This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/3136372e3234392e32302e302f32322d3234203d3e20323634363335.roa
File:                     3136372e3234392e32302e302f32322d3234203d3e20323634363335.roa (raw, json)
Hash identifier:          SAbiiPvH1zSGLQxapQJEXodwsU1wMPseJ5uLBi0Mfkc=
Subject key identifier:   78:1D:D4:E6:D1:00:1C:B0:DF:FA:49:AB:B8:BD:41:48:92:B0:85:FB
Certificate issuer:       /CN=59A4FF40C45E2884AC4C181079D0846DC88152FA
Certificate serial:       165F7FB3B7530B5B97624B9827512AE105275C4C
Authority key identifier: 59:A4:FF:40:C4:5E:28:84:AC:4C:18:10:79:D0:84:6D:C8:81:52:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/3136372e3234392e32302e302f32322d3234203d3e20323634363335.roa
Signing time:             Tue 06 Jan 2026 20:58:08 +0000
ROA not before:           Tue 06 Jan 2026 20:53:08 +0000
ROA not after:            Tue 05 Jan 2027 20:58:08 +0000
asID:                     264635
IP address blocks:        167.249.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5f:7f:b3:b7:53:0b:5b:97:62:4b:98:27:51:2a:e1:05:27:5c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59A4FF40C45E2884AC4C181079D0846DC88152FA
        Validity
            Not Before: Jan  6 20:53:08 2026 GMT
            Not After : Jan  5 20:58:08 2027 GMT
        Subject: CN=781DD4E6D1001CB0DFFA49ABB8BD414892B085FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:00:47:a9:c9:59:16:cb:f9:25:7d:85:f0:
                    c2:2e:6e:ad:7b:ac:e1:7d:d9:c9:43:25:ae:a5:65:
                    5c:75:4e:d7:6f:cf:c1:43:cb:8d:33:45:68:82:ed:
                    de:73:57:b2:0a:65:43:1e:3a:96:d0:34:ef:f2:15:
                    a2:42:ae:9b:20:a1:8e:98:28:4b:95:44:35:19:3b:
                    89:06:6c:38:ae:de:c9:05:3b:15:10:a2:67:6e:3b:
                    0b:65:5d:aa:82:1c:0a:de:f6:0c:a2:cf:65:9a:87:
                    06:a6:0f:5b:b1:b9:59:a0:33:fa:93:25:b4:71:27:
                    96:d0:7e:0e:1f:c8:3e:8b:2d:da:98:43:ab:56:9e:
                    69:0d:c4:e5:62:13:e1:a5:0e:bc:b3:7d:20:b2:96:
                    12:8f:5b:f3:1e:d5:0e:25:cd:0b:c3:f7:bd:82:0a:
                    2f:de:e9:d4:4d:39:4d:16:de:b7:be:82:77:66:98:
                    39:17:1f:49:7e:f3:05:ba:91:ad:4c:43:8e:da:69:
                    e9:84:b5:0e:43:d1:e8:0b:8b:76:30:88:05:c7:73:
                    b1:f7:01:e5:54:ba:f2:f7:d8:2f:89:c7:f3:85:7e:
                    18:1d:e8:f6:4e:78:0d:a3:7d:4e:a9:09:ff:b2:92:
                    b8:87:f5:29:46:5f:6d:85:58:98:f6:09:d5:e3:57:
                    86:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1D:D4:E6:D1:00:1C:B0:DF:FA:49:AB:B8:BD:41:48:92:B0:85:FB
            X509v3 Authority Key Identifier:
                keyid:59:A4:FF:40:C4:5E:28:84:AC:4C:18:10:79:D0:84:6D:C8:81:52:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/3136372e3234392e32302e302f32322d3234203d3e20323634363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:ea:67:a1:63:0e:45:73:ba:7d:bc:2f:3a:9a:37:00:da:68:
         ac:12:66:7b:16:b0:09:e1:f0:b9:69:97:03:3a:4e:fc:41:bc:
         23:6f:8d:22:42:dd:a3:60:1d:f5:f9:a4:b6:1e:6d:4f:13:7b:
         8e:30:e9:50:89:49:73:2e:23:96:92:92:63:ac:0c:8e:91:59:
         9d:60:47:e1:e7:79:84:b8:fb:ac:cb:1e:76:2b:d9:83:f1:8f:
         cd:4f:b6:76:e3:62:20:71:a4:05:32:67:bb:5b:4f:7f:e1:19:
         8b:7d:66:f9:53:a9:03:2f:34:cd:3e:0f:62:39:b8:8c:41:ae:
         ca:2c:ce:94:fd:eb:9d:c8:32:a3:c1:7e:e4:3d:ff:6c:8f:58:
         0a:3f:ec:b1:da:d7:68:f4:c8:08:1b:ab:48:2a:c0:a9:28:ae:
         08:ec:dd:43:b9:14:ac:ff:d4:91:e0:90:86:68:71:01:5a:12:
         03:66:61:60:d9:0c:0d:8a:49:70:fe:8c:2c:c4:94:53:c0:81:
         27:4b:e6:1e:f2:f4:06:29:10:18:d6:98:a6:73:c2:db:fe:00:
         00:77:89:d1:9e:0f:59:f4:3d:89:24:44:27:51:54:82:45:7f:
         33:0f:2d:52:28:23:6c:47:09:a2:04:0d:e1:39:58:13:b7:2a:
         d7:64:37:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:34 2026 by rpki-client