This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138362e302f32332d3233203d3e20323730303437.roa
File:                     3137392e302e3138362e302f32332d3233203d3e20323730303437.roa (raw, json)
Hash identifier:          yT+2LCR1Dq91yH60fSnwpW+SRsDS7oatHG+8JDT0LE4=
Subject key identifier:   E7:D0:D9:C1:DA:73:B0:4C:03:75:FD:41:5E:A8:02:08:F7:36:77:35
Certificate issuer:       /CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Certificate serial:       6858D43D8269295B65EA40B4BF031608298D3454
Authority key identifier: 90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138362e302f32332d3233203d3e20323730303437.roa
Signing time:             Tue 06 Jan 2026 19:00:23 +0000
ROA not before:           Tue 06 Jan 2026 18:55:23 +0000
ROA not after:            Tue 05 Jan 2027 19:00:23 +0000
asID:                     270047
IP address blocks:        179.0.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:58:d4:3d:82:69:29:5b:65:ea:40:b4:bf:03:16:08:29:8d:34:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
        Validity
            Not Before: Jan  6 18:55:23 2026 GMT
            Not After : Jan  5 19:00:23 2027 GMT
        Subject: CN=E7D0D9C1DA73B04C0375FD415EA80208F7367735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:d5:f7:0d:c1:f2:f6:78:e1:36:8f:1c:35:
                    f4:b1:bb:a1:5a:57:1b:8f:ee:c8:2b:8d:e8:76:56:
                    a4:be:92:12:97:11:3e:96:4e:d3:fd:f3:35:8b:0d:
                    2b:c2:e1:42:ce:94:c8:44:81:c1:20:de:eb:da:67:
                    75:ef:91:ba:ec:fa:f6:80:29:fe:78:d3:51:60:f9:
                    6a:c5:28:5a:de:6b:49:1c:c3:06:8b:4b:e3:4a:dc:
                    5e:f9:16:68:b5:bd:e9:c6:20:7c:53:6e:f5:b2:04:
                    b3:0a:e1:83:39:5d:db:29:13:d7:a9:a7:1d:30:bc:
                    01:27:63:dd:59:d8:6b:1c:bc:be:db:5d:46:f0:b7:
                    44:44:39:73:42:7a:e5:0e:d9:71:06:41:e6:62:26:
                    3a:b3:b9:6a:85:85:e6:8c:2f:bd:af:79:ee:31:4d:
                    10:c6:65:b3:3f:db:45:8e:90:38:88:46:fb:6f:c0:
                    8d:80:ae:fa:10:5c:87:b6:86:ee:a5:69:a2:48:29:
                    ba:61:ad:66:e8:27:ad:58:99:8b:2a:51:26:bc:5b:
                    6c:27:71:d5:34:44:6c:14:c0:98:61:02:58:b0:a9:
                    b3:61:d4:59:e9:c2:28:39:17:ca:f7:eb:26:b6:49:
                    7e:af:0d:1c:2e:1a:11:7a:4b:57:18:c6:cb:7c:34:
                    07:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D0:D9:C1:DA:73:B0:4C:03:75:FD:41:5E:A8:02:08:F7:36:77:35
            X509v3 Authority Key Identifier:
                keyid:90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138362e302f32332d3233203d3e20323730303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:23:bc:ab:88:6b:f8:98:16:e6:f9:08:9f:dc:9f:9d:92:ef:
         5f:10:5f:c8:53:dc:8d:4b:79:b1:9a:ac:6c:63:a9:11:fa:75:
         37:e5:f3:a5:24:d7:76:8a:44:b3:56:00:06:bd:5b:ad:a7:0f:
         a4:2f:1f:c6:72:9d:50:42:61:d2:f7:22:b8:41:c2:06:a9:9b:
         68:fa:71:ca:d8:d6:ae:dd:f7:dd:09:93:e0:76:a3:05:68:f1:
         36:05:36:29:ac:ac:d5:5f:a7:b3:da:85:a2:6a:b2:77:dc:10:
         fb:7f:df:72:f0:33:1e:dc:c2:cd:01:c0:3b:02:a2:66:05:47:
         5e:46:e2:ce:af:24:22:8d:a7:c4:f7:a3:9f:c3:ce:67:dc:15:
         e1:a8:c2:cf:26:3c:4d:f9:68:5d:c6:46:24:5d:9a:2a:12:fd:
         54:f1:80:12:19:5b:f3:08:4a:47:2b:5a:57:ab:ba:4d:31:05:
         bb:f5:76:05:b7:ae:e0:d8:19:0d:f9:82:a8:8f:f1:b9:50:b9:
         4f:e1:02:9a:36:ef:ab:8d:25:60:d2:cd:4e:b4:b2:40:c3:a3:
         33:86:27:49:a1:7e:8c:a6:22:b4:e4:04:f5:70:6a:ac:32:f9:
         71:dc:3f:e7:4b:10:31:eb:6d:14:6b:f9:90:dc:97:b5:8c:d6:
         34:f7:cc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:49:39 2026 by rpki-client