This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3131302e302f32342d3234203d3e20323632323138.roa
File:                     3137302e37392e3131302e302f32342d3234203d3e20323632323138.roa (raw, json)
Hash identifier:          A5m2LQmL8Sf34Q+JwA84uq1Dz0F2J/PVpZFjSnyBA5Q=
Subject key identifier:   34:7F:7E:2F:45:A6:B5:46:97:6B:E6:D8:79:94:24:D8:5E:16:33:3E
Certificate issuer:       /CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
Certificate serial:       3FCCB2D76B0758B139531342C028BF9715F48267
Authority key identifier: 37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3131302e302f32342d3234203d3e20323632323138.roa
Signing time:             Tue 06 Jan 2026 19:45:33 +0000
ROA not before:           Tue 06 Jan 2026 19:40:33 +0000
ROA not after:            Tue 05 Jan 2027 19:45:33 +0000
asID:                     262218
IP address blocks:        170.79.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cc:b2:d7:6b:07:58:b1:39:53:13:42:c0:28:bf:97:15:f4:82:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
        Validity
            Not Before: Jan  6 19:40:33 2026 GMT
            Not After : Jan  5 19:45:33 2027 GMT
        Subject: CN=347F7E2F45A6B546976BE6D8799424D85E16333E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:06:50:5c:88:e5:45:a8:24:01:48:ac:13:
                    5c:92:d4:f4:b4:e4:e7:e5:ca:b8:40:39:5b:ae:88:
                    99:c4:bb:30:6b:ea:3e:81:33:c3:f9:05:5f:0f:99:
                    44:b0:f1:9d:ff:68:53:88:3e:fb:5e:b0:0e:e9:11:
                    af:61:5a:19:9d:00:0d:d3:ea:37:2a:32:d0:69:6f:
                    ef:64:c8:ff:60:e0:08:9b:9d:62:de:eb:5e:c0:da:
                    fe:de:bb:ed:d5:27:c5:a9:2e:87:a8:e6:6b:47:9d:
                    38:0e:3f:58:da:8c:a3:08:fd:6c:bd:0d:f0:16:e4:
                    69:8d:d3:76:c7:90:95:c2:3e:50:8f:35:15:49:55:
                    d8:ee:c3:1d:89:21:c2:84:4e:07:36:70:37:a3:60:
                    70:7e:47:12:83:70:b4:2a:e5:47:ff:0b:38:8f:5a:
                    71:88:da:c4:28:9b:18:9f:2b:1d:ef:ea:1a:9b:a3:
                    74:ae:a6:f1:2d:25:1f:c5:4b:17:98:e7:60:43:0b:
                    21:71:84:3c:9c:59:fa:6f:28:97:7d:f8:20:f0:03:
                    52:ff:81:a8:cd:40:d9:c1:a0:fa:a7:fb:db:24:57:
                    76:88:74:e3:2b:24:e0:b3:c7:97:ad:82:3f:76:2a:
                    b4:55:ee:66:e5:44:42:29:fa:d7:83:f2:72:ac:86:
                    7d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7F:7E:2F:45:A6:B5:46:97:6B:E6:D8:79:94:24:D8:5E:16:33:3E
            X509v3 Authority Key Identifier:
                keyid:37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3131302e302f32342d3234203d3e20323632323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:4d:05:5b:64:3b:e1:c1:4b:44:e9:c6:c2:83:e7:81:31:22:
         7f:b2:af:cf:90:92:be:49:c4:2a:2c:68:bf:9f:35:ad:79:80:
         4d:dc:52:76:28:ce:b6:cd:fd:b0:a0:9f:73:c0:cd:1a:c3:01:
         f7:f2:69:9a:86:44:b0:3d:31:e3:01:7e:e3:1f:cc:32:d2:b8:
         d2:11:a7:19:3c:40:5c:83:e0:de:bb:2e:a2:08:fe:b7:d4:68:
         5a:16:dd:39:7b:e5:90:da:5c:1e:23:bc:9d:0b:23:ac:fc:8f:
         29:ab:d8:84:b5:06:a8:c8:88:21:32:3f:2c:50:16:7a:80:da:
         c9:88:a0:a1:ad:e8:ec:60:4e:5a:cb:64:e7:84:cc:cb:c7:9b:
         d9:a1:ab:10:8f:79:9d:ac:40:d3:60:2f:ff:b8:37:74:21:4d:
         07:d8:de:b4:25:05:72:98:f6:fc:24:e3:be:a6:99:f9:43:64:
         b1:4b:19:1c:63:a9:57:9b:b4:04:68:9f:0a:7b:ea:18:eb:d6:
         87:cc:b5:27:17:10:00:b1:1b:9b:4d:93:10:eb:8f:3c:5f:04:
         87:d8:58:74:cd:2f:a2:e0:27:9b:04:84:4c:d4:bd:b0:6e:ed:
         06:06:8d:a5:25:80:85:a0:cc:92:af:c6:4e:86:70:57:5f:c5:
         92:9c:96:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:48 2026 by rpki-client