This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32302e3132382e302f31372d3137203d3e2036333036.roa
File:                     3137392e32302e3132382e302f31372d3137203d3e2036333036.roa (raw, json)
Hash identifier:          Od6wDK3ERzz/iaZCVcWNs4aokxArphCQdj+Ws0nxc1o=
Subject key identifier:   7F:2E:2F:16:23:EA:63:3A:72:68:21:14:55:CC:33:70:06:E8:1D:07
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       0E0E35F9E08CF5B21B19AC2BE550863E8350BE14
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32302e3132382e302f31372d3137203d3e2036333036.roa
Signing time:             Tue 06 Jan 2026 19:27:26 +0000
ROA not before:           Tue 06 Jan 2026 19:22:26 +0000
ROA not after:            Tue 05 Jan 2027 19:27:26 +0000
asID:                     6306
IP address blocks:        179.20.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0e:35:f9:e0:8c:f5:b2:1b:19:ac:2b:e5:50:86:3e:83:50:be:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan  6 19:22:26 2026 GMT
            Not After : Jan  5 19:27:26 2027 GMT
        Subject: CN=7F2E2F1623EA633A7268211455CC337006E81D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:f9:e0:ef:f9:d3:a3:6f:fa:95:1b:04:96:
                    dd:a1:a3:c1:33:02:e0:d5:8f:3f:e1:88:76:15:5a:
                    35:9e:a2:5b:12:ee:47:8d:48:72:ec:05:42:52:0d:
                    96:1d:bd:12:6c:c4:f8:22:05:c8:e7:34:3d:56:9f:
                    1e:71:7c:92:88:dc:b0:d2:18:27:5b:e2:a8:8c:e0:
                    58:01:4f:b5:73:68:a5:6d:ff:35:7d:e3:b4:a3:2a:
                    84:30:46:0f:7c:c5:b7:88:36:6d:7f:b8:32:2f:3e:
                    fb:49:5c:18:21:80:74:54:ec:51:83:62:ce:c8:25:
                    b2:54:de:bd:c1:c9:4f:0b:04:96:39:de:23:26:78:
                    44:3d:40:c3:35:25:02:cb:80:4a:f9:29:3a:c4:90:
                    77:ea:dc:30:a8:7e:c3:cb:b3:5f:2e:30:99:ba:fb:
                    ec:8e:d2:7e:d5:67:5d:ab:d7:7c:f9:42:18:24:38:
                    eb:b7:c2:83:a4:b9:88:59:87:15:ec:30:79:e4:4c:
                    f4:77:57:0b:cc:f0:b0:ca:13:db:dd:50:3d:65:89:
                    6d:f4:92:08:24:07:98:e4:e8:6c:27:b3:d7:93:c3:
                    42:67:a5:aa:2f:8e:e5:ed:ec:eb:8d:05:38:44:42:
                    40:c3:90:b0:f1:18:46:3d:60:1e:55:ce:03:8a:d9:
                    30:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2E:2F:16:23:EA:63:3A:72:68:21:14:55:CC:33:70:06:E8:1D:07
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32302e3132382e302f31372d3137203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.20.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         88:21:fe:d6:89:33:d0:6a:57:55:db:5c:5f:fa:14:51:c1:ef:
         f3:90:a3:ae:68:5b:3a:ac:e2:cf:1f:92:88:a9:bb:a8:bb:0d:
         01:63:66:e2:51:0e:d0:14:94:2b:35:20:0d:c8:15:d0:a0:ed:
         ce:fb:76:ae:b6:49:50:f9:77:9a:75:5f:3f:ee:39:3c:e6:51:
         4b:30:5b:76:73:51:cf:da:ba:59:22:49:87:72:59:c3:05:d9:
         a4:20:6e:95:9a:46:7f:7a:9a:3b:f6:fc:04:8a:95:35:cd:1d:
         a1:93:a3:67:a2:aa:31:43:83:a8:b7:61:04:7f:77:31:c1:0e:
         e5:16:53:3b:36:ac:83:a3:60:83:3d:8a:38:ee:8c:b7:c3:e5:
         4a:d2:ab:f4:d4:a0:47:58:09:b9:36:7a:7e:88:1b:d7:78:43:
         1c:eb:c1:c6:7a:38:1b:19:81:8d:de:30:a9:44:50:27:43:59:
         25:4b:1d:be:54:df:9f:a5:01:aa:8f:0c:e5:22:66:96:95:51:
         48:75:b0:aa:3b:4e:57:ae:03:fb:1e:83:95:9c:3a:b8:ed:d1:
         fb:08:92:cd:b5:40:45:c2:4c:94:59:1a:24:8e:7a:d3:76:51:
         b6:05:36:7e:39:6e:95:84:a1:08:78:8d:99:7d:e5:2e:c3:cf:
         e9:25:40:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:19 2026 by rpki-client