This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3137392e34322e3136382e302f32322d3234203d3e203532343336.roa
File:                     3137392e34322e3136382e302f32322d3234203d3e203532343336.roa (raw, json)
Hash identifier:          s+VKTkKuiOlbeJrNpOen2m77+ZmtNzND+rzhntz/1TI=
Subject key identifier:   90:60:4B:C3:4F:7D:13:54:10:81:B3:74:65:CF:F0:09:1C:85:9E:49
Certificate issuer:       /CN=0DD8C886E7D641E553703DC5E196957F1368902C
Certificate serial:       7BC22B1967EA15DF9BEC7F7B65CDD4ECA3DE1FF8
Authority key identifier: 0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3137392e34322e3136382e302f32322d3234203d3e203532343336.roa
Signing time:             Tue 06 Jan 2026 19:28:45 +0000
ROA not before:           Tue 06 Jan 2026 19:23:45 +0000
ROA not after:            Tue 05 Jan 2027 19:28:45 +0000
asID:                     52436
IP address blocks:        179.42.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 09:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c2:2b:19:67:ea:15:df:9b:ec:7f:7b:65:cd:d4:ec:a3:de:1f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD8C886E7D641E553703DC5E196957F1368902C
        Validity
            Not Before: Jan  6 19:23:45 2026 GMT
            Not After : Jan  5 19:28:45 2027 GMT
        Subject: CN=90604BC34F7D13541081B37465CFF0091C859E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:15:8c:94:c0:dc:4a:a2:22:af:bd:78:f3:
                    24:fb:7a:38:67:55:88:89:db:1a:23:30:74:4c:60:
                    3d:b6:37:d2:40:17:f6:b9:cb:19:d5:c8:f2:a7:8e:
                    97:6e:4d:a8:b5:af:e7:16:43:8c:ec:83:bd:62:aa:
                    e1:a4:fc:5a:2b:26:1c:d9:d0:52:55:a8:cc:a3:1b:
                    ea:c1:c5:08:a0:d2:6c:dd:3e:18:74:46:b7:be:de:
                    99:65:bc:c4:26:df:f6:19:74:07:cb:0c:f8:7b:06:
                    22:77:2b:f0:9f:72:27:59:76:9b:7b:1b:c3:e2:ac:
                    a9:77:74:08:4d:49:f1:dc:af:bb:c7:03:a8:28:79:
                    56:07:d7:29:a1:19:5d:df:42:49:90:ac:60:86:d1:
                    ce:f9:54:d8:9d:17:c9:4b:58:d3:a1:61:05:89:1f:
                    92:60:c7:09:1a:23:31:f1:c8:62:08:3d:fe:de:ea:
                    f1:90:b0:42:a9:c3:28:be:9f:3b:ae:d1:38:77:28:
                    a1:87:0e:6d:20:44:f2:df:0c:29:68:50:7b:8e:ef:
                    0c:97:31:15:64:7a:dc:cc:60:28:36:dd:c9:fb:91:
                    37:d5:26:fe:a3:94:23:e4:1f:71:9a:d8:de:c9:32:
                    d8:7e:05:61:3b:b6:28:80:0c:df:cd:ff:8e:1b:9f:
                    26:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:60:4B:C3:4F:7D:13:54:10:81:B3:74:65:CF:F0:09:1C:85:9E:49
            X509v3 Authority Key Identifier:
                keyid:0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3137392e34322e3136382e302f32322d3234203d3e203532343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:fd:14:b6:d0:be:38:78:2e:9d:a6:03:b1:70:e7:bd:8b:9b:
         55:26:cf:67:95:1b:48:dd:86:5d:d6:d6:45:e7:48:98:84:19:
         26:4e:f1:ad:a0:36:a3:02:7a:13:fa:8d:9f:d8:90:72:a0:d4:
         5b:b1:98:8f:b3:4f:26:f2:af:02:06:4f:79:e9:81:ee:cb:fb:
         26:19:eb:7f:af:5b:b5:43:b1:e0:a0:73:9c:80:d7:aa:a2:46:
         6e:dd:2c:b7:d0:7d:2b:f9:63:b5:a9:f9:4a:c7:d6:9e:06:2b:
         60:d5:86:9c:dc:17:a9:02:d8:16:c4:71:64:69:dc:c4:7e:bb:
         8c:d6:45:be:d0:c7:cd:ae:40:c2:f6:f2:b1:ca:d1:2e:e4:5a:
         0b:b1:59:7c:fb:d9:6d:24:1e:ed:3d:a7:28:d2:a8:88:75:7a:
         17:a0:9b:ca:4b:ab:5c:2e:65:4e:23:84:02:63:10:ff:c9:1e:
         a9:6e:ff:5b:3a:61:61:10:71:9c:e7:bd:2e:11:4d:4b:67:3b:
         e5:c4:7b:1d:6e:91:73:21:09:3e:28:71:0d:34:91:ab:af:b6:
         bf:1a:99:0c:b8:28:ea:ed:3f:da:a1:fa:a0:68:e9:24:45:4c:
         7a:64:4b:3f:92:19:d2:87:e5:4b:ef:80:88:2d:50:f8:82:5d:
         55:ab:b7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 17:55:12 2026 by rpki-client