This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137352e302e302f31362d3234203d3e203136363239.roa
File:                     3135322e3137352e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          1T6Yfk8LPhzA1QTXcW3Zm++vpVbhvWk6dhkbrNqx6xA=
Subject key identifier:   7E:AA:08:0F:C2:B9:0D:93:FB:33:59:20:74:14:19:F1:C9:CC:DC:B9
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       1CF820AC179CE196F15951DE653F59D414E60E97
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137352e302e302f31362d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 19:09:55 +0000
ROA not before:           Tue 06 Jan 2026 19:04:55 +0000
ROA not after:            Tue 05 Jan 2027 19:09:55 +0000
asID:                     16629
IP address blocks:        152.175.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f8:20:ac:17:9c:e1:96:f1:59:51:de:65:3f:59:d4:14:e6:0e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Jan  6 19:04:55 2026 GMT
            Not After : Jan  5 19:09:55 2027 GMT
        Subject: CN=7EAA080FC2B90D93FB335920741419F1C9CCDCB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:8b:4d:34:3c:fe:21:01:d2:81:80:1e:fc:
                    c5:68:37:95:40:71:d2:a9:9d:c7:54:c6:35:56:e0:
                    5b:b1:41:ea:3e:59:3f:29:b9:3a:81:89:76:66:98:
                    8e:7f:ec:d4:10:2c:1d:7e:09:ee:e7:ea:d4:bc:b6:
                    98:85:e3:dc:81:ff:ef:74:db:50:8c:74:ae:7c:78:
                    16:19:d2:c2:b8:1d:ad:51:9e:ba:0c:94:ed:68:35:
                    b8:97:15:55:a4:c8:2c:f0:9f:9e:47:f1:0f:42:c6:
                    4e:d4:62:74:b2:3e:68:75:35:ec:1f:e3:0d:6a:7c:
                    5b:d4:46:c4:71:22:ee:5b:af:92:b1:7d:ec:48:9a:
                    c6:fb:18:30:06:84:7c:08:7e:4a:6e:45:6a:20:3d:
                    53:70:1c:a9:a9:5b:44:08:76:2e:91:46:3f:16:bb:
                    c3:c3:86:0d:7f:61:fb:cd:30:3d:99:f5:23:b6:e1:
                    8e:07:07:3d:7b:96:4d:e2:36:a8:26:16:d6:ff:92:
                    9b:eb:27:48:80:1a:12:64:8f:cb:98:3f:4f:23:1b:
                    5c:e7:c2:26:41:6a:eb:15:a8:0a:b8:f2:93:97:48:
                    ab:18:32:7b:5e:f3:4e:85:b8:d9:b0:4d:8f:fd:c5:
                    c0:80:21:27:98:ae:cc:cb:0d:d9:e6:a1:f0:e4:2e:
                    20:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AA:08:0F:C2:B9:0D:93:FB:33:59:20:74:14:19:F1:C9:CC:DC:B9
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3135322e3137352e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.175.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:e9:95:f0:65:20:96:31:2a:63:f6:64:40:72:5e:be:88:c8:
         1f:1a:5c:90:68:d3:82:aa:21:fa:a6:1c:58:82:65:28:6b:89:
