This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/3137392e36302e3139362e302f32322d3234203d3e203132313530.roa
File:                     3137392e36302e3139362e302f32322d3234203d3e203132313530.roa (raw, json)
Hash identifier:          SIdGPbwVU3RStMVE8RbDy/pwKv2XIsHBeAIjKmVLe50=
Subject key identifier:   67:B3:9D:E1:BC:16:85:EE:EA:10:AE:F5:48:D3:75:83:AC:F0:4E:E6
Certificate issuer:       /CN=C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7
Certificate serial:       2EF527E800285E2566277638EE55118E5AE91820
Authority key identifier: C2:BD:7C:7D:74:F4:9C:E6:BE:C8:0D:95:C9:62:13:DD:0D:C5:C4:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/3137392e36302e3139362e302f32322d3234203d3e203132313530.roa
Signing time:             Tue 06 Jan 2026 18:59:18 +0000
ROA not before:           Tue 06 Jan 2026 18:54:18 +0000
ROA not after:            Tue 05 Jan 2027 18:59:18 +0000
asID:                     12150
IP address blocks:        179.60.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f5:27:e8:00:28:5e:25:66:27:76:38:ee:55:11:8e:5a:e9:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7
        Validity
            Not Before: Jan  6 18:54:18 2026 GMT
            Not After : Jan  5 18:59:18 2027 GMT
        Subject: CN=67B39DE1BC1685EEEA10AEF548D37583ACF04EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:98:35:4b:24:db:a2:21:51:9b:1b:21:dd:6b:
                    85:c7:6c:3f:82:e7:b2:60:6d:76:1c:30:38:f9:5b:
                    44:1c:05:3b:1d:5e:ee:3a:fd:97:31:9d:d9:f6:2f:
                    67:97:ba:b2:8c:c9:c5:a1:2e:14:79:f4:6b:a6:37:
                    23:0f:fa:f8:e9:6a:c0:5d:93:c0:e2:dd:01:b6:2c:
                    f4:b4:b0:12:1f:67:27:4f:62:dd:e9:68:d6:18:cc:
                    11:ae:28:80:95:f5:ec:58:ae:2b:a4:bc:ec:77:54:
                    eb:76:51:14:d8:82:e1:7a:84:10:9d:62:9e:df:a9:
                    c1:f6:86:c8:f9:28:df:80:41:3f:c6:a4:f2:26:3a:
                    9c:1f:56:a6:54:21:b6:4e:83:49:b2:ce:b7:63:39:
                    31:ba:69:8a:98:df:98:c4:5d:14:1b:f7:e2:36:bd:
                    12:76:45:42:ff:3e:e9:57:6b:39:90:b1:52:8d:c1:
                    d0:db:93:4c:34:f1:f7:00:20:47:38:8d:b6:00:b5:
                    9d:83:6b:e6:eb:a5:52:8a:0b:df:3e:9e:fe:4e:8a:
                    7a:9b:37:12:23:41:90:de:75:6b:49:2b:a1:cc:6f:
                    62:a1:18:65:e6:f3:72:9d:ef:d2:67:56:e5:31:db:
                    58:44:85:d4:06:7e:4e:c6:5c:4f:d9:d8:97:31:5d:
                    80:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B3:9D:E1:BC:16:85:EE:EA:10:AE:F5:48:D3:75:83:AC:F0:4E:E6
            X509v3 Authority Key Identifier:
                keyid:C2:BD:7C:7D:74:F4:9C:E6:BE:C8:0D:95:C9:62:13:DD:0D:C5:C4:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/3137392e36302e3139362e302f32322d3234203d3e203132313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:d0:ec:79:45:20:66:7b:a7:4e:1c:96:35:d6:20:96:85:f7:
         c2:64:d1:60:6f:51:1a:b7:b3:e5:2a:50:26:a8:e8:7c:3c:5d:
         a6:06:74:2b:70:94:16:a2:ba:41:91:64:e8:3b:ae:48:a7:de:
         e8:92:51:fa:06:ef:2a:22:bd:ef:e5:e5:5a:0b:d0:f0:84:0f:
         55:fc:f9:77:b0:20:0e:23:0b:88:9d:f7:84:75:3f:2a:0b:28:
         f6:2f:7f:ec:05:18:b3:22:55:8e:e7:a3:af:91:9b:52:ab:96:
         6b:58:9d:21:50:30:fa:a8:fc:dd:19:5e:38:fa:ae:d0:b8:0a:
         27:6c:c0:98:1a:b2:37:74:39:52:24:82:c0:a9:1c:4d:7c:e7:
         63:e9:b3:3f:25:a8:bb:f8:58:4c:02:8a:4e:71:cf:3a:27:84:
         0d:da:bf:03:a1:17:45:af:41:7c:88:d3:84:72:6c:16:55:e5:
         cf:f4:83:40:b6:68:43:5a:1f:e7:b9:f4:88:d4:e0:29:0a:59:
         57:bb:66:2a:df:67:11:6b:cf:30:ad:80:11:71:94:f8:8d:fb:
         47:d3:63:51:01:7d:90:09:42:65:fa:b2:f5:40:ca:58:7c:ce:
         d9:de:b5:84:8e:ed:4d:e8:90:df:99:76:b5:47:e2:2f:9e:7a:
         16:58:25:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:07 2026 by rpki-client