This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131352e302f32342d3234203d3e203237383233.roa
File:                     3137392e34332e3131352e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          kpBO/uXYn5dHiPLgX706J63ykn/gul9yVKXWUM+UbqA=
Subject key identifier:   37:7A:E1:17:E2:E5:5E:22:88:16:98:65:8C:AF:20:46:8F:AD:68:8A
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       1AA027EF04805125FE9E65A4FC3F6506064A5C80
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131352e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 06 Jan 2026 19:05:44 +0000
ROA not before:           Tue 06 Jan 2026 19:00:44 +0000
ROA not after:            Tue 05 Jan 2027 19:05:44 +0000
asID:                     27823
IP address blocks:        179.43.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 14:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a0:27:ef:04:80:51:25:fe:9e:65:a4:fc:3f:65:06:06:4a:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Jan  6 19:00:44 2026 GMT
            Not After : Jan  5 19:05:44 2027 GMT
        Subject: CN=377AE117E2E55E22881698658CAF20468FAD688A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:22:c5:85:28:74:b7:1c:43:d1:43:84:f7:ea:
                    e6:a9:80:f0:f4:0b:70:f8:f3:96:03:b5:d5:c8:b8:
                    1a:32:a2:d0:ea:5f:45:98:b6:07:5e:19:a0:6b:11:
                    9e:6e:aa:a9:d0:82:e4:b5:ee:04:1d:bb:a4:bd:2e:
                    9a:3e:84:eb:d7:62:ab:85:bf:e2:e2:38:ee:05:9e:
                    76:82:e5:1c:e9:ef:d0:79:1b:72:4c:86:06:fd:24:
                    06:93:ae:dc:bf:10:5b:8e:76:34:7f:25:d1:84:8c:
                    5e:a9:a3:8a:ea:bb:c2:31:14:c2:58:50:85:33:24:
                    55:22:f0:75:f0:8e:18:da:5f:dd:d2:c0:aa:a5:b6:
                    8c:c9:42:3f:86:e4:12:58:53:e7:90:17:ac:54:56:
                    84:31:cf:ba:05:d0:0f:6f:3e:da:e0:0a:24:7b:32:
                    9d:b5:4b:15:be:c7:47:a9:60:90:99:3d:42:42:e7:
                    0d:7a:2f:3b:c7:67:1e:f0:5e:5d:88:1c:38:3b:21:
                    26:58:86:ba:28:4a:0d:33:ea:10:7f:bf:46:11:0a:
                    41:28:aa:b3:d8:2a:23:bc:e9:63:38:0a:ec:15:bc:
                    f8:18:55:42:2b:fd:69:11:22:a7:69:f0:82:54:06:
                    72:f0:99:01:be:2a:48:c4:c7:8e:2b:5b:29:3d:a0:
                    b7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7A:E1:17:E2:E5:5E:22:88:16:98:65:8C:AF:20:46:8F:AD:68:8A
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131352e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:1e:b0:72:eb:f9:81:ee:c1:c1:91:04:ce:7c:04:8f:77:33:
         17:7e:69:57:3b:a2:81:29:f7:35:0e:bf:bc:5a:86:b3:6c:ec:
         68:a6:12:a0:e0:0b:d3:55:27:7f:5f:6a:f6:1a:0a:d7:35:93:
         be:0a:38:72:16:6c:38:64:e3:04:7b:f5:52:5e:e4:1b:1e:fd:
         b5:4a:a8:7f:a4:e3:8e:bd:a3:ff:41:43:e1:4e:91:54:66:be:
         be:75:46:a0:1e:a0:64:a9:72:45:0a:02:28:03:13:92:eb:55:
         e2:f9:fe:6d:42:46:e2:af:0e:ca:90:1d:78:76:1b:4e:5f:2f:
         5d:0b:d0:61:ff:be:9d:71:5a:3e:5a:c9:9c:28:89:a4:37:fb:
         86:99:d7:83:4c:0d:b9:f7:38:c3:3e:bf:fe:e6:70:d8:78:2e:
         b3:ef:13:d5:a3:2d:2a:e4:79:1a:b3:fa:35:35:01:85:4a:46:
         8f:4b:31:c3:61:fa:f6:fc:b5:3f:6f:5c:92:c6:a4:c8:fb:44:
         43:bb:40:66:88:80:85:09:90:3b:a8:46:e2:10:ba:8e:33:30:
         8a:08:99:f5:e5:30:c7:41:f3:29:45:c9:e6:93:0c:42:8b:fc:
         42:75:1e:c6:6c:b7:79:33:68:d9:b0:f0:5f:c2:20:2c:68:ef:
         a5:99:d9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:53 2026 by rpki-client