This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/087CACF52ABD77B43C23B8012EE5CA1404B636008CFCD96352FC1B06C5236242/0/3137392e302e32352e302f32342d3234203d3e20323632323635.roa
File:                     3137392e302e32352e302f32342d3234203d3e20323632323635.roa (raw, json)
Hash identifier:          ctez3jyvzvFkxp1fGhOKbD1Eyra0WQLXMmI76s6zt04=
Subject key identifier:   90:68:EA:64:AE:75:4B:4E:4E:B3:F4:21:CE:3C:A2:A6:D8:54:98:11
Certificate issuer:       /CN=11C304C83DF0BA64DD147CDAD96E935F0037079F
Certificate serial:       26CA6497F6727C2F829793ECED0676777981444A
Authority key identifier: 11:C3:04:C8:3D:F0:BA:64:DD:14:7C:DA:D9:6E:93:5F:00:37:07:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C304C83DF0BA64DD147CDAD96E935F0037079F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/087CACF52ABD77B43C23B8012EE5CA1404B636008CFCD96352FC1B06C5236242/0/3137392e302e32352e302f32342d3234203d3e20323632323635.roa
Signing time:             Tue 06 Jan 2026 18:59:39 +0000
ROA not before:           Tue 06 Jan 2026 18:54:39 +0000
ROA not after:            Tue 05 Jan 2027 18:59:39 +0000
asID:                     262265
IP address blocks:        179.0.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/087CACF52ABD77B43C23B8012EE5CA1404B636008CFCD96352FC1B06C5236242/0/11C304C83DF0BA64DD147CDAD96E935F0037079F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/087CACF52ABD77B43C23B8012EE5CA1404B636008CFCD96352FC1B06C5236242/0/11C304C83DF0BA64DD147CDAD96E935F0037079F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C304C83DF0BA64DD147CDAD96E935F0037079F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:33:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ca:64:97:f6:72:7c:2f:82:97:93:ec:ed:06:76:77:79:81:44:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C304C83DF0BA64DD147CDAD96E935F0037079F
        Validity
            Not Before: Jan  6 18:54:39 2026 GMT
            Not After : Jan  5 18:59:39 2027 GMT
        Subject: CN=9068EA64AE754B4E4EB3F421CE3CA2A6D8549811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:f4:bb:74:5d:24:ba:70:8f:87:97:fc:9b:
                    51:20:14:f1:10:97:b0:4c:3d:8b:5d:bd:84:7a:2c:
                    f0:df:85:4d:0c:29:01:f5:3b:7c:31:e2:0a:47:fb:
                    a7:38:b3:bb:d3:c5:c9:2b:96:86:60:9b:f0:32:a6:
                    9c:e6:0c:25:3b:fe:e3:6c:8f:36:f8:9f:67:e9:90:
                    1e:6d:d5:3a:ce:09:ec:3c:63:62:c6:0f:e6:ec:8d:
                    70:77:2f:0f:81:c1:6f:87:70:18:d0:e9:b0:e1:6c:
                    a8:7f:d1:91:49:39:da:06:ce:05:25:11:34:cf:7f:
                    83:ca:f4:7c:0f:0c:67:28:52:b6:26:80:d7:9a:a8:
                    73:7f:4d:9f:94:b9:e4:5f:84:d1:e4:ac:fa:43:e4:
                    ed:6b:c2:19:8d:24:fd:37:ea:36:0a:a7:04:6f:95:
                    e4:39:d6:25:85:36:ca:48:11:ba:cb:e4:61:b3:7f:
                    ea:aa:47:28:86:90:44:3c:6d:75:53:b3:84:6e:91:
                    33:a3:6d:5b:0a:af:27:47:7a:1f:26:89:9a:de:70:
                    ee:35:b0:6f:22:55:0a:d1:19:c9:97:fc:cf:d3:cb:
                    98:69:03:5e:de:76:5a:20:ac:52:fe:00:fc:b6:28:
                    db:10:49:6f:85:41:cd:cb:a3:60:a7:34:12:06:bc:
                    07:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:68:EA:64:AE:75:4B:4E:4E:B3:F4:21:CE:3C:A2:A6:D8:54:98:11
            X509v3 Authority Key Identifier:
                keyid:11:C3:04:C8:3D:F0:BA:64:DD:14:7C:DA:D9:6E:93:5F:00:37:07:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/087CACF52ABD77B43C23B8012EE5CA1404B636008CFCD96352FC1B06C5236242/0/11C304C83DF0BA64DD147CDAD96E935F0037079F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C304C83DF0BA64DD147CDAD96E935F0037079F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/087CACF52ABD77B43C23B8012EE5CA1404B636008CFCD96352FC1B06C5236242/0/3137392e302e32352e302f32342d3234203d3e20323632323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:c0:82:86:40:33:e2:37:ac:0c:56:e7:e4:18:62:c4:dc:e6:
         8b:2f:73:28:7a:af:2e:79:fe:21:53:aa:5c:48:02:fd:61:b8:
         66:7e:c2:0c:7a:79:13:31:96:d5:a6:76:4f:52:2d:73:37:84:
         bd:29:fb:c2:13:a3:a5:01:9c:dd:10:e9:48:4a:a8:0f:99:49:
         d9:39:18:bb:a9:55:b5:dc:83:93:83:85:8c:af:9f:e2:5d:ec:
         f1:38:30:41:79:90:ac:9c:a7:fd:1d:17:79:f2:c3:d4:93:ef:
         e3:45:4d:e1:e8:4b:2c:45:b6:7e:d0:a4:10:f9:15:50:72:83:
         58:02:39:54:e8:01:e3:c2:eb:01:38:95:29:a4:f2:ee:bc:8b:
         66:fb:2d:bf:d5:71:96:91:0e:80:e2:63:16:4a:2c:8d:7e:0b:
         5f:20:d6:bf:ae:2a:2f:b2:c1:9e:51:26:7e:27:d2:0f:3f:dc:
         34:09:57:3f:79:d1:8e:fa:a1:28:d9:a7:21:01:f8:b7:09:d7:
         55:3c:ef:1e:2b:5c:07:f0:50:20:06:b2:e4:b6:8b:20:bd:2a:
         ea:72:6a:a8:db:98:c2:00:6f:60:d0:87:ac:76:f1:67:2f:f6:
         e8:6a:b9:19:76:10:77:fa:d7:44:c8:00:f7:3a:62:c7:1f:56:
         ce:bb:c1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:06:52 2026 by rpki-client