This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3130382e302f32342d3234203d3e20323632323138.roa
File:                     3137302e37392e3130382e302f32342d3234203d3e20323632323138.roa (raw, json)
Hash identifier:          XIrxGQPaOlCndGI+5flnLpp4P7sZYyLaGqe6Ktm30PA=
Subject key identifier:   A7:13:91:E6:38:5A:3A:3D:FF:B9:56:0F:23:8E:72:E7:3F:45:3C:A3
Certificate issuer:       /CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
Certificate serial:       63D4C50021DC38877822D55D5DBF419FD7F59900
Authority key identifier: 37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3130382e302f32342d3234203d3e20323632323138.roa
Signing time:             Tue 06 Jan 2026 19:45:32 +0000
ROA not before:           Tue 06 Jan 2026 19:40:32 +0000
ROA not after:            Tue 05 Jan 2027 19:45:32 +0000
asID:                     262218
IP address blocks:        170.79.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d4:c5:00:21:dc:38:87:78:22:d5:5d:5d:bf:41:9f:d7:f5:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
        Validity
            Not Before: Jan  6 19:40:32 2026 GMT
            Not After : Jan  5 19:45:32 2027 GMT
        Subject: CN=A71391E6385A3A3DFFB9560F238E72E73F453CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:02:57:9c:c8:13:91:bf:1f:31:00:0f:54:0f:
                    f9:d8:6c:d2:23:d3:16:19:81:d4:1a:44:67:12:5f:
                    fc:77:b7:ac:cc:89:0a:a7:33:19:95:4d:a2:69:01:
                    72:ff:ce:72:cb:63:77:94:1d:36:9c:22:5f:e0:fb:
                    e5:a8:fb:e5:a1:88:25:5d:19:32:00:3b:cf:93:a5:
                    fe:50:06:44:85:a6:02:60:66:7a:2a:1c:ea:07:4d:
                    c7:f6:84:20:e7:57:44:41:0b:c2:7f:74:73:55:e9:
                    40:d7:07:da:e6:c3:f9:52:e8:8c:97:bc:e1:81:4f:
                    71:ea:3a:08:4b:4d:39:b6:f7:f4:6d:a3:4e:69:1a:
                    ca:0e:f5:b1:a8:4f:b0:f9:c6:24:92:1f:86:9a:c3:
                    e2:20:50:df:8c:db:0d:fc:7e:cb:ed:2f:8e:a7:91:
                    c9:a3:9e:55:ff:87:06:ef:a9:34:fc:a5:eb:25:dd:
                    a9:4c:6d:82:40:f0:ab:e4:47:e3:fb:88:e6:1b:75:
                    aa:60:6f:a3:c3:8f:cb:38:9b:90:58:ba:1d:c9:1b:
                    fa:a9:5c:98:a9:7a:f4:3a:d9:08:9f:3c:00:0e:a8:
                    f4:d4:e6:86:8a:d3:a1:74:88:d5:02:4c:8f:9f:ee:
                    f8:ab:85:c2:2d:43:f7:71:b8:8c:72:83:f1:23:71:
                    02:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:13:91:E6:38:5A:3A:3D:FF:B9:56:0F:23:8E:72:E7:3F:45:3C:A3
            X509v3 Authority Key Identifier:
                keyid:37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3130382e302f32342d3234203d3e20323632323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:18:35:b9:b4:77:ef:dd:18:0f:0c:48:65:04:3a:55:c9:9a:
         7a:15:79:ff:24:5a:2e:3b:4e:fb:12:aa:0f:eb:e5:82:26:00:
         6d:20:99:f6:65:0f:1b:22:9b:e2:a2:75:e4:6f:17:6a:96:59:
         58:6c:00:37:4a:e5:4f:0c:4c:5f:af:8f:c0:c8:07:32:72:c1:
         15:25:53:f5:69:5d:23:b3:48:e1:ff:2e:92:c5:49:78:d4:9e:
         95:82:ef:6c:ff:6d:44:c9:d9:27:e8:0d:b8:56:93:db:15:5d:
         ae:03:84:a7:a1:9b:26:81:37:c5:77:b1:f9:7b:30:d9:79:4f:
         70:99:70:04:81:e0:c2:d8:d4:3f:1d:f7:6f:a9:02:54:5e:09:
         ba:5e:12:aa:5d:60:92:7e:cd:8d:54:f0:5d:9b:4f:7f:ee:b9:
         95:4a:e5:20:42:e9:f8:78:2e:69:53:83:df:d6:53:5a:0f:69:
         d8:a8:df:62:01:60:c9:d7:9f:ff:ba:80:6a:46:b6:e3:0c:27:
         20:51:78:06:92:ea:11:64:8b:7e:23:f7:76:bc:6b:15:cb:03:
         e2:c6:f7:f3:93:17:c1:ed:d6:dd:31:f1:43:c4:83:2a:23:8d:
         5f:a5:fe:c1:3d:51:49:ad:89:22:6c:4c:1b:c8:84:84:c3:a7:
         56:55:a9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:31 2026 by rpki-client