This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS21578.roa
File:                     AS21578.roa (raw, json)
Hash identifier:          a5XxGAGLwSNdyzn+U4p0K5YiL+b3SCPNPK5NKhPnSZU=
Subject key identifier:   8E:23:01:7F:58:63:04:05:9C:24:6D:AC:68:CF:67:12:DE:56:A8:32
Certificate issuer:       /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial:       7E2C9B4F84013FD0787BE05B3F971253D9AAB4AA
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS21578.roa
Signing time:             Tue 06 Jan 2026 19:15:54 +0000
ROA not before:           Tue 06 Jan 2026 19:10:54 +0000
ROA not after:            Tue 05 Jan 2027 19:15:54 +0000
asID:                     21578
IP address blocks:        190.68.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2c:9b:4f:84:01:3f:d0:78:7b:e0:5b:3f:97:12:53:d9:aa:b4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
        Validity
            Not Before: Jan  6 19:10:54 2026 GMT
            Not After : Jan  5 19:15:54 2027 GMT
        Subject: CN=8E23017F586304059C246DAC68CF6712DE56A832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f8:eb:b9:12:d3:2b:93:28:3d:d2:a5:a5:80:
                    49:ae:db:4c:56:04:b5:8b:8e:ba:6b:e6:57:0a:2d:
                    42:5c:69:92:e8:d5:dc:aa:26:69:8d:b6:71:1e:76:
                    f7:9c:ea:ef:4b:d4:17:30:2e:f7:1d:73:7f:3b:4b:
                    24:6b:c5:f2:c5:16:ff:c9:f8:fd:73:21:1e:9b:e1:
                    43:d4:63:ae:58:c0:5d:44:46:43:0c:0a:09:9d:8d:
                    ec:81:b2:52:d8:2b:1d:50:2d:f2:fc:e8:39:60:62:
                    c1:cc:27:ee:42:85:a1:9a:ef:fa:50:9f:87:42:ec:
                    93:b0:e6:a5:a9:4c:4c:20:7a:0b:64:0d:4e:ff:f6:
                    c2:01:33:68:92:a5:58:9a:ce:25:3e:bc:4f:50:11:
                    4f:1b:61:1d:ed:a3:59:24:84:f6:99:ed:0c:9d:b1:
                    40:d1:72:89:a7:85:57:69:cf:eb:11:35:16:6e:b2:
                    e8:51:8b:b9:fe:be:41:4f:a1:d0:a0:1a:4f:58:1d:
                    b5:6a:85:07:88:51:8b:71:39:f9:a7:15:b4:a9:8a:
                    1c:cb:8c:41:bb:19:4c:9c:d1:18:ba:2c:68:29:39:
                    7f:e2:b8:eb:98:b4:1d:c2:46:87:c0:4b:34:d6:31:
                    b9:47:f7:b5:18:5d:c8:b5:03:ad:a0:06:63:ee:8e:
                    b2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:23:01:7F:58:63:04:05:9C:24:6D:AC:68:CF:67:12:DE:56:A8:32
            X509v3 Authority Key Identifier:
                keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS21578.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.68.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:9c:bb:51:b4:01:0a:e6:07:78:17:02:68:a9:4d:67:bf:c7:
         cc:57:02:a9:64:e5:0b:ac:5f:2e:50:09:36:e5:fd:72:2f:ce:
         77:19:52:c4:62:c4:57:41:ce:27:aa:5f:f1:e7:8b:fe:74:29:
         d9:49:e6:78:b0:b8:df:60:64:22:b1:6a:10:a9:25:26:06:ba:
         f0:94:66:e9:d6:89:e0:23:39:c2:bf:ee:34:9e:c6:17:b2:ab:
         82:d9:14:c7:d7:11:c9:4d:d7:d9:9e:cf:e2:ae:a4:36:34:54:
         ba:5e:92:88:f2:60:3e:44:38:36:c3:2a:57:bd:04:c7:35:ac:
         d7:4e:69:71:b8:d7:6d:38:03:55:3b:f9:33:a1:f0:78:d5:05:
         0c:e3:c3:e1:d9:e1:bd:0f:9b:f2:2b:99:83:76:65:cd:71:0c:
         dc:d5:83:b0:fb:56:1e:e4:4a:d6:47:07:24:89:8a:3a:0d:f2:
         16:3f:08:a2:26:e0:ab:94:0e:01:40:c0:1a:5d:ef:dd:2e:e4:
         3c:d3:69:f7:6e:4c:2d:09:ce:95:87:44:c1:1c:9b:ea:48:91:
         fc:ae:30:d2:ee:1d:d1:70:4a:64:a1:f0:d4:b3:0c:e9:32:9d:
         1e:74:0b:d5:3f:31:e9:1f:80:6d:61:57:7c:0e:6d:1f:f7:1f:
         d5:e9:b0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:21:21 2026 by rpki-client