This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e35362e302f32312d3234203d3e203532343638.roa
File:                     3135372e3130302e35362e302f32312d3234203d3e203532343638.roa (raw, json)
Hash identifier:          be1dyvjTkXdD89NMiHb4lMqSyBqyWHeavAP9iCpfY64=
Subject key identifier:   77:3C:C5:2E:AB:CC:9C:F4:3F:8C:5C:DD:EF:59:9A:4C:C7:0C:60:F5
Certificate issuer:       /CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
Certificate serial:       6C89E9BB697F69517F7B1CB1B1CC71EA108712EF
Authority key identifier: 77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e35362e302f32312d3234203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 20:58:42 +0000
ROA not before:           Tue 06 Jan 2026 20:53:42 +0000
ROA not after:            Tue 05 Jan 2027 20:58:42 +0000
asID:                     52468
IP address blocks:        157.100.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl
                          rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:89:e9:bb:69:7f:69:51:7f:7b:1c:b1:b1:cc:71:ea:10:87:12:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77570511D6CF51E3ABAFB2F756FE17F5291D8648
        Validity
            Not Before: Jan  6 20:53:42 2026 GMT
            Not After : Jan  5 20:58:42 2027 GMT
        Subject: CN=773CC52EABCC9CF43F8C5CDDEF599A4CC70C60F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:55:d7:c6:49:71:65:6f:7d:49:33:39:89:42:
                    0a:45:ae:cc:cd:2b:b3:5b:75:20:e8:5c:f3:ac:9e:
                    13:b9:70:da:02:bd:1f:48:f1:f0:a2:86:ed:83:23:
                    17:92:cf:f3:29:98:fc:d6:26:5c:88:ab:db:b3:10:
                    69:c6:78:d8:83:a9:07:c2:1d:85:67:1c:79:2a:dd:
                    99:6a:fc:e4:26:2d:d1:a3:f2:e5:7a:c4:6b:6f:8b:
                    b8:97:0d:02:4e:c6:eb:f6:4a:8e:75:64:79:5d:5f:
                    0b:a4:2a:8b:d4:24:dd:d9:2b:53:9b:fd:3c:f2:de:
                    98:91:28:0d:d2:c6:66:44:d5:d7:1e:8f:2b:b7:9f:
                    33:f9:65:01:5c:6b:ee:00:54:91:88:a0:ed:da:64:
                    e2:e5:b8:78:b5:8d:ac:95:f0:8b:ea:74:e0:c3:55:
                    2e:60:24:80:9b:e9:f8:ff:e8:6f:24:55:ed:41:35:
                    51:d4:8f:eb:b5:c9:c4:1b:97:12:85:85:60:39:f5:
                    c7:1b:ea:af:27:ba:82:0f:5f:9c:70:30:2d:29:17:
                    69:91:5a:d4:38:9a:b3:54:8d:1b:bf:67:18:c7:13:
                    76:70:cf:00:ad:22:c0:88:1f:c1:e3:2b:92:6a:f3:
                    62:76:2c:c4:7d:4b:6f:65:06:9b:f4:a6:e1:9e:71:
                    a1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3C:C5:2E:AB:CC:9C:F4:3F:8C:5C:DD:EF:59:9A:4C:C7:0C:60:F5
            X509v3 Authority Key Identifier:
                keyid:77:57:05:11:D6:CF:51:E3:AB:AF:B2:F7:56:FE:17:F5:29:1D:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77570511D6CF51E3ABAFB2F756FE17F5291D8648.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583869DF9D6A8CD6686F11C2A1040F7FE8AB686AB267D2871BE97291B398F1CA/0/3135372e3130302e35362e302f32312d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:d6:3c:6a:8c:ea:da:99:e3:01:1e:e3:cc:5b:c9:07:34:af:
         ed:1d:35:28:e0:b4:0c:a5:75:f2:cc:20:19:45:b6:ce:94:3e:
         6c:a9:04:9b:4c:3e:2a:aa:38:d6:02:e1:79:e4:7b:85:24:3e:
         ec:1b:cb:01:2e:2c:97:24:c4:47:23:7b:0c:be:b3:59:ba:4f:
         4f:c5:6a:6e:96:10:1c:70:50:3a:91:54:45:88:aa:e0:3c:0e:
         9f:32:da:f1:b2:b3:97:d5:5f:de:88:ac:fd:74:9f:76:7f:d0:
         25:a9:07:92:4c:97:f7:46:8f:47:a6:c2:97:3a:c5:76:e1:12:
         63:28:23:bd:e0:96:89:44:65:6c:41:fc:07:85:25:18:ba:5d:
         91:15:49:4e:c4:21:e3:9f:9a:10:71:eb:ac:82:70:9d:cd:45:
         85:0c:6e:48:4c:45:7b:70:9b:ba:2f:a8:40:43:36:c7:8c:3e:
         43:65:00:3a:cb:ec:59:f8:f5:61:35:93:9d:5b:29:6a:19:f1:
         66:25:ad:25:cc:f6:ef:23:00:48:0d:67:25:53:93:e1:fc:92:
         ea:f9:a5:06:a0:b4:91:65:15:bb:ad:de:56:c2:69:72:8b:a8:
         69:d9:1d:5f:90:dc:64:05:d5:02:0b:dd:61:4e:e4:2c:d6:24:
         e2:ec:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:07:50 2026 by rpki-client