This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/3137392e36302e3230382e302f32322d3234203d3e203532343931.roa
File:                     3137392e36302e3230382e302f32322d3234203d3e203532343931.roa (raw, json)
Hash identifier:          HTg89WH5inTSH0w3xQ7f4hRwNyNXyMHg5JYTB8OMgR8=
Subject key identifier:   37:C3:F1:CC:37:43:40:6B:2F:BA:03:06:9E:94:A8:FF:40:96:57:A3
Certificate issuer:       /CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5
Certificate serial:       419F6C4B630B2FBCC8CBF8926E43410C7DE4747B
Authority key identifier: 89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/3137392e36302e3230382e302f32322d3234203d3e203532343931.roa
Signing time:             Tue 06 Jan 2026 18:57:25 +0000
ROA not before:           Tue 06 Jan 2026 18:52:25 +0000
ROA not after:            Tue 05 Jan 2027 18:57:25 +0000
asID:                     52491
IP address blocks:        179.60.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9f:6c:4b:63:0b:2f:bc:c8:cb:f8:92:6e:43:41:0c:7d:e4:74:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5
        Validity
            Not Before: Jan  6 18:52:25 2026 GMT
            Not After : Jan  5 18:57:25 2027 GMT
        Subject: CN=37C3F1CC3743406B2FBA03069E94A8FF409657A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0f:76:1b:77:35:90:b0:1e:c3:6e:e1:03:0f:
                    52:88:26:7c:27:af:eb:08:77:88:08:b9:70:b4:bc:
                    e0:f4:df:f5:fa:07:e5:34:ba:c9:56:81:a1:00:ff:
                    8e:56:c2:da:99:66:ec:aa:06:91:38:f1:e7:f1:20:
                    b4:ac:6e:a5:3f:29:da:96:25:14:f4:49:38:03:fa:
                    57:4f:dd:ac:2e:30:c8:6f:76:ea:09:24:72:ff:98:
                    56:20:c9:e4:a2:7c:b9:9b:d2:43:7d:78:ff:7f:d3:
                    25:6c:51:fb:c7:9f:69:cc:b0:6c:6b:55:c3:b9:8e:
                    de:0b:6e:18:6e:88:35:d8:0e:89:fb:44:9d:e3:ec:
                    fd:39:e0:68:86:e8:c0:77:89:c2:11:69:9f:f4:a5:
                    eb:39:39:4b:9e:23:f8:0e:a3:8e:d6:df:60:ac:32:
                    6e:1a:a8:ab:ed:87:63:e5:65:e9:2b:04:14:40:53:
                    fe:04:99:60:94:bc:54:5a:f5:53:2d:73:aa:3a:0f:
                    8d:ce:81:fe:97:ce:81:5e:87:01:96:ae:24:8f:ea:
                    79:a5:44:43:03:55:75:44:71:29:af:61:7e:a1:02:
                    69:9a:e0:07:39:b6:7a:86:00:d0:e4:3f:5d:e3:67:
                    ee:a0:42:61:38:4a:fd:c5:65:fa:c9:62:b4:80:73:
                    7e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C3:F1:CC:37:43:40:6B:2F:BA:03:06:9E:94:A8:FF:40:96:57:A3
            X509v3 Authority Key Identifier:
                keyid:89:DB:5C:0D:C7:C9:85:30:15:C2:B6:D8:B0:5A:1F:DD:0A:A2:EB:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89DB5C0DC7C9853015C2B6D8B05A1FDD0AA2EBA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD39BAECFB080795B7382E59EDF46CF2BF4A43F77005A46704A2329523F16A99/0/3137392e36302e3230382e302f32322d3234203d3e203532343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:62:3a:b9:67:3c:0d:f5:83:af:19:07:3c:38:75:f2:84:de:
