This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138372e302f32342d3234203d3e20323730303437.roa
File:                     3137392e302e3138372e302f32342d3234203d3e20323730303437.roa (raw, json)
Hash identifier:          7JrmIsvT19DhifSC5O4kqyD/RrKBgpa5yge4gsimGtY=
Subject key identifier:   6D:A9:35:4A:75:2F:48:76:A9:2C:11:1D:D8:73:89:1E:EB:2D:CE:67
Certificate issuer:       /CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Certificate serial:       17DC77FF286BD1CA80B9B1EAC0A7C2361ECA99D2
Authority key identifier: 90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138372e302f32342d3234203d3e20323730303437.roa
Signing time:             Tue 06 Jan 2026 19:00:22 +0000
ROA not before:           Tue 06 Jan 2026 18:55:22 +0000
ROA not after:            Tue 05 Jan 2027 19:00:22 +0000
asID:                     270047
IP address blocks:        179.0.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:dc:77:ff:28:6b:d1:ca:80:b9:b1:ea:c0:a7:c2:36:1e:ca:99:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
        Validity
            Not Before: Jan  6 18:55:22 2026 GMT
            Not After : Jan  5 19:00:22 2027 GMT
        Subject: CN=6DA9354A752F4876A92C111DD873891EEB2DCE67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:fe:7a:99:7a:22:2e:1f:46:90:2f:4a:51:
                    dd:58:8d:94:ba:e0:5a:fd:69:aa:ac:bd:df:b6:a6:
                    7c:d3:75:d0:3a:fd:e8:b7:2b:27:32:d5:d1:94:8d:
                    b3:3c:f9:7c:10:5f:c7:24:96:14:ab:58:d6:f6:57:
                    3e:e7:94:6a:69:a8:19:ad:30:60:c9:ae:fc:59:fa:
                    d0:1f:f9:c2:cf:4f:99:bc:3e:10:81:0b:2c:de:3a:
                    4b:18:6d:15:7a:2e:c3:e8:0d:00:16:6c:c0:7c:4b:
                    fd:03:f6:65:9f:05:f9:4a:0b:48:88:4c:a5:43:fa:
                    93:c5:cb:7c:ce:06:fd:bb:fc:21:31:6f:46:89:b0:
                    30:f9:86:a1:62:ce:f1:9c:a6:7d:93:c3:64:3c:22:
                    74:1c:57:c4:2e:dc:79:e9:47:d5:9c:93:4f:70:17:
                    bc:07:e2:27:2e:4c:23:9f:fa:24:c3:40:4f:67:10:
                    fa:ec:6d:27:69:03:67:4d:d0:5f:b5:e1:bd:81:9b:
                    a8:83:07:e4:f0:e4:c4:2b:8b:57:25:c1:5e:b2:12:
                    10:17:07:dd:d2:44:56:cd:2e:ea:55:33:03:c0:a4:
                    47:62:49:f7:bc:5e:42:a4:1b:60:7b:c0:e1:59:5a:
                    32:f0:d8:72:e1:68:38:cd:05:41:df:b1:20:0a:6a:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A9:35:4A:75:2F:48:76:A9:2C:11:1D:D8:73:89:1E:EB:2D:CE:67
            X509v3 Authority Key Identifier:
                keyid:90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138372e302f32342d3234203d3e20323730303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:bc:ef:53:8d:05:10:dd:08:cc:3e:6d:1a:df:0e:74:c6:5f:
