This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32312e3132382e302f31372d3137203d3e2036333036.roa
File:                     3137392e32312e3132382e302f31372d3137203d3e2036333036.roa (raw, json)
Hash identifier:          1EQQvXbT5SQubcXH4TP7GvJ6KmBlsfKtSBO4oYIiZZE=
Subject key identifier:   C2:EE:C3:DE:4D:96:A5:AD:6A:8A:A8:54:20:B6:A0:F0:AA:07:49:98
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       06F5E928280F14B87DB41BE2026CB69309271531
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32312e3132382e302f31372d3137203d3e2036333036.roa
Signing time:             Tue 06 Jan 2026 19:27:27 +0000
ROA not before:           Tue 06 Jan 2026 19:22:27 +0000
ROA not after:            Tue 05 Jan 2027 19:27:27 +0000
asID:                     6306
IP address blocks:        179.21.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f5:e9:28:28:0f:14:b8:7d:b4:1b:e2:02:6c:b6:93:09:27:15:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan  6 19:22:27 2026 GMT
            Not After : Jan  5 19:27:27 2027 GMT
        Subject: CN=C2EEC3DE4D96A5AD6A8AA85420B6A0F0AA074998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fa:21:39:1d:9b:f3:ac:59:a9:76:03:ca:17:
                    7d:c6:5c:43:84:29:5c:fc:10:1d:59:83:e8:ce:9e:
                    9a:88:15:5a:a4:51:7a:57:30:84:62:96:71:be:54:
                    f9:40:dc:12:d3:f0:5a:5f:d0:b9:16:38:58:72:e5:
                    fa:d5:6b:81:2a:fe:c1:88:d8:33:d8:70:e7:a1:2a:
                    4a:5d:d5:48:d7:e5:20:4f:65:e0:0b:e8:d7:a4:a6:
                    2a:14:e3:b5:3b:94:71:82:23:82:11:60:a9:50:63:
                    6e:fd:9b:1e:12:eb:7f:20:f4:66:93:14:3d:7a:cf:
                    a2:dd:78:aa:c7:36:23:73:f0:f7:39:f3:a5:77:1a:
                    dd:76:b3:ac:0e:45:3b:e7:90:7e:77:a5:5d:34:ec:
                    0c:e8:ec:34:e6:b0:1c:1f:62:81:b7:4d:b2:c0:06:
                    83:98:1a:47:18:f4:a7:88:82:07:45:a5:d2:4d:aa:
                    7f:2c:0c:40:5f:a4:76:5f:24:65:f0:19:ba:26:59:
                    8f:5e:da:48:2e:c8:e6:47:b5:23:a2:f4:b2:4f:1b:
                    64:92:0e:e2:95:fd:a7:2b:de:ad:15:f0:55:ef:e2:
                    4c:6a:e7:d9:0c:41:99:d0:2f:aa:66:01:62:dd:96:
                    cb:e8:00:e5:39:47:2e:84:27:c8:88:36:d9:4e:5f:
                    8f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EE:C3:DE:4D:96:A5:AD:6A:8A:A8:54:20:B6:A0:F0:AA:07:49:98
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32312e3132382e302f31372d3137203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.21.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ab:4d:5a:68:0f:5e:57:d0:58:03:10:f8:57:bf:25:2d:29:8c:
         eb:39:dc:e7:84:b4:f2:56:7b:23:71:e3:d3:ed:23:5a:15:26:
         e8:3b:43:88:56:3e:cd:71:eb:07:01:66:3e:76:27:6a:31:f8:
         b9:c5:c4:76:cf:6d:ba:77:b3:50:bb:e3:29:11:e2:1e:83:10:
         dd:83:fd:dc:bf:d4:a1:52:f4:54:40:04:8c:63:d5:9d:b0:6f:
         f2:31:1d:f5:08:09:be:8a:aa:ad:d8:a0:c2:3e:d8:de:22:ff:
         c2:33:9f:5d:98:a5:63:60:e2:d0:bd:a6:bb:c6:8b:b1:bd:62:
         e9:db:4b:89:30:54:1e:67:9a:7f:56:59:72:98:55:ca:62:5d:
         a0:f2:26:d6:9c:ae:e7:bf:ea:06:6e:57:e2:63:8c:84:ba:c1:
         59:c8:1a:77:14:0d:ef:e1:29:a5:40:3c:d4:60:10:0b:74:62:
         71:85:67:0e:2b:ae:63:40:cd:92:cd:89:4d:c6:c6:c3:53:80:
         6b:c3:19:81:5d:2a:27:37:45:f6:a3:26:fb:b6:17:23:b6:aa:
         47:4f:7d:c1:57:20:16:7b:36:76:89:d1:c4:94:6d:ad:1e:dc:
         0e:9d:fb:49:c9:ab:03:42:0a:99:24:ff:81:c1:c8:40:4c:f6:
         65:a3:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:02 2026 by rpki-client