This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38362e302f32342d3234203d3e203238343332.roa
File:                     3137372e3132342e38362e302f32342d3234203d3e203238343332.roa (raw, json)
Hash identifier:          B52prAJs5G4NfMtHs0PNOF7I7BjE3QeWvScVBZlBYKM=
Subject key identifier:   30:7C:B5:4E:0F:24:7A:19:43:AA:1B:1B:47:DD:B8:A6:C3:30:51:CC
Certificate issuer:       /CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
Certificate serial:       3AB596DDF0A3E37384D22CB27F44ACB3F46DDD30
Authority key identifier: 68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38362e302f32342d3234203d3e203238343332.roa
Signing time:             Tue 06 Jan 2026 19:47:37 +0000
ROA not before:           Tue 06 Jan 2026 19:42:37 +0000
ROA not after:            Tue 05 Jan 2027 19:47:37 +0000
asID:                     28432
IP address blocks:        177.124.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 15:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b5:96:dd:f0:a3:e3:73:84:d2:2c:b2:7f:44:ac:b3:f4:6d:dd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
        Validity
            Not Before: Jan  6 19:42:37 2026 GMT
            Not After : Jan  5 19:47:37 2027 GMT
        Subject: CN=307CB54E0F247A1943AA1B1B47DDB8A6C33051CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f1:2c:b3:c7:89:fc:e5:a4:d2:6a:d7:b2:cf:
                    dd:c8:90:a8:68:cb:ff:54:4e:7e:a5:e4:40:55:b3:
                    59:af:26:b7:22:a8:8a:04:f5:72:7d:cf:78:2c:67:
                    38:fe:eb:ec:c1:18:82:74:3f:66:63:68:89:7a:b8:
                    43:4e:0d:12:1d:77:8e:40:8d:64:de:e1:fe:72:ee:
                    26:7c:fb:c3:6d:dd:e0:62:de:c9:f4:3f:02:80:94:
                    09:e6:22:6e:9b:9f:8b:ef:01:d2:05:d5:e0:14:f5:
                    f1:e9:ae:09:10:d8:69:c9:58:eb:bf:54:d5:31:aa:
                    7b:34:c1:12:c0:65:6e:c9:f4:93:9c:f6:28:c3:4b:
                    f2:8b:d2:76:2b:f3:63:2d:93:90:a9:72:9d:b1:6a:
                    7e:df:1d:3d:29:93:8e:b8:59:a0:c1:72:a3:b1:c6:
                    3a:df:6f:9a:fa:6b:d9:61:a2:55:69:4d:00:7e:e6:
                    f7:84:9d:80:e4:e2:80:57:1f:e0:6a:59:09:8b:c0:
                    7b:09:e5:55:82:47:2e:74:f1:19:d1:3c:33:fa:7e:
                    00:fd:ec:24:2d:09:94:bd:7c:66:6c:c8:5d:21:43:
                    b2:fe:01:e8:39:29:0f:61:e4:36:1b:fc:55:fd:fc:
                    b7:af:77:34:e7:a2:6a:2b:34:14:06:1f:34:f3:3d:
                    2d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7C:B5:4E:0F:24:7A:19:43:AA:1B:1B:47:DD:B8:A6:C3:30:51:CC
            X509v3 Authority Key Identifier:
                keyid:68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38362e302f32342d3234203d3e203238343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:91:32:75:a9:9b:a5:fb:9b:1d:f0:05:85:aa:d5:09:1a:5e:
         2d:a5:d9:ed:c3:f0:23:8e:b1:9d:e7:21:d1:bb:ca:af:1e:42:
         c9:87:41:c5:b3:c4:38:86:77:21:fe:4d:4b:4e:ba:07:2a:fb:
         19:c0:e1:e5:23:58:a3:6a:16:c0:0d:49:c7:fd:a9:66:f6:7c:
         92:f7:fb:7e:3d:76:67:44:38:d7:0c:8a:13:21:a8:81:31:ce:
         b4:5a:1e:ba:bf:40:0e:a8:3c:8e:15:2b:4a:ed:8d:a4:59:64:
         fe:94:37:5a:3f:e5:22:c1:49:93:b2:5d:7f:11:93:ce:42:9f:
         ef:b5:a1:61:14:28:a2:4f:24:e5:52:9e:00:a0:62:8e:42:f2:
         97:74:46:8d:c2:00:6b:f4:9b:c8:83:37:04:ae:6c:87:95:9d:
         91:f3:6b:1c:5e:7a:c3:9c:6e:fb:47:2b:45:35:69:cf:4d:69:
         2e:81:95:0c:51:9a:fc:bb:cd:95:24:46:c3:12:03:83:9d:96:
         01:39:fd:fd:9b:c7:77:de:b3:20:98:fe:5a:0e:64:00:94:1a:
         48:32:60:9c:49:78:80:16:d7:14:8d:df:34:fc:5e:37:d1:17:
         98:74:26:8e:7b:12:6b:6c:fb:b5:00:fe:4b:2c:8c:8a:06:d7:
         16:05:3a:09
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOrWW3fCj43OE0iyyf0Sss/Rt3TAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0OUI1QTVFQUU3NzU1N0JCMTUwQTUwNDQ2MDFFMTJG
QkIzOUNFOTAeFw0yNjAxMDYxOTQyMzdaFw0yNzAxMDUxOTQ3MzdaMDMxMTAvBgNV
BAMTKDMwN0NCNTRFMEYyNDdBMTk0M0FBMUIxQjQ3RERCOEE2QzMzMDUxQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8Syzx4n85aTSateyz93IkKho
y/9UTn6l5EBVs1mvJrciqIoE9XJ9z3gsZzj+6+zBGIJ0P2ZjaIl6uENODRIdd45A
jWTe4f5y7iZ8+8Nt3eBi3sn0PwKAlAnmIm6bn4vvAdIF1eAU9fHprgkQ2GnJWOu/
VNUxqns0wRLAZW7J9JOc9ijDS/KL0nYr82Mtk5Cpcp2xan7fHT0pk464WaDBcqOx
xjrfb5r6a9lholVpTQB+5veEnYDk4oBXH+BqWQmLwHsJ5VWCRy508RnRPDP6fgD9
7CQtCZS9fGZsyF0hQ7L+Aeg5KQ9h5DYb/FX9/LevdzTnomorNBQGHzTzPS2HAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUMHy1Tg8kehlDqhsbR924psMwUcwwHwYDVR0j
BBgwFoAUaEm1perndVe7FQpQRGAeEvuznOkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MTIzNDM3REM2MEJBNjlGODg0NzY0RDI5MEI1OUQzQzVD
NDE0MDMxODZGQzk5RTJCRkJCQzVDMTVCNjEyMzVELzAvNjg0OUI1QTVFQUU3NzU1
N0JCMTUwQTUwNDQ2MDFFMTJGQkIzOUNFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82ODQ5QjVBNUVBRTc3NTU3QkIx
NTBBNTA0NDYwMUUxMkZCQjM5Q0U5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDEyMzQzN0RDNjBCQTY5Rjg4NDc2NEQyOTBCNTlEM0M1QzQxNDAzMTg2
RkM5OUUyQkZCQkM1QzE1QjYxMjM1RC8wLzMxMzczNzJlMzEzMjM0MmUzODM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODM0MzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALF8VjAN
BgkqhkiG9w0BAQsFAAOCAQEAIJEydambpfubHfAFharVCRpeLaXZ7cPwI46xnech
0bvKrx5CyYdBxbPEOIZ3If5NS066Byr7GcDh5SNYo2oWwA1Jx/2pZvZ8kvf7fj12
Z0Q41wyKEyGogTHOtFoeur9ADqg8jhUrSu2NpFlk/pQ3Wj/lIsFJk7JdfxGTzkKf
77WhYRQook8k5VKeAKBijkLyl3RGjcIAa/SbyIM3BK5sh5WdkfNrHF56w5xu+0cr
RTVpz01pLoGVDFGa/LvNlSRGwxIDg52WATn9/ZvHd96zIJj+Wg5kAJQaSDJgnEl4
gBbXFI3fNPxeN9EXmHQmjnsSa2z7tQD+SyyMigbXFgU6CQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:02 2026 by rpki-client