         95:db:34:33:36:21:62:c7:87:3b:db:69:d7:07:56:d8:b6:c6:
         3b:b8:46:e5:c5:4a:76:9b:7e:c4:ab:5a:78:6b:a7:65:0e:c5:
         ea:32:dc:48:ee:53:49:90:fb:47:5d:07:c7:3a:37:c3:cc:7e:
         4e:31:b2:38:3d:ab:13:25:b1:6f:50:24:42:35:ec:58:90:b8:
         16:7c:24:fd:22:bf:82:ba:c1:72:a9:0f:25:3b:6b:81:1d:e8:
         dd:68:da:f3:20:9a:7b:8c:b8:3b:2c:49:ea:d9:23:f4:bf:ad:
         4d:cc:5e:c7:b5:9f:bf:ba:90:29:ad:16:a1:37:15:a6:eb:98:
         80:bc:d9:26:2a:76:9e:b9:d6:c1:24:75:ce:c1:92:3d:98:55:
         2c:81:ba:6a:f1:cd:50:54:87:42:31:ea:9e:df:2c:75:8a:a9:
         64:61:70:bb:3e:b3:73:80:f7:44:ce:0d:04:ac:ad:cb:d1:6d:
         5f:30:bc:b1:f7:77:a6:ea:eb:ab:45:5b:28:40:0f:d2:92:68:
         b9:73:a9:67:79:13:d6:ce:e1:9e:66:a5:64:a4:ee:65:0c:91:
         0d:31:23:d3
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUHPggrBec4ZbxWVHeZT9Z1BTmDpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlCMzkxRjU1Nzc1MTRFMzBGNjRFREY2RTM2MTkwNUNB
MDhDRjU3MjAeFw0yNjAxMDYxOTA0NTVaFw0yNzAxMDUxOTA5NTVaMDMxMTAvBgNV
BAMTKDdFQUEwODBGQzJCOTBEOTNGQjMzNTkyMDc0MTQxOUYxQzlDQ0RDQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi0otNNDz+IQHSgYAe/MVoN5VA
cdKpncdUxjVW4FuxQeo+WT8puTqBiXZmmI5/7NQQLB1+Ce7n6tS8tpiF49yB/+90
21CMdK58eBYZ0sK4Ha1RnroMlO1oNbiXFVWkyCzwn55H8Q9Cxk7UYnSyPmh1Newf
4w1qfFvURsRxIu5br5KxfexImsb7GDAGhHwIfkpuRWogPVNwHKmpW0QIdi6RRj8W
u8PDhg1/YfvNMD2Z9SO24Y4HBz17lk3iNqgmFtb/kpvrJ0iAGhJkj8uYP08jG1zn
wiZBausVqAq48pOXSKsYMnte806FuNmwTY/9xcCAISeYrszLDdnmofDkLiBlAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUfqoID8K5DZP7M1kgdBQZ8cnM3LkwHwYDVR0j
BBgwFoAUKbOR9Vd1FOMPZO3242GQXKCM9XIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DN0MwQ0VGQzYyNkE5NDk3MjM0REQ3QTI5RjU3Q0EzRjhG
QkFCNUM2RTYwNUE0MEFEQUIxRTA5QTAzOTNEQTE2LzAvMjlCMzkxRjU1Nzc1MTRF
MzBGNjRFREY2RTM2MTkwNUNBMDhDRjU3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOUIzOTFGNTU3NzUxNEUzMEY2
NEVERjZFMzYxOTA1Q0EwOENGNTcyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzdDMENFRkM2MjZBOTQ5NzIzNEREN0EyOUY1N0NBM0Y4RkJBQjVDNkU2
MDVBNDBBREFCMUUwOUEwMzkzREExNi8wLzMxMzUzMjJlMzEzNzM1MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzYzNjMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCYrzANBgkq
hkiG9w0BAQsFAAOCAQEAjumV8GUgljEqY/ZkQHJevojIHxpckGjTgqoh+qYcWIJl
KGuJlds0MzYhYseHO9tp1wdW2LbGO7hG5cVKdpt+xKtaeGunZQ7F6jLcSO5TSZD7
R10Hxzo3w8x+TjGyOD2rEyWxb1AkQjXsWJC4Fnwk/SK/grrBcqkPJTtrgR3o3Wja
8yCae4y4OyxJ6tkj9L+tTcxex7Wfv7qQKa0WoTcVpuuYgLzZJip2nrnWwSR1zsGS
PZhVLIG6avHNUFSHQjHqnt8sdYqpZGFwuz6zc4D3RM4NBKyty9FtXzC8sfd3purr
q0VbKEAP0pJouXOpZ3kT1s7hnmalZKTuZQyRDTEj0w==
-----END CERTIFICATE-----
Generated at Mon Jan 12 16:21:52 2026 by rpki-client