This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3137302e37392e33362e302f32322d3234203d3e2036313437.roa
File:                     3137302e37392e33362e302f32322d3234203d3e2036313437.roa (raw, json)
Hash identifier:          jI9Q/Hg5TXgbmMLuYpAiGlYlxn41A2tJbVElZkuhKPU=
Subject key identifier:   F5:72:11:92:1F:98:D8:DC:C9:0F:5C:F7:56:84:0E:57:D3:5B:05:C3
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       5EDA5CB3F011C9592494B5ED50CD2B73CF84B0FB
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3137302e37392e33362e302f32322d3234203d3e2036313437.roa
Signing time:             Tue 06 Jan 2026 20:56:03 +0000
ROA not before:           Tue 06 Jan 2026 20:51:03 +0000
ROA not after:            Tue 05 Jan 2027 20:56:03 +0000
asID:                     6147
IP address blocks:        170.79.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:da:5c:b3:f0:11:c9:59:24:94:b5:ed:50:cd:2b:73:cf:84:b0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Jan  6 20:51:03 2026 GMT
            Not After : Jan  5 20:56:03 2027 GMT
        Subject: CN=F57211921F98D8DCC90F5CF756840E57D35B05C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d9:87:9c:1d:63:87:08:6f:88:73:cf:1f:9f:
                    01:46:be:58:dc:f6:fb:fb:da:74:ce:7f:7e:88:2a:
                    3d:8c:43:6e:ee:a7:00:98:09:06:6f:3f:b1:7e:2e:
                    52:49:3a:7f:6c:59:da:58:df:3b:6d:5e:6c:70:5d:
                    30:c6:db:ec:da:b6:99:eb:e4:23:ba:56:bd:2c:b9:
                    a1:99:51:ae:33:9e:f0:09:35:2f:03:b0:a3:61:9f:
                    cd:1e:7a:f6:b1:9e:a6:d1:2f:62:36:47:06:52:30:
                    36:bd:38:89:4b:a5:3e:a9:25:31:e0:0f:f8:4e:3a:
                    cf:f1:f8:83:0d:f3:02:82:04:39:88:76:90:9d:1e:
                    77:cf:81:77:ec:6a:35:a5:2b:c8:22:1f:9c:fa:66:
                    5f:08:bd:03:cc:c0:8c:3d:e2:f9:b2:f5:1d:b1:73:
                    34:8e:98:50:b0:60:4a:f1:48:e3:a0:2c:0b:a6:78:
                    e0:cd:15:d0:06:63:a3:c7:b5:34:68:02:0c:27:4d:
                    f4:53:8d:8b:0d:d9:c5:8f:11:09:5d:89:9b:7a:12:
                    af:cc:64:1c:ec:d3:44:f7:62:95:8a:89:7e:f9:4e:
                    ff:c7:fd:07:c4:a3:8b:ec:fe:54:82:b0:7d:01:c4:
                    ef:fc:69:a4:58:5b:c7:44:3d:c1:28:eb:b1:1b:20:
                    d1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:72:11:92:1F:98:D8:DC:C9:0F:5C:F7:56:84:0E:57:D3:5B:05:C3
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3137302e37392e33362e302f32322d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:be:cf:72:20:66:1f:b3:49:e0:6f:2e:19:0d:5e:43:fe:b0:
         3d:d9:c7:e2:87:70:20:d1:1d:8a:bb:44:06:25:ad:97:14:56:
         a0:b2:0c:80:fc:f9:d6:c6:0f:4c:d5:6c:f6:e6:8b:03:64:18:
         53:25:e3:e9:3e:e6:a9:70:43:8e:4a:9e:b8:34:18:91:9b:96:
         be:f3:0b:20:76:b2:db:65:a1:9d:fd:82:57:cd:ba:33:7c:c5:
         1a:84:aa:ad:01:62:68:66:bd:fe:f2:85:56:57:1b:76:f9:c7:
         cd:0e:1a:8a:94:eb:cb:19:1c:87:d3:7e:81:82:39:26:a6:bb:
         4d:3a:ce:06:2f:48:e3:79:7a:05:fa:df:b1:4c:91:f7:fe:c2:
         8f:77:18:bc:6b:56:51:0a:30:2d:fe:20:08:3d:61:b3:21:d4:
         55:21:2f:b0:9e:f2:96:1f:ba:56:91:38:25:ec:73:57:46:b2:
         56:be:e7:e1:bf:2d:6b:72:1d:75:c3:ec:4b:18:41:34:47:ef:
         bd:e5:04:59:50:47:77:90:ef:3c:be:ea:68:cb:37:4c:ea:67:
         a6:28:e5:8f:dd:8e:31:85:b7:08:2f:37:4a:a1:f5:0f:1e:93:
         73:d8:e7:c5:b5:48:99:6e:b4:97:24:e4:0c:c6:ae:a5:2c:85:
         72:be:7f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:21 2026 by rpki-client