This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32312e3132382f32362d3236203d3e203635313034.roa
File:                     3137392e302e32312e3132382f32362d3236203d3e203635313034.roa (raw, json)
Hash identifier:          4749a8pkzgf6FGHPjDcSRHf2mJRWHTXB7jRSObfOQdY=
Subject key identifier:   29:19:8E:79:02:C6:B8:E8:E3:7F:B1:FB:55:2A:C1:42:8A:2D:5D:A8
Certificate issuer:       /CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
Certificate serial:       69F25B5BD7E68982EC28B333B47ACF41C9B8D042
Authority key identifier: 99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32312e3132382f32362d3236203d3e203635313034.roa
Signing time:             Tue 06 Jan 2026 19:16:50 +0000
ROA not before:           Tue 06 Jan 2026 19:11:50 +0000
ROA not after:            Tue 05 Jan 2027 19:16:50 +0000
asID:                     65104
IP address blocks:        179.0.21.128/26 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f2:5b:5b:d7:e6:89:82:ec:28:b3:33:b4:7a:cf:41:c9:b8:d0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
        Validity
            Not Before: Jan  6 19:11:50 2026 GMT
            Not After : Jan  5 19:16:50 2027 GMT
        Subject: CN=29198E7902C6B8E8E37FB1FB552AC1428A2D5DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:55:a9:e9:44:74:8b:a8:58:aa:fd:3e:a9:0a:
                    e4:ac:ca:cb:97:e3:95:ca:68:1f:9e:64:ed:be:cf:
                    94:bf:1d:be:40:b7:96:36:c0:13:ea:4f:96:e9:7b:
                    a2:3c:6d:36:a5:dc:81:67:50:c2:29:40:58:07:86:
                    69:4a:c5:55:7d:bf:4d:34:cb:42:6d:10:96:a3:25:
                    85:0e:4c:a3:2b:e3:ee:27:bb:08:fa:93:4d:8f:3c:
                    02:6e:9d:62:c5:b3:dd:45:c7:00:d9:b9:bb:5f:73:
                    9b:1c:64:65:a1:8f:ed:95:4d:44:af:aa:5f:dd:70:
                    e5:62:6c:74:1d:b5:e0:13:6a:0a:41:54:7b:34:89:
                    ac:51:71:08:08:0a:ac:6b:e8:ca:67:89:1c:03:0a:
                    32:e3:2f:ca:a9:1c:f5:7e:fc:74:96:7b:ce:71:32:
                    ed:57:da:08:ce:fb:2b:55:6a:07:cf:b6:21:fd:d0:
                    d8:50:83:44:be:f3:f8:95:11:ce:e8:5d:e9:e3:4e:
                    c1:f3:e2:cf:e8:93:4f:df:6f:08:66:13:98:9c:9a:
                    aa:af:7a:44:eb:e9:3f:b4:0d:4b:10:31:0c:ff:71:
                    b4:7b:27:5a:12:7d:df:c7:34:61:44:8d:1d:ca:e9:
                    35:f7:ae:40:e3:57:74:8e:fa:d2:6b:8a:98:36:c0:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:19:8E:79:02:C6:B8:E8:E3:7F:B1:FB:55:2A:C1:42:8A:2D:5D:A8
            X509v3 Authority Key Identifier:
                keyid:99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32312e3132382f32362d3236203d3e203635313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.21.128/26

    Signature Algorithm: sha256WithRSAEncryption
         52:10:a3:9b:43:05:af:7a:b9:bf:d8:fa:22:6a:08:8b:ab:79:
         8e:cb:c1:3e:20:fc:ea:5e:d6:b7:00:16:de:8d:92:14:b7:b8:
         12:83:d2:bd:18:8e:9f:87:64:8a:31:03:2d:22:2f:11:a2:32:
         ae:bb:99:0e:c7:ad:84:fc:46:cf:52:33:a8:eb:26:8f:b5:f8:
         e5:46:4e:12:17:38:7c:18:26:fc:71:18:27:38:65:10:ff:39:
         03:df:0c:bd:16:7f:28:51:d0:a1:66:aa:2f:84:74:2f:0e:43:
         5a:30:bc:f6:56:91:58:94:a0:51:ce:b7:3b:f1:1f:d6:76:3e:
         18:61:db:04:8c:a7:c3:e5:8f:0f:17:60:2b:cc:72:be:60:de:
         7b:4f:33:11:4f:9c:dc:fc:cc:af:fa:10:8e:81:65:7a:7a:a3:
         b5:b6:11:4d:87:a3:e2:30:f1:b9:68:95:d0:9b:32:53:b0:47:
         14:64:1c:6c:4c:b4:08:23:0a:41:94:a0:a3:fc:93:82:79:ab:
         b0:a9:8a:6e:f3:41:78:8c:13:21:a6:84:4e:0b:81:e6:4e:73:
         fd:8a:d3:2a:fb:0a:84:21:9c:b7:0e:3e:3a:f8:b1:8e:f5:b4:
         91:09:d5:7b:45:85:66:31:db:6e:fa:82:5e:c7:e9:04:52:be:
         f4:3a:86:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:26:34 2026 by rpki-client