         94:ef:a4:09:00:29:cc:09:c4:28:93:98:74:7d:74:b3:4f:67:
         84:af:10:5f:b7:70:0e:73:f2:09:bc:ee:10:00:d1:1a:c6:be:
         b3:08:50:82:67:bd:3a:a9:1c:82:33:49:8f:93:b1:cf:d6:ed:
         07:4e:a4:80:57:ad:29:d7:38:d5:82:e8:6f:4f:ee:5d:d5:f8:
         e3:f5:93:b3:9e:b6:d0:12:28:9a:4e:46:2e:b6:5f:10:04:9e:
         4f:4f:09:f7:40:7b:84:65:07:ba:12:7b:21:f9:0b:34:3d:49:
         6d:98:3e:6d:4c:0f:be:0c:30:12:89:55:1c:aa:8f:20:47:93:
         b4:2d:17:c8:a8:2b:9d:de:07:d2:21:b9:92:2c:37:80:cd:52:
         48:ad:9e:08:a7:fe:09:4b:d4:38:2d:6a:82:1a:50:f5:d9:90:
         f3:22:21:41:05:58:1d:d4:72:f9:9b:6e:2d:4f:17:6a:1c:82:
         a4:1e:7e:e6:08:89:c2:f6:41:86:df:ec:c6:df:a4:3a:63:01:
         89:20:4e:72:44:b2:8b:50:08:31:92:79:2c:1a:39:d4:6a:3c:
         f8:79:5a:54:3d:87:73:9c:d7:15:31:b7:fd:b8:51:64:6a:7f:
         42:8c:1a:6a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQZ9sS2MLL7zIy/iSbkNBDH3kdHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlEQjVDMERDN0M5ODUzMDE1QzJCNkQ4QjA1QTFGREQw
QUEyRUJBNTAeFw0yNjAxMDYxODUyMjVaFw0yNzAxMDUxODU3MjVaMDMxMTAvBgNV
BAMTKDM3QzNGMUNDMzc0MzQwNkIyRkJBMDMwNjlFOTRBOEZGNDA5NjU3QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjD3YbdzWQsB7DbuEDD1KIJnwn
r+sId4gIuXC0vOD03/X6B+U0uslWgaEA/45WwtqZZuyqBpE48efxILSsbqU/KdqW
JRT0STgD+ldP3awuMMhvduoJJHL/mFYgyeSifLmb0kN9eP9/0yVsUfvHn2nMsGxr
VcO5jt4LbhhuiDXYDon7RJ3j7P054GiG6MB3icIRaZ/0pes5OUueI/gOo47W32Cs
Mm4aqKvth2PlZekrBBRAU/4EmWCUvFRa9VMtc6o6D43Ogf6XzoFehwGWriSP6nml
REMDVXVEcSmvYX6hAmma4Ac5tnqGANDkP13jZ+6gQmE4Sv3FZfrJYrSAc35BAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUN8PxzDdDQGsvugMGnpSo/0CWV6MwHwYDVR0j
BBgwFoAUidtcDcfJhTAVwrbYsFof3Qqi66UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRDM5QkFFQ0ZCMDgwNzk1QjczODJFNTlFREY0NkNGMkJG
NEE0M0Y3NzAwNUE0NjcwNEEyMzI5NTIzRjE2QTk5LzAvODlEQjVDMERDN0M5ODUz
MDE1QzJCNkQ4QjA1QTFGREQwQUEyRUJBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OURCNUMwREM3Qzk4NTMwMTVD
MkI2RDhCMDVBMUZERDBBQTJFQkE1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkQzOUJBRUNGQjA4MDc5NUI3MzgyRTU5RURGNDZDRjJCRjRBNDNGNzcw
MDVBNDY3MDRBMjMyOTUyM0YxNkE5OS8wLzMxMzczOTJlMzYzMDJlMzIzMDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArM80DAN
BgkqhkiG9w0BAQsFAAOCAQEAlmI6uWc8DfWDrxkHPDh18oTelO+kCQApzAnEKJOY
dH10s09nhK8QX7dwDnPyCbzuEADRGsa+swhQgme9OqkcgjNJj5Oxz9btB06kgFet
Kdc41YLob0/uXdX44/WTs5620BIomk5GLrZfEASeT08J90B7hGUHuhJ7IfkLND1J
bZg+bUwPvgwwEolVHKqPIEeTtC0XyKgrnd4H0iG5kiw3gM1SSK2eCKf+CUvUOC1q
ghpQ9dmQ8yIhQQVYHdRy+ZtuLU8XahyCpB5+5giJwvZBht/sxt+kOmMBiSBOckSy
i1AIMZJ5LBo51Go8+HlaVD2Hc5zXFTG3/bhRZGp/Qowaag==
-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:55 2026 by rpki-client