This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e34382e302f32302d3234203d3e203238303538.roa
File:                     3137392e36302e34382e302f32302d3234203d3e203238303538.roa (raw, json)
Hash identifier:          HmI97kg3ah7Qr8Twy6yd4+hXXxZ9KHX6/M2U3OKH6iw=
Subject key identifier:   3A:70:46:32:CE:9C:F4:13:BF:FE:BC:EF:7D:EF:54:63:6A:43:31:57
Certificate issuer:       /CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
Certificate serial:       5B57943EE17B1A58486E47C8BBAF6F4A28D0A2E0
Authority key identifier: 08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e34382e302f32302d3234203d3e203238303538.roa
Signing time:             Tue 06 Jan 2026 19:16:24 +0000
ROA not before:           Tue 06 Jan 2026 19:11:24 +0000
ROA not after:            Tue 05 Jan 2027 19:16:24 +0000
asID:                     28058
IP address blocks:        179.60.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:57:94:3e:e1:7b:1a:58:48:6e:47:c8:bb:af:6f:4a:28:d0:a2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
        Validity
            Not Before: Jan  6 19:11:24 2026 GMT
            Not After : Jan  5 19:16:24 2027 GMT
        Subject: CN=3A704632CE9CF413BFFEBCEF7DEF54636A433157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:b1:65:81:33:b9:1c:7b:af:04:43:76:8e:
                    59:7a:be:c4:02:cd:97:7d:ed:01:ef:b5:23:04:4e:
                    37:7b:0c:44:c0:a1:2b:23:4d:92:0a:1e:a1:10:ce:
                    39:24:7a:ea:ce:42:bd:98:b5:21:bc:9b:89:00:6d:
                    bd:2e:8e:ef:ee:c0:4c:46:77:26:d2:0d:fe:c1:0e:
                    cc:4c:e6:62:dc:82:c7:5d:1e:44:af:c6:70:76:06:
                    d0:48:14:15:9f:da:71:a6:bf:c9:b7:52:df:68:5c:
                    1e:b2:48:df:3d:1a:43:1a:a9:62:16:05:26:b0:cb:
                    83:a7:dc:dd:47:46:f8:ca:8a:74:6a:27:96:07:e8:
                    1a:0d:0b:77:4c:cc:cb:e3:bf:36:09:12:d8:f9:7f:
                    f5:69:13:c3:49:a9:2c:c7:c5:ca:55:5c:75:d9:16:
                    a0:77:43:ac:1e:21:f4:62:57:f9:04:2a:74:0b:52:
                    81:6a:ab:18:8d:db:a2:86:54:04:4d:c6:01:b4:45:
                    ce:e6:95:30:f7:de:d3:9b:8a:51:50:53:85:80:86:
                    e7:19:c2:2a:1c:12:ce:7d:22:ca:37:70:eb:cb:41:
                    24:74:1c:b6:f6:66:1c:87:9c:51:39:fe:92:57:bc:
                    b1:22:8f:6a:0a:4d:29:b8:19:a7:4d:bf:06:ac:32:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:70:46:32:CE:9C:F4:13:BF:FE:BC:EF:7D:EF:54:63:6A:43:31:57
            X509v3 Authority Key Identifier:
                keyid:08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e34382e302f32302d3234203d3e203238303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:3f:70:60:38:8b:b6:91:73:56:38:94:67:70:57:3c:64:40:
         63:11:af:80:99:e3:96:c8:c1:75:17:6b:88:50:81:bf:26:8e:
         08:47:92:98:34:86:7c:f5:af:4e:e9:22:e5:76:36:60:36:e5:
         22:50:91:97:bc:02:bf:05:b6:d8:27:03:9d:3d:91:e3:61:4e:
         e5:1b:7a:56:28:35:02:2e:9c:d5:f1:66:28:36:9e:b9:f9:b5:
         75:64:10:93:35:37:15:71:32:c4:91:94:f7:fe:8c:b9:c9:bb:
         92:98:b1:6f:8b:da:2b:16:c6:8f:e2:23:e7:a8:bd:cf:84:c0:
         a8:e7:2d:82:ae:0e:f7:a8:6a:56:ab:a8:c2:88:97:a9:1e:70:
         36:f8:8b:b8:75:5a:b1:2b:2e:49:91:88:5b:d5:cb:8d:34:b8:
         f5:f1:84:78:41:e9:c9:3d:29:de:55:fa:34:89:ef:b2:d2:ee:
         cf:f4:f3:08:78:10:d4:d2:5d:11:2c:a3:90:68:6e:37:d4:49:
         fb:34:00:72:d4:d4:ea:14:d5:10:8b:ac:ef:a0:72:28:23:22:
         5e:31:ba:ff:49:da:7d:c2:ec:13:69:40:6f:f1:52:f5:86:25:
         82:a3:ae:22:f4:7c:1b:bb:ae:01:be:7d:2c:19:4e:f9:df:4d:
         9d:9f:02:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:55 2026 by rpki-client