This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/3137392e302e3130342e302f32322d3234203d3e20323731393039.roa
File:                     3137392e302e3130342e302f32322d3234203d3e20323731393039.roa (raw, json)
Hash identifier:          MoRu/KJ+S4GjwEga0MYTGrtgrxVn6cPgUNLLMRcmn/Q=
Subject key identifier:   2B:80:42:B1:B0:BD:38:15:C9:6D:2C:04:EF:79:7C:80:F2:D5:0E:66
Certificate issuer:       /CN=923C8F2614D4C90EE12E7F692F19A572D92A35FC
Certificate serial:       1CAEE8711704DBCE6083DD59C5D491BB085D107D
Authority key identifier: 92:3C:8F:26:14:D4:C9:0E:E1:2E:7F:69:2F:19:A5:72:D9:2A:35:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/3137392e302e3130342e302f32322d3234203d3e20323731393039.roa
Signing time:             Tue 06 Jan 2026 19:34:44 +0000
ROA not before:           Tue 06 Jan 2026 19:29:44 +0000
ROA not after:            Tue 05 Jan 2027 19:34:44 +0000
asID:                     271909
IP address blocks:        179.0.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ae:e8:71:17:04:db:ce:60:83:dd:59:c5:d4:91:bb:08:5d:10:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923C8F2614D4C90EE12E7F692F19A572D92A35FC
        Validity
            Not Before: Jan  6 19:29:44 2026 GMT
            Not After : Jan  5 19:34:44 2027 GMT
        Subject: CN=2B8042B1B0BD3815C96D2C04EF797C80F2D50E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:77:f6:89:f7:91:86:09:49:a2:e0:1a:79:a4:
                    d5:1a:18:53:4c:61:1b:e9:67:c9:54:39:36:4e:b1:
                    8c:38:06:ee:47:af:e0:dc:01:aa:28:7b:c2:c7:15:
                    3b:be:4f:ca:63:54:af:b8:a7:d7:bc:c1:ed:3c:af:
                    c0:17:bb:48:1d:54:cc:4a:ef:85:ff:7e:3c:9c:f1:
                    47:37:61:4c:de:de:f1:5c:d6:29:55:95:fe:95:ca:
                    1d:82:fa:d4:be:a8:b5:09:3c:06:dd:24:6c:0a:97:
                    ad:f0:6e:fa:cf:99:56:dc:89:d6:58:bf:ea:01:52:
                    4e:6b:38:89:ca:d9:46:04:27:7d:04:62:88:34:ef:
                    24:b2:cf:38:82:11:9d:75:96:1b:2a:27:19:09:78:
                    21:bf:b3:f0:45:06:62:4e:3e:04:11:0b:6b:5e:78:
                    a0:88:ed:1c:d3:f6:18:60:98:6a:27:e8:4a:65:73:
                    45:c5:12:4a:fc:ca:37:c1:51:61:d8:2d:2c:80:68:
                    4e:32:e4:ca:e1:8e:55:d9:8f:3b:78:42:cb:12:0e:
                    17:0b:34:9d:61:57:bd:d4:8b:0d:eb:bf:0c:a7:6d:
                    80:30:a7:00:e0:0c:9c:52:17:89:d7:38:61:52:fe:
                    35:f4:2b:b0:3d:c6:58:74:19:44:2a:65:31:4a:04:
                    a7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:80:42:B1:B0:BD:38:15:C9:6D:2C:04:EF:79:7C:80:F2:D5:0E:66
            X509v3 Authority Key Identifier:
                keyid:92:3C:8F:26:14:D4:C9:0E:E1:2E:7F:69:2F:19:A5:72:D9:2A:35:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/3137392e302e3130342e302f32322d3234203d3e20323731393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:3c:05:f8:61:5d:cf:82:c1:04:4b:04:b3:ca:f5:c5:49:c0:
         b4:6f:fa:24:f0:28:0e:13:8d:e0:f5:0d:2e:bb:c4:61:bf:16:
         e7:55:78:0b:5d:34:c7:a4:d8:95:02:62:06:c4:7f:0a:69:93:
         f1:5a:ee:1d:39:f0:0c:0d:b0:f2:ed:70:de:63:1a:b5:e8:2a:
         c8:95:5c:1f:c6:83:11:1b:94:62:f1:27:0d:b8:d1:b5:b5:79:
         21:54:73:91:93:fb:26:e1:1c:b8:3b:2a:fb:23:1b:b2:12:43:
         13:60:da:a1:df:8c:6d:3f:41:a9:3a:3b:61:76:58:7a:b0:1c:
         59:fb:09:ba:ca:b0:6c:86:c8:19:75:41:9b:9c:ae:67:ea:94:
         8d:cc:b1:8b:1e:34:06:9d:99:a1:b4:70:67:d7:97:5b:1e:24:
         5a:52:28:08:26:9e:36:98:ef:c5:07:38:0c:90:1c:39:10:60:
         a4:3f:ce:6f:99:d0:d8:32:98:7b:5b:d0:f2:d8:48:8b:3b:b9:
         dd:8b:87:f2:bd:bf:9d:cb:d3:52:d6:36:a0:18:99:90:4a:4a:
         81:c0:5e:af:1e:43:a0:1d:fa:cc:35:0b:13:06:d7:2e:87:d7:
         07:ab:18:5d:28:1c:b9:f0:eb:f6:cd:eb:12:1a:9c:2c:bb:f6:
         82:25:ca:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:19 2026 by rpki-client