This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DD961900D0738717BE910908F6313356E357B9EDA28EF0AD89C5E8D19814922/0/3137392e34382e3134302e302f32322d3234203d3e20323730303737.roa
File:                     3137392e34382e3134302e302f32322d3234203d3e20323730303737.roa (raw, json)
Hash identifier:          AmVgOvtN2YUVoeXwzdNwPXx5ZifG3myPqaNIqEm4y3M=
Subject key identifier:   B7:94:B0:B0:96:2D:21:CB:8E:55:9A:B5:09:F9:E9:45:6C:F4:F1:AF
Certificate issuer:       /CN=D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A
Certificate serial:       124C441B03200ED76663CC37EB5BA4DE95102C1C
Authority key identifier: D5:F2:C2:0C:BA:17:BB:8A:FB:7E:18:80:E9:B4:2A:12:A0:71:54:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DD961900D0738717BE910908F6313356E357B9EDA28EF0AD89C5E8D19814922/0/3137392e34382e3134302e302f32322d3234203d3e20323730303737.roa
Signing time:             Tue 06 Jan 2026 19:39:12 +0000
ROA not before:           Tue 06 Jan 2026 19:34:12 +0000
ROA not after:            Tue 05 Jan 2027 19:39:12 +0000
asID:                     270077
IP address blocks:        179.48.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DD961900D0738717BE910908F6313356E357B9EDA28EF0AD89C5E8D19814922/0/D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DD961900D0738717BE910908F6313356E357B9EDA28EF0AD89C5E8D19814922/0/D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4c:44:1b:03:20:0e:d7:66:63:cc:37:eb:5b:a4:de:95:10:2c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A
        Validity
            Not Before: Jan  6 19:34:12 2026 GMT
            Not After : Jan  5 19:39:12 2027 GMT
        Subject: CN=B794B0B0962D21CB8E559AB509F9E9456CF4F1AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c0:13:1b:2c:74:b6:19:86:a2:b7:d5:16:79:
                    e4:c4:91:5a:7a:bf:cd:c8:9a:65:d3:ce:8a:ed:fc:
                    df:5d:04:75:aa:e9:2f:6e:9d:50:55:41:67:7d:79:
                    19:2c:74:19:8b:87:26:68:f1:ca:60:3f:e5:e7:d8:
                    a9:02:4d:aa:36:62:98:27:11:72:b9:ad:51:ca:b0:
                    d1:be:1a:fb:c8:cf:b4:7e:c2:6e:c6:d5:a1:2a:a6:
                    7a:0e:ed:d8:dd:8a:d5:e4:e6:0a:ff:64:b2:72:af:
                    02:0e:fe:65:62:6a:85:a8:15:fe:f1:75:cd:5e:2c:
                    56:bb:aa:9a:66:34:64:3b:c3:a8:06:00:dd:dc:58:
                    3f:8e:74:29:38:c0:70:73:03:45:2b:ed:22:5e:0e:
                    a9:88:04:b6:18:5f:4a:45:d0:b3:e8:35:b1:d9:35:
                    3a:d0:76:94:aa:ff:ba:d5:8f:ea:ef:0c:29:33:89:
                    03:47:71:d6:78:ef:08:0d:da:c4:c2:c2:1c:dd:a6:
                    ab:9d:51:d1:65:24:66:c5:a2:be:2a:2c:10:1c:45:
                    e5:c4:e4:29:1f:6f:23:d1:85:51:63:af:36:03:11:
                    d8:aa:c5:5a:e8:5c:80:60:d3:03:54:bd:79:3e:4d:
                    a1:8a:10:9e:2c:29:ed:b5:98:09:eb:b9:bf:33:b4:
                    7d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:94:B0:B0:96:2D:21:CB:8E:55:9A:B5:09:F9:E9:45:6C:F4:F1:AF
            X509v3 Authority Key Identifier:
                keyid:D5:F2:C2:0C:BA:17:BB:8A:FB:7E:18:80:E9:B4:2A:12:A0:71:54:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DD961900D0738717BE910908F6313356E357B9EDA28EF0AD89C5E8D19814922/0/D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5F2C20CBA17BB8AFB7E1880E9B42A12A071541A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DD961900D0738717BE910908F6313356E357B9EDA28EF0AD89C5E8D19814922/0/3137392e34382e3134302e302f32322d3234203d3e20323730303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:0d:dd:ab:8e:a3:9c:79:b4:49:7f:a7:42:50:ad:1a:5f:46:
         19:0c:51:a6:2e:48:2c:8f:59:db:37:2d:7e:38:da:8d:39:b3:
         c7:ed:aa:b1:41:69:fd:57:58:04:5f:27:35:4e:4d:3e:4a:d6:
         6a:75:4d:d4:ea:5f:76:b0:47:b8:fa:95:7d:c2:d4:42:f2:b3:
         96:cd:cd:cf:b1:5d:f9:c4:d5:19:60:57:e2:0a:89:a5:c0:3f:
         f9:54:e5:5e:84:01:6b:03:65:0a:83:26:cc:eb:f6:2e:1b:63:
         f2:79:09:88:84:e4:20:24:56:33:d5:ad:2c:f9:34:d1:d3:3e:
         73:b4:cb:6e:d7:05:37:c8:7a:a2:8e:d4:06:7b:38:47:f0:68:
         27:1e:63:7b:00:24:32:0e:97:c3:94:fd:a4:62:56:91:06:dd:
         f2:5e:56:00:ec:24:f5:a3:5c:b7:bd:00:43:1a:ad:47:20:2d:
         a6:89:4a:81:4f:23:84:3c:b9:c4:b4:97:a4:76:e5:5b:2a:b3:
         7e:ea:ca:b9:a6:0b:ae:0f:06:e3:20:09:06:76:6b:e0:73:44:
         16:af:42:05:96:33:f0:b9:42:63:d3:99:e0:7b:2b:2b:6e:74:
         ff:37:85:13:97:9b:53:2b:4d:a2:5e:9d:e4:29:ae:db:51:ce:
         c7:7c:29:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:14:57 2026 by rpki-client