This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3137392e382e302e302f31352d3234203d3e2037343138.roa
File:                     3137392e382e302e302f31352d3234203d3e2037343138.roa (raw, json)
Hash identifier:          j0xpooTngwLnrVjdVKqILUdYpz5kwgveM26mbWFWs54=
Subject key identifier:   F0:C7:A0:5B:53:5E:8B:85:0C:04:51:04:64:92:DB:C7:4C:FD:93:98
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       50BCF063D8216A3F5CF6CA5E11191BCCE459F366
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3137392e382e302e302f31352d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 19:24:45 +0000
ROA not before:           Tue 06 Jan 2026 19:19:45 +0000
ROA not after:            Tue 05 Jan 2027 19:24:45 +0000
asID:                     7418
IP address blocks:        179.8.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:bc:f0:63:d8:21:6a:3f:5c:f6:ca:5e:11:19:1b:cc:e4:59:f3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:45 2026 GMT
            Not After : Jan  5 19:24:45 2027 GMT
        Subject: CN=F0C7A05B535E8B850C0451046492DBC74CFD9398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:69:89:ac:d7:e3:1f:64:8f:90:c6:37:f2:
                    fb:81:7d:97:56:33:7e:c3:f1:86:32:c1:be:23:17:
                    8d:21:01:4a:30:27:28:9b:7a:02:fd:79:cb:4c:55:
                    9f:93:e2:0a:fb:5a:d5:57:15:44:a8:14:e7:93:d3:
                    c0:25:6d:2b:3f:40:7c:09:ad:a8:68:46:bd:05:97:
                    d1:20:99:ef:a4:b7:ed:e6:65:47:98:ad:22:d3:4a:
                    61:14:16:4c:66:fc:90:f2:af:5f:78:00:94:8e:4e:
                    47:c5:09:b2:eb:d6:ae:0a:15:30:b7:56:57:a9:5f:
                    e5:75:2b:f9:20:d6:d6:7a:b1:cd:b2:76:f4:c0:81:
                    28:21:55:dc:7d:3c:39:c1:87:a7:5d:98:87:7f:cd:
                    cb:e3:eb:da:2e:5f:67:73:de:c6:01:46:67:85:52:
                    19:ad:87:4e:24:14:73:ac:92:34:51:15:1b:14:cc:
                    e3:25:1a:c1:ab:07:bd:e3:58:5f:5a:aa:68:87:eb:
                    53:a4:11:29:ce:fc:3f:30:d7:25:c4:5f:62:de:68:
                    9b:be:d3:df:0c:46:91:a1:2b:12:0f:95:0e:7f:49:
                    96:98:d4:7b:c1:c9:95:a1:29:7e:9f:76:c4:49:75:
                    1c:c8:2c:79:cc:12:39:73:8e:4c:a4:6d:9f:e8:0e:
                    c5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C7:A0:5B:53:5E:8B:85:0C:04:51:04:64:92:DB:C7:4C:FD:93:98
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3137392e382e302e302f31352d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.8.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         31:bc:27:7e:5d:c6:a8:a5:22:80:f8:e1:9c:ed:38:06:d9:7c:
         6f:41:54:d8:1c:cd:9a:c3:6e:27:04:66:8a:1a:99:4b:b9:2e:
         b9:96:22:3c:ef:71:59:02:d9:78:88:a1:3f:e3:71:1b:a1:0b:
         19:04:d8:ad:7b:8e:0a:de:92:22:64:95:d3:c5:2e:51:47:79:
         69:a6:e8:ad:79:7c:e0:40:84:74:a5:cc:e5:c8:0e:4c:07:83:
         59:1f:6d:89:ff:d5:ce:39:09:48:95:3a:6d:8d:51:49:6c:85:
         43:26:d4:86:cd:de:b0:c1:47:25:22:f4:7b:4b:6a:17:92:9b:
         2e:4b:30:bb:28:4f:6d:4c:b1:e6:92:88:6a:9f:81:44:3e:db:
         1e:fc:2e:40:cd:33:71:b9:93:cc:32:f2:f9:60:da:af:ff:a9:
         07:a9:e8:ea:27:c6:e4:22:e6:6d:64:48:a3:3e:7a:db:0b:63:
         46:33:bc:cb:ca:03:24:7e:cf:6c:c0:64:14:b6:8c:42:59:ea:
         7d:7f:52:46:1d:ac:59:c2:c7:1b:98:eb:49:71:12:e6:3f:38:
         e4:0a:dd:66:24:94:da:7e:fe:17:73:96:71:7f:5e:d2:6a:24:
         14:ab:d0:e3:5f:33:31:e6:bf:66:8b:8f:03:9c:7b:f1:d5:38:
         4b:72:01:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:04 2026 by rpki-client