This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131322e302f32342d3234203d3e203237383233.roa
File:                     3137392e34332e3131322e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          Lix7T3IrDyDxFYN28xaM4gxWKYMpbYWQanD/m/NSIME=
Subject key identifier:   36:08:51:78:C2:C4:4C:20:A0:B2:9F:B0:F4:71:57:9B:CE:C8:93:FA
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       609A6015CB4AC3EDCFA9CBB039423C90D1394E17
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131322e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 06 Jan 2026 19:05:51 +0000
ROA not before:           Tue 06 Jan 2026 19:00:51 +0000
ROA not after:            Tue 05 Jan 2027 19:05:51 +0000
asID:                     27823
IP address blocks:        179.43.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 17:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9a:60:15:cb:4a:c3:ed:cf:a9:cb:b0:39:42:3c:90:d1:39:4e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Jan  6 19:00:51 2026 GMT
            Not After : Jan  5 19:05:51 2027 GMT
        Subject: CN=36085178C2C44C20A0B29FB0F471579BCEC893FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:6f:a1:92:f1:8a:63:e8:b0:41:c0:9b:ab:
                    a4:c9:a1:26:98:f8:e3:89:6a:d5:d6:94:12:c9:15:
                    2d:36:e3:ae:19:84:d1:45:a1:8c:d5:58:9f:cf:f9:
                    51:b0:38:e0:ac:9b:0c:be:3f:aa:68:20:5b:c3:ff:
                    52:49:fe:61:4d:df:b1:16:fb:53:9c:ee:c0:ed:3d:
                    81:8e:fc:7d:39:68:b2:56:ce:62:80:cf:d1:3c:88:
                    5a:59:73:4b:52:9e:94:e1:57:a1:af:d0:1e:be:26:
                    c6:40:bd:93:84:29:d6:a3:3f:00:ae:50:39:3c:58:
                    fc:60:a3:e8:17:b1:fa:22:f7:bb:6d:92:26:7d:ac:
                    5e:24:c2:b4:1c:80:a2:e9:02:60:0b:a8:1f:fc:42:
                    a0:97:9f:c2:c9:9c:62:27:ae:6b:5f:6e:1d:da:56:
                    f9:1c:19:0f:99:88:52:16:a3:ad:f1:b8:86:3f:ee:
                    0c:80:2f:d9:49:5d:b6:4d:46:b6:bf:03:84:4b:a6:
                    82:02:66:9e:b1:b6:da:ec:9d:0b:6c:9a:6b:8e:4b:
                    22:f9:c6:4e:4a:1f:81:4e:d9:fc:d7:01:df:52:11:
                    c8:a7:37:61:aa:41:a6:b0:d0:74:29:3e:40:21:ce:
                    58:f2:45:2d:55:80:fa:c7:ed:3e:15:e4:87:d4:f5:
                    65:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:08:51:78:C2:C4:4C:20:A0:B2:9F:B0:F4:71:57:9B:CE:C8:93:FA
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131322e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:a2:3a:99:40:45:5e:f6:be:c0:22:54:00:da:6b:5e:42:79:
         98:10:4a:0a:9b:21:40:55:fa:e4:18:1e:d1:52:dc:f6:00:15:
         80:7c:3f:e7:db:26:74:f4:47:54:03:cd:8d:a3:fe:1f:6f:05:
         38:01:0f:e4:f8:eb:c0:2b:10:41:8c:24:20:8c:16:f8:4e:8c:
         eb:9f:c9:78:25:e1:8a:92:36:3a:1c:09:15:fa:bd:e9:2a:d8:
         34:78:65:ed:fe:c2:84:eb:b0:64:a4:e0:3c:52:02:89:24:c0:
         e5:e8:1b:59:52:cf:f3:b3:6d:61:49:6d:ea:67:23:a5:9d:70:
         cd:87:24:68:c4:68:ae:98:a8:88:d7:e2:e3:14:cb:3b:24:39:
         5f:fc:d1:10:96:cb:a5:49:b9:56:b2:c6:4c:31:b6:ff:b5:73:
         b2:51:a6:5a:cc:1b:b2:aa:73:90:66:76:2b:f8:fb:d1:a7:9e:
         1d:1f:aa:da:86:44:f0:09:50:ef:70:10:9f:f3:4b:9e:8a:60:
         02:69:2d:23:ec:0c:3c:77:a0:db:10:7b:33:74:e2:b2:02:6a:
         7d:2f:dc:3b:43:04:09:3d:fd:c5:96:d2:a6:e0:ca:a8:b4:3a:
         bc:8b:4e:af:2b:e1:c3:e9:c5:f9:a7:de:a2:6b:93:56:f4:b6:
         75:f5:d1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:46:54 2026 by rpki-client