         7b:7d:a2:1b:68:05:96:21:5e:99:d8:58:db:1f:40:46:e8:09:
         68:66:cc:5e:f9:e9:8e:dc:42:d2:21:22:2b:76:2e:c7:51:b9:
         81:ae:37:0b:7e:0e:ae:49:a0:20:c2:d6:54:06:9b:bc:2b:9a:
         3c:e8:8d:12:8c:7f:9f:6b:ae:8d:51:1a:98:cf:93:2e:e0:96:
         27:46:b4:36:0d:fd:10:2b:e4:b0:5f:d3:79:8d:e4:9f:6f:bf:
         00:23:80:bb:c7:43:f1:e7:c3:9c:64:f1:71:5e:bb:c1:f7:90:
         ee:f6:39:1e:e0:9e:1e:0d:3d:9b:f0:f3:cf:1d:8d:8b:29:6f:
         d8:ff:7d:dd:c4:7b:a0:43:7f:26:47:d6:38:da:aa:0d:be:3b:
         f4:49:e5:ae:f6:9c:96:01:86:bc:d9:24:5e:aa:4e:a4:ef:9f:
         f3:ff:33:50:dd:a7:2c:3c:e1:44:51:c0:53:b4:62:d2:b7:f7:
         8b:f5:c7:ff:4f:d0:33:5c:cf:cc:db:73:20:b6:95:aa:38:bf:
         f5:82:82:e4:6c:52:f8:70:88:69:1e:24:26:10:ed:65:5a:8d:
         54:e7:48:1b:02:78:25:94:85:fe:b3:22:e2:fa:37:b6:d8:83:
         7f:f2:12:41
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUF9x3/yhr0cqAubHqwKfCNh7KmdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBBRkQyRUQ5ODZBNERBRTg2QTQ0OEMxRTZFNTY3Q0Uz
MzE4NkJDNDAeFw0yNjAxMDYxODU1MjJaFw0yNzAxMDUxOTAwMjJaMDMxMTAvBgNV
BAMTKDZEQTkzNTRBNzUyRjQ4NzZBOTJDMTExREQ4NzM4OTFFRUIyRENFNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK2f56mXoiLh9GkC9KUd1YjZS6
4Fr9aaqsvd+2pnzTddA6/ei3Kycy1dGUjbM8+XwQX8cklhSrWNb2Vz7nlGppqBmt
MGDJrvxZ+tAf+cLPT5m8PhCBCyzeOksYbRV6LsPoDQAWbMB8S/0D9mWfBflKC0iI
TKVD+pPFy3zOBv27/CExb0aJsDD5hqFizvGcpn2Tw2Q8InQcV8Qu3HnpR9Wck09w
F7wH4icuTCOf+iTDQE9nEPrsbSdpA2dN0F+14b2Bm6iDB+Tw5MQri1clwV6yEhAX
B93SRFbNLupVMwPApEdiSfe8XkKkG2B7wOFZWjLw2HLhaDjNBUHfsSAKaq8FAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUbak1SnUvSHapLBEd2HOJHustzmcwHwYDVR0j
BBgwFoAUkK/S7ZhqTa6GpEjB5uVnzjMYa8QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRjNDNDY4RkYyRDI2QUZGNkRDOTZCQzQ0OUVEMTc0QzlC
NUYwMTlFMEVEMkRGMDlGRjlEQjdDMjhERjY5NjY0LzAvOTBBRkQyRUQ5ODZBNERB
RTg2QTQ0OEMxRTZFNTY3Q0UzMzE4NkJDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MEFGRDJFRDk4NkE0REFFODZB
NDQ4QzFFNkU1NjdDRTMzMTg2QkM0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUYzQzQ2OEZGMkQyNkFGRjZEQzk2QkM0NDlFRDE3NEM5QjVGMDE5RTBF
RDJERjA5RkY5REI3QzI4REY2OTY2NC8wLzMxMzczOTJlMzAyZTMxMzgzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMDMwMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALMAuzAN
BgkqhkiG9w0BAQsFAAOCAQEAfLzvU40FEN0IzD5tGt8OdMZfe32iG2gFliFemdhY
2x9ARugJaGbMXvnpjtxC0iEiK3Yux1G5ga43C34OrkmgIMLWVAabvCuaPOiNEox/
n2uujVEamM+TLuCWJ0a0Ng39ECvksF/TeY3kn2+/ACOAu8dD8efDnGTxcV67wfeQ
7vY5HuCeHg09m/Dzzx2Niylv2P993cR7oEN/JkfWONqqDb479EnlrvaclgGGvNkk
XqpOpO+f8/8zUN2nLDzhRFHAU7Ri0rf3i/XH/0/QM1zPzNtzILaVqji/9YKC5GxS
+HCIaR4kJhDtZVqNVOdIGwJ4JZSF/rMi4vo3ttiDf/ISQQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:20:29 2026 by rpki-client