This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e39352e302f32342d3234203d3e20323639383035.roa
File:                     3137392e34332e39352e302f32342d3234203d3e20323639383035.roa (raw, json)
Hash identifier:          JzdH3Wzqm0bsvHWYmnkxt9TrLpQKhPwifUo4LOl4Yms=
Subject key identifier:   E8:30:9D:C2:AC:4F:41:25:98:2A:AD:FF:F4:DA:7B:3F:5B:32:1E:73
Certificate issuer:       /CN=9939CB5D6D59281BA93C774A966843C53619C202
Certificate serial:       2C19DADE03B418A71992DD1E589B3079AE9BEEB1
Authority key identifier: 99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e39352e302f32342d3234203d3e20323639383035.roa
Signing time:             Tue 06 Jan 2026 19:08:57 +0000
ROA not before:           Tue 06 Jan 2026 19:03:57 +0000
ROA not after:            Tue 05 Jan 2027 19:08:57 +0000
asID:                     269805
IP address blocks:        179.43.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:19:da:de:03:b4:18:a7:19:92:dd:1e:58:9b:30:79:ae:9b:ee:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9939CB5D6D59281BA93C774A966843C53619C202
        Validity
            Not Before: Jan  6 19:03:57 2026 GMT
            Not After : Jan  5 19:08:57 2027 GMT
        Subject: CN=E8309DC2AC4F4125982AADFFF4DA7B3F5B321E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:0c:47:d7:fb:f9:7d:14:1e:5c:a8:fe:f3:
                    c5:d2:76:22:66:1e:98:0c:23:3f:c2:b2:fd:cf:01:
                    da:ce:c7:ee:30:71:55:f5:b1:d2:b8:e5:a9:65:25:
                    48:2e:31:0a:7b:1e:1b:c6:f2:ad:7d:57:76:06:dd:
                    ff:5c:d8:48:10:4a:22:90:da:3b:85:c9:5c:b4:18:
                    22:d7:a3:b7:1f:fa:5e:ff:6b:a4:a1:ac:70:02:ec:
                    ff:78:87:2c:89:48:1a:84:43:a2:31:d3:b3:a6:a3:
                    48:a3:d8:31:77:ce:22:24:ae:72:29:ab:b4:69:7e:
                    de:9c:f3:69:be:aa:08:db:93:44:8d:04:bc:e4:40:
                    c5:a5:ab:c3:18:d8:4d:90:64:73:36:92:6b:1c:64:
                    2e:b3:a2:ec:5d:84:1e:2c:88:8b:df:81:19:35:29:
                    a0:74:02:f8:1b:07:0d:7a:94:23:a0:f7:da:8b:5e:
                    52:df:f3:33:c8:be:2e:8f:1a:79:da:e1:e7:2e:d7:
                    7a:7f:9d:14:06:8c:d9:60:33:a0:71:3d:f3:76:2d:
                    8c:d8:d0:01:a3:df:3e:fd:5e:55:83:82:5b:fd:b7:
                    51:12:e0:6a:17:1e:ca:fa:e2:00:9e:68:41:36:5a:
                    3a:9f:c7:53:54:ca:5a:05:f8:48:1f:4b:3b:5c:63:
                    e8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:30:9D:C2:AC:4F:41:25:98:2A:AD:FF:F4:DA:7B:3F:5B:32:1E:73
            X509v3 Authority Key Identifier:
                keyid:99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e39352e302f32342d3234203d3e20323639383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ef:98:03:46:70:95:60:f6:f5:c5:26:4b:7e:fc:26:e8:cb:
         54:ac:92:65:20:e4:37:91:27:32:df:06:da:9c:d2:7a:ff:da:
         07:74:42:3c:f6:13:79:a4:d2:46:4a:4f:96:8c:9e:ec:12:01:
         10:7a:94:ee:db:28:47:4d:87:c5:26:c8:ef:f7:d2:11:f4:3a:
         93:a5:e5:a1:dd:36:ce:9f:54:36:91:d2:df:6d:42:69:5c:1d:
         af:b6:da:f8:18:bb:54:ec:c1:65:98:04:94:c8:7d:b8:32:1c:
         1b:d5:63:99:52:ba:a5:8c:e4:4d:24:8f:48:c4:4f:a4:08:2e:
         19:b9:5a:20:8b:02:c9:75:0c:b9:b2:73:04:d8:69:f5:74:90:
         52:c4:89:bb:0d:19:08:4d:35:22:60:9e:3e:f8:b9:97:d2:00:
         12:01:60:e7:86:32:be:31:b5:09:c8:8b:0e:b0:58:48:ed:60:
         3f:77:ac:45:23:ba:2d:dd:1f:69:79:4b:f2:39:f0:65:3b:af:
         0e:b1:5e:ca:bd:89:33:10:d4:63:c1:b9:83:f4:ac:ca:43:0c:
         ec:71:b2:06:a8:75:e6:bb:ef:bd:b9:19:3e:8f:22:35:75:43:
         fc:8e:b0:ac:85:2d:c4:c5:9a:4b:74:1f:bc:43:6e:72:ea:d5:
         90:e0:3a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:42:48 2026 by rpki-client