This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/3137392e3138392e3232302e302f32332d3234203d3e20323732303238.roa
File:                     3137392e3138392e3232302e302f32332d3234203d3e20323732303238.roa (raw, json)
Hash identifier:          k1leAy7rQn8rcEvCl1HujXniI87Osp6dy6SQAMo0ipA=
Subject key identifier:   16:1E:C5:3F:2B:28:67:5B:58:F6:06:60:D7:1B:84:C8:D8:63:82:EC
Certificate issuer:       /CN=A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81
Certificate serial:       506923A33B685709383EB820E069F56BB37D947B
Authority key identifier: A9:F9:40:AE:06:C3:2D:0A:CD:BF:32:1E:B9:CA:4A:0B:99:88:DC:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/3137392e3138392e3232302e302f32332d3234203d3e20323732303238.roa
Signing time:             Tue 06 Jan 2026 20:55:12 +0000
ROA not before:           Tue 06 Jan 2026 20:50:12 +0000
ROA not after:            Tue 05 Jan 2027 20:55:12 +0000
asID:                     272028
IP address blocks:        179.189.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:69:23:a3:3b:68:57:09:38:3e:b8:20:e0:69:f5:6b:b3:7d:94:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81
        Validity
            Not Before: Jan  6 20:50:12 2026 GMT
            Not After : Jan  5 20:55:12 2027 GMT
        Subject: CN=161EC53F2B28675B58F60660D71B84C8D86382EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d1:30:66:7c:29:e6:e9:a4:47:6a:93:c8:25:
                    32:78:8e:4f:5d:29:57:fd:1b:14:87:03:a8:e6:26:
                    b2:71:01:ac:73:d4:cc:c6:7b:dc:0f:9b:57:45:9e:
                    d6:e3:27:46:cc:f3:a7:c9:32:70:b2:9b:29:bd:6c:
                    3e:d1:07:7f:ee:3d:33:16:a6:ae:71:69:0b:89:89:
                    08:9d:78:be:d5:fa:3b:b9:2b:47:b6:78:8c:3c:62:
                    b3:ea:a2:e0:60:c3:ef:f6:13:77:4a:ff:e5:71:f9:
                    e1:11:b1:f3:da:27:29:00:f2:89:7a:1d:45:83:1a:
                    0c:58:5d:b2:ce:24:53:f3:18:58:2a:b4:f9:a8:49:
                    bf:ba:d7:2e:f7:94:2f:25:29:bb:ee:fd:32:ec:1f:
                    46:ce:d1:28:75:d8:96:3d:0b:cc:1d:49:65:e8:93:
                    0b:31:c5:fb:9c:ec:87:17:b7:7e:64:d3:e7:45:8f:
                    73:90:dd:ef:a0:81:48:db:44:af:52:03:66:5e:88:
                    fd:6a:cb:d0:b7:9a:6e:9e:e2:73:7b:19:41:6a:13:
                    f0:c7:00:89:7d:57:42:30:c7:13:be:67:4d:bb:81:
                    0c:85:93:be:dc:90:fd:93:d1:2b:05:6d:12:bd:7a:
                    fd:2e:45:34:10:8c:99:0e:a0:21:b1:5f:b9:71:79:
                    06:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1E:C5:3F:2B:28:67:5B:58:F6:06:60:D7:1B:84:C8:D8:63:82:EC
            X509v3 Authority Key Identifier:
                keyid:A9:F9:40:AE:06:C3:2D:0A:CD:BF:32:1E:B9:CA:4A:0B:99:88:DC:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9F940AE06C32D0ACDBF321EB9CA4A0B9988DC81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79F564028EB529CDD82C025FC5AB4DC02E0CD3CEDCF996330523DAA5E253256D/0/3137392e3138392e3232302e302f32332d3234203d3e20323732303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:bc:8c:0c:a3:92:30:28:fd:d5:8b:f2:43:36:49:44:46:2d:
         fd:57:82:28:d4:17:d5:f5:85:44:6c:e8:d1:0f:42:e4:8c:00:
         1a:43:82:fa:69:41:ac:d8:2f:87:3c:c6:1a:87:e3:7f:37:dc:
         74:a5:80:1b:a3:da:33:f6:bd:a9:c1:7e:40:c6:85:fe:60:5e:
         60:2d:6e:cf:3a:54:5d:f9:2d:9a:0c:28:87:a8:71:db:81:02:
         14:ff:83:24:3e:db:ed:04:d0:55:95:da:a2:0a:49:8d:e8:ff:
         8b:21:df:55:0e:e0:ee:c0:e4:95:ce:68:c7:d6:df:64:e1:47:
         f1:40:32:36:09:58:5b:ba:bd:dd:eb:f4:56:a8:58:c8:38:bd:
         d0:b7:7a:6b:0d:2d:ff:de:2b:2d:08:2f:a1:a7:f2:99:c2:89:
         f5:12:73:24:08:13:2e:cd:95:fe:6d:fd:f4:4f:79:b8:f7:9f:
         66:00:d4:53:0d:3c:61:0f:34:c7:95:3f:0c:a4:1b:db:27:14:
         49:d1:9f:ab:db:0a:4c:52:61:de:23:1f:42:b7:29:97:2d:97:
         f8:e0:b8:1d:15:a8:c1:15:82:9a:14:ae:83:d7:e9:c6:36:7f:
         18:cc:59:4c:52:a0:6b:86:f3:61:03:e7:e6:25:d3:07:75:64:
         ba:2b:eb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:57:17 2026 by rpki-client