This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32302e302f32322d3330203d3e203532343730.roa
File:                     3137392e302e32302e302f32322d3330203d3e203532343730.roa (raw, json)
Hash identifier:          0Sc2r0iZZJ3FEexhiS31Gu516g9/X2/R27GRz9J/qLM=
Subject key identifier:   2E:40:95:5D:2B:BC:8E:28:83:0E:AF:73:79:10:0C:A2:01:50:EF:E5
Certificate issuer:       /CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
Certificate serial:       36A496431B2E9DAAB308F70B60BAC74EBE884637
Authority key identifier: 99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32302e302f32322d3330203d3e203532343730.roa
Signing time:             Tue 06 Jan 2026 19:16:50 +0000
ROA not before:           Tue 06 Jan 2026 19:11:50 +0000
ROA not after:            Tue 05 Jan 2027 19:16:50 +0000
asID:                     52470
IP address blocks:        179.0.20.0/22 maxlen: 30
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a4:96:43:1b:2e:9d:aa:b3:08:f7:0b:60:ba:c7:4e:be:88:46:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
        Validity
            Not Before: Jan  6 19:11:50 2026 GMT
            Not After : Jan  5 19:16:50 2027 GMT
        Subject: CN=2E40955D2BBC8E28830EAF7379100CA20150EFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:02:a1:8a:25:3a:cc:3c:17:36:6f:3f:75:6c:
                    cd:44:3e:c5:e8:8c:2d:c8:00:26:81:89:82:43:8a:
                    1f:6e:44:ee:2e:af:2d:9d:f0:8a:f2:b7:59:36:7a:
                    8c:6a:82:e7:d3:0e:bc:90:cd:06:d1:6d:16:4f:07:
                    bb:7d:ae:59:d7:e8:8f:2c:74:a3:3f:a6:cc:fa:83:
                    f8:f1:91:74:51:0b:02:3e:3d:06:14:97:d1:65:fb:
                    59:dd:59:85:1f:b2:ef:72:cf:86:75:bd:c2:59:54:
                    62:64:05:6b:6d:e6:25:c0:60:a0:1b:5e:c6:a1:5e:
                    50:3b:c7:71:7e:fd:a9:f3:e2:f9:42:a4:46:d7:82:
                    b2:10:41:d2:2c:b1:fd:b5:cd:a7:a1:52:fe:ad:8c:
                    1d:42:a8:35:4d:c8:50:37:c3:21:aa:c8:2a:e7:35:
                    ef:c6:9d:1a:c6:b5:35:11:f4:f0:c3:a1:49:ca:c3:
                    41:8c:d5:a1:5d:21:e9:80:c7:f1:a2:cb:4a:ae:6d:
                    9d:af:d7:d0:99:18:94:11:c7:b2:85:e9:06:1d:2a:
                    b2:18:7c:56:7a:98:eb:9e:df:94:30:ad:19:45:06:
                    24:92:f4:67:a8:c7:17:b0:af:21:0f:e4:13:3b:52:
                    29:eb:f9:e1:f8:49:dd:4f:54:65:b6:89:a5:17:ec:
                    13:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:40:95:5D:2B:BC:8E:28:83:0E:AF:73:79:10:0C:A2:01:50:EF:E5
            X509v3 Authority Key Identifier:
                keyid:99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32302e302f32322d3330203d3e203532343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:d2:01:e2:a1:fd:a2:c0:f7:24:47:97:bb:b4:e5:d8:de:0f:
