This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/3137372e3132362e33362e302f32322d3234203d3e203634313134.roa
File:                     3137372e3132362e33362e302f32322d3234203d3e203634313134.roa (raw, json)
Hash identifier:          pp0b5HUbI3uiVG6ECuhzy93rXAVef8fGQZh+IJSutSc=
Subject key identifier:   6C:98:51:DF:38:5B:51:81:E1:05:CA:C1:6B:15:2B:4C:5E:1F:5F:C2
Certificate issuer:       /CN=402EE1D9B06FF99090AB25CAA286ABC0E56BB374
Certificate serial:       6C7759CFC5F4732350E51CEF288CC2A967DBC680
Authority key identifier: 40:2E:E1:D9:B0:6F:F9:90:90:AB:25:CA:A2:86:AB:C0:E5:6B:B3:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/3137372e3132362e33362e302f32322d3234203d3e203634313134.roa
Signing time:             Tue 06 Jan 2026 19:08:13 +0000
ROA not before:           Tue 06 Jan 2026 19:03:13 +0000
ROA not after:            Tue 05 Jan 2027 19:08:13 +0000
asID:                     64114
IP address blocks:        177.126.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:77:59:cf:c5:f4:73:23:50:e5:1c:ef:28:8c:c2:a9:67:db:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402EE1D9B06FF99090AB25CAA286ABC0E56BB374
        Validity
            Not Before: Jan  6 19:03:13 2026 GMT
            Not After : Jan  5 19:08:13 2027 GMT
        Subject: CN=6C9851DF385B5181E105CAC16B152B4C5E1F5FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:95:65:be:7c:57:c7:3c:03:63:07:ab:47:
                    eb:02:f2:f1:2d:48:0a:e4:ff:d7:b2:a0:f5:9b:03:
                    bc:e0:00:2c:36:99:07:95:63:54:92:9b:d6:20:c4:
                    bf:bc:9d:e0:92:9a:12:7b:96:a7:09:18:2d:90:74:
                    4d:8f:7d:46:5b:b6:bf:37:ce:6c:1e:bc:4e:b4:50:
                    1d:d6:b3:2a:95:0e:e2:c9:88:9d:5d:ec:9e:bd:74:
                    23:d8:f3:cf:17:eb:a1:e5:bf:e2:14:d5:0d:a0:2d:
                    cb:23:21:3f:fe:5c:b4:83:1d:2e:95:d0:71:ee:5c:
                    03:3e:33:46:9e:a6:7f:ef:70:29:17:59:72:a0:f2:
                    f1:64:88:4b:cc:49:74:62:de:9f:31:96:73:9a:f3:
                    01:cf:5a:b6:f7:d8:b5:8a:8e:72:f2:7b:87:b1:20:
                    dc:76:a8:6f:28:c3:95:57:ac:b4:e2:cd:18:29:66:
                    85:9b:ea:f4:8e:69:68:56:81:bc:ee:b3:07:39:c1:
                    95:df:18:95:84:6e:cd:71:c1:a7:c0:e7:95:a6:83:
                    c8:27:73:2d:23:56:89:ec:e3:55:5f:86:fb:66:1f:
                    e2:57:d9:bb:03:f3:48:82:ac:50:21:49:de:96:4e:
                    96:1b:23:e8:28:7c:1a:50:70:6b:f5:19:90:2f:57:
                    4d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:98:51:DF:38:5B:51:81:E1:05:CA:C1:6B:15:2B:4C:5E:1F:5F:C2
            X509v3 Authority Key Identifier:
                keyid:40:2E:E1:D9:B0:6F:F9:90:90:AB:25:CA:A2:86:AB:C0:E5:6B:B3:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/3137372e3132362e33362e302f32322d3234203d3e203634313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:95:e9:37:00:58:cd:62:13:b0:94:9a:ea:1b:c6:d0:83:91:
         50:12:27:84:60:60:1c:c4:10:2f:f1:05:0c:6c:f7:e3:5f:42:
         a3:e8:fd:e1:50:ea:d8:7e:c3:61:85:ea:ae:29:99:3b:8e:56:
         3d:9b:67:10:f8:b6:c2:97:03:ed:51:cf:fc:7c:84:c2:4e:7c:
         88:f4:98:e5:64:e6:e9:26:6a:30:07:9a:22:ea:c7:98:c8:45:
         af:2f:82:87:46:a6:4d:29:81:57:ad:e7:90:f7:88:03:5b:5d:
         9e:b8:59:ab:eb:a1:41:7f:45:92:36:73:44:19:b8:65:96:11:
         62:eb:41:05:24:7f:d0:01:25:76:b1:af:fb:50:81:e8:9d:81:
         7d:a1:19:20:0e:ac:dd:6c:2f:08:d8:81:49:f9:9c:68:ad:a3:
         09:0a:5a:7b:9d:fb:4f:ef:a1:ef:b4:db:eb:88:d9:31:bf:01:
         9e:5c:f4:ae:39:59:f7:23:56:48:a6:e2:4f:6f:3e:af:7f:eb:
         ce:a1:1a:79:3f:d4:90:81:94:fc:62:ad:cf:56:b1:22:13:20:
         f8:55:0a:38:b8:82:04:5a:a7:0d:b9:ec:40:0b:68:9b:97:ea:
         b2:de:23:39:c7:32:60:39:45:45:3d:87:d5:76:7c:9f:e9:0f:
         2e:58:26:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:31 2026 by rpki-client