3e20323633363836.roa
File:                     3137392e36332e3235322e302f32322d3234203d3e20323633363836.roa (raw, json)
Hash identifier:          hP9OsdM9hJB6vsG25SyOGb9cg5FVQcTiCBX9lF7JPcg=
Subject key identifier:   EF:E7:94:42:1E:E7:39:29:C1:90:C8:03:B8:6A:F4:E3:56:71:EF:32
Certificate issuer:       /CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
Certificate serial:       2DEBFE47A5DFA3B379821F193C6B344C6915C0FB
Authority key identifier: 15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3137392e36332e3235322e302f32322d3234203d3e20323633363836.roa
Signing time:             Tue 06 Jan 2026 19:05:32 +0000
ROA not before:           Tue 06 Jan 2026 19:00:32 +0000
ROA not after:            Tue 05 Jan 2027 19:05:32 +0000
asID:                     263686
IP address blocks:        179.63.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 12:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:eb:fe:47:a5:df:a3:b3:79:82:1f:19:3c:6b:34:4c:69:15:c0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
        Validity
            Not Before: Jan  6 19:00:32 2026 GMT
            Not After : Jan  5 19:05:32 2027 GMT
        Subject: CN=EFE794421EE73929C190C803B86AF4E35671EF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:73:87:80:95:6b:a8:cd:b9:b8:22:ed:15:
                    8e:df:ef:d7:db:8a:cf:8b:49:9a:35:96:4c:a9:a0:
                    87:d3:ab:33:9d:19:d4:25:fd:e8:5e:98:1d:df:2b:
                    c8:fe:bf:0a:ed:6f:f1:39:4a:f6:34:b3:5d:eb:72:
                    a3:eb:02:c4:3f:7b:c4:c1:9e:f1:8c:72:e4:99:8f:
                    41:0e:cd:36:2e:3d:83:36:66:5c:fd:97:1e:75:11:
                    79:d7:f2:f3:5c:08:7a:8c:79:d0:b8:4b:11:a1:65:
                    7c:a3:22:0a:1b:74:fd:ee:0f:b0:3e:c8:49:0c:15:
                    62:8d:e1:8e:ef:f8:97:ae:cd:52:21:be:d4:5e:bb:
                    bf:4e:79:b0:f2:7a:ee:0e:25:72:a5:34:d2:6f:d3:
                    40:7c:b4:42:bc:6b:ba:0e:17:e3:33:f5:2f:b3:55:
                    57:e0:f3:ae:6f:a1:73:a0:f4:55:13:73:fe:fe:64:
                    e6:0f:bb:74:d9:19:2e:5e:4a:61:b7:2b:5e:96:01:
                    3c:c9:57:7a:00:73:9f:9a:88:0a:12:3e:48:79:31:
                    af:d6:b1:eb:7b:43:b0:e0:79:74:ce:ac:8c:c8:4f:
                    b0:59:1d:5e:d4:24:80:ea:32:35:73:df:f7:4b:c8:
                    1b:77:dd:c7:f2:61:97:92:ee:38:f4:2a:5c:5e:be:
                    2d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E7:94:42:1E:E7:39:29:C1:90:C8:03:B8:6A:F4:E3:56:71:EF:32
            X509v3 Authority Key Identifier:
                keyid:15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3137392e36332e3235322e302f32322d3234203d3e20323633363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:6d:10:5a:32:bd:5a:81:88:19:a4:4f:2b:ab:8c:40:33:c1:
         d3:25:da:4a:02:52:00:ed:b4:34:a8:78:e8:0e:4a:5a:8b:e3:
         74:97:dd:a9:65:76:5c:04:11:2b:f6:37:70:65:ec:d6:85:de:
         c1:fa:0e:e4:bc:02:04:96:f2:63:e3:79:3f:ef:9c:73:ee:86:
         bb:27:be:4c:96:dc:56:29:0a:3d:b4:a1:5e:b3:38:22:ca:d1:
         00:f5:72:4b:34:56:61:d5:67:8c:47:d0:f8:3d:4b:4b:50:fe:
         60:62:01:cb:bd:44:31:d3:13:a7:db:a9:65:a2:1e:25:16:e0:
         07:5f:35:9c:56:f3:df:af:00:a9:6a:ba:00:c0:9c:1e:8a:2f:
         17:61:7d:2a:8e:52:64:ed:fb:87:c1:f6:ae:c6:7c:9d:96:bd:
         ea:c9:c0:82:af:ef:36:8a:42:dd:99:58:f6:fd:11:6c:2c:4f:
         d7:f3:6e:97:61:40:09:a2:f2:26:e4:f5:ca:e0:ef:54:bd:34:
         84:7a:7b:66:0c:b1:33:f3:91:f8:ca:79:bc:06:64:bc:71:52:
         c6:2c:7c:e2:c9:ac:03:ee:09:69:c5:e5:f3:51:c8:87:c6:b5:
         cb:ca:16:64:d5:f6:5f:ed:a1:06:03:6f:9c:84:3e:28:d8:f3:
         3a:3e:31:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:08:38 2026 by rpki-client