         e0:dd:d2:73:fe:f4:17:77:a5:08:05:8e:57:4c:2f:c4:19:a1:
         dc:cf:5c:1c:bf:5e:6b:4d:de:6b:64:ee:9e:33:40:93:55:8c:
         49:bf:54:f1:b8:ce:e3:4e:6f:54:6a:85:fe:8f:fd:88:55:8a:
         1a:a2:68:4c:e0:dd:19:e1:de:67:28:f9:2a:3e:17:d0:6a:9d:
         60:17:bc:b8:7c:f3:da:b8:c7:c9:ba:f9:15:e9:61:3f:59:7f:
         84:c5:03:f8:13:7a:ba:21:9e:ae:5f:3d:db:d7:80:0a:a3:48:
         22:64:51:e7:6c:67:8b:60:16:97:51:3c:a2:24:22:da:f5:a6:
         28:74:98:2b:0c:3b:a9:cc:5f:3c:75:9d:9e:61:87:01:43:57:
         2a:07:78:d1:77:b7:b4:94:e8:94:5c:ea:39:8c:a2:89:24:71:
         59:1e:df:0b:b2:2e:aa:0a:59:ce:b3:4e:8d:e2:f4:c5:13:52:
         f0:c7:35:6d:18:76:07:b1:1a:22:b3:7f:4f:ac:92:5c:38:1b:
         5e:6c:17:7b:95:4a:8d:66:05:68:76:8a:51:f0:10:f0:30:07:
         77:8a:33:c8:9c:22:39:4e:a1:4d:3e:cd:3d:3e:ae:e2:cd:c9:
         e5:af:ab:cf
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUNqSWQxsunaqzCPcLYLrHTr6IRjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkxRDU4OEE4NkY4N0IyMjRDOUNEQUVBRjlDOTZDNjU1
NUU4MDM4RTAeFw0yNjAxMDYxOTExNTBaFw0yNzAxMDUxOTE2NTBaMDMxMTAvBgNV
BAMTKDJFNDA5NTVEMkJCQzhFMjg4MzBFQUY3Mzc5MTAwQ0EyMDE1MEVGRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAqGKJTrMPBc2bz91bM1EPsXo
jC3IACaBiYJDih9uRO4ury2d8Iryt1k2eoxqgufTDryQzQbRbRZPB7t9rlnX6I8s
dKM/psz6g/jxkXRRCwI+PQYUl9Fl+1ndWYUfsu9yz4Z1vcJZVGJkBWtt5iXAYKAb
XsahXlA7x3F+/anz4vlCpEbXgrIQQdIssf21zaehUv6tjB1CqDVNyFA3wyGqyCrn
Ne/GnRrGtTUR9PDDoUnKw0GM1aFdIemAx/Giy0qubZ2v19CZGJQRx7KF6QYdKrIY
fFZ6mOue35QwrRlFBiSS9GeoxxewryEP5BM7Uinr+eH4Sd1PVGW2iaUX7BM9AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQULkCVXSu8jiiDDq9zeRAMogFQ7+UwHwYDVR0j
BBgwFoAUmR1Yiob4eyJMnNrq+clsZVXoA44wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QTFDOTcyMjM5MUI5MzRFNThCNzg1RTdDQjQzQ0U0QjNG
MzU1NjY4NkQzOTZGQkE2MUZFMDZFQzRDQ0QxRTRDLzAvOTkxRDU4OEE4NkY4N0Iy
MjRDOUNEQUVBRjlDOTZDNjU1NUU4MDM4RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OTFENTg4QTg2Rjg3QjIyNEM5
Q0RBRUFGOUM5NkM2NTU1RTgwMzhFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEExQzk3MjIzOTFCOTM0RTU4Qjc4NUU3Q0I0M0NFNEIzRjM1NTY2ODZE
Mzk2RkJBNjFGRTA2RUM0Q0NEMUU0Qy8wLzMxMzczOTJlMzAyZTMyMzAyZTMwMmYz
MjMyMmQzMzMwMjAzZDNlMjAzNTMyMzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCswAUMA0GCSqG
SIb3DQEBCwUAA4IBAQAg0gHiof2iwPckR5e7tOXY3g/g3dJz/vQXd6UIBY5XTC/E
GaHcz1wcv15rTd5rZO6eM0CTVYxJv1TxuM7jTm9UaoX+j/2IVYoaomhM4N0Z4d5n
KPkqPhfQap1gF7y4fPPauMfJuvkV6WE/WX+ExQP4E3q6IZ6uXz3b14AKo0giZFHn
bGeLYBaXUTyiJCLa9aYodJgrDDupzF88dZ2eYYcBQ1cqB3jRd7e0lOiUXOo5jKKJ
JHFZHt8Lsi6qClnOs06N4vTFE1LwxzVtGHYHsRois39PrJJcOBtebBd7lUqNZgVo
dopR8BDwMAd3ijPInCI5TqFNPs09Pq7izcnlr6vP
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:56 2026 by rpki-client