This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/3137392e302e31372e302f32342d3234203d3e203134363138.roa
File:                     3137392e302e31372e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          c6Mj31LQC9ENLMxUpTYuJoTaorsytt81EtZyqgK9GAE=
Subject key identifier:   93:A8:4E:DA:D1:49:50:BF:06:54:1C:3F:09:37:2E:D7:E7:00:AC:73
Certificate issuer:       /CN=4D3731B188E63A6529152A8685DFD3BD0CB35A82
Certificate serial:       521A2DB637E191A675B0A6F5935C6495D6B3BCD8
Authority key identifier: 4D:37:31:B1:88:E6:3A:65:29:15:2A:86:85:DF:D3:BD:0C:B3:5A:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/3137392e302e31372e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 06 Jan 2026 19:07:21 +0000
ROA not before:           Tue 06 Jan 2026 19:02:21 +0000
ROA not after:            Tue 05 Jan 2027 19:07:21 +0000
asID:                     14618
IP address blocks:        179.0.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 15:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1a:2d:b6:37:e1:91:a6:75:b0:a6:f5:93:5c:64:95:d6:b3:bc:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3731B188E63A6529152A8685DFD3BD0CB35A82
        Validity
            Not Before: Jan  6 19:02:21 2026 GMT
            Not After : Jan  5 19:07:21 2027 GMT
        Subject: CN=93A84EDAD14950BF06541C3F09372ED7E700AC73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:10:da:df:9c:c4:4f:2e:00:5c:4f:5f:27:c0:
                    a3:76:4d:72:67:ba:de:b1:a8:62:76:35:75:3e:90:
                    a5:ec:f7:2e:ff:3b:7f:e6:3d:1b:ec:f6:48:7c:df:
                    63:71:bd:ff:61:b7:af:76:ac:ee:b5:7b:4d:66:2a:
                    e7:07:5a:ce:7d:7d:bf:c7:23:1f:e3:c5:70:a1:55:
                    5b:88:3f:e5:3e:60:8e:3a:44:85:0f:94:47:e9:a8:
                    56:c2:15:7f:d1:6b:37:c4:92:6a:c8:a8:ac:d7:3a:
                    97:0c:db:06:8d:aa:9d:56:67:e4:d9:29:f1:50:9e:
                    98:bc:18:5b:bb:6c:3c:92:4f:13:89:87:85:d6:7f:
                    e6:74:f8:ff:8c:5b:f6:ae:18:4d:2c:0f:94:87:67:
                    6c:53:03:79:56:bb:d0:6c:83:f9:04:b5:16:97:98:
                    8b:10:0f:8d:be:8a:1e:e9:e5:26:fc:03:8a:81:e6:
                    cb:9b:89:24:35:d5:cc:cd:1d:44:a5:a6:79:ad:73:
                    33:22:37:77:96:7e:6f:5b:19:0d:88:b0:16:c9:8d:
                    4a:47:a9:fb:9c:1c:ec:d2:bb:39:1d:11:38:7d:3f:
                    5a:79:a4:d1:79:fa:2a:44:c6:6a:7d:22:89:e5:d7:
                    09:a6:2a:72:b0:8c:48:c6:56:7b:a6:3e:b9:3b:3a:
                    fa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A8:4E:DA:D1:49:50:BF:06:54:1C:3F:09:37:2E:D7:E7:00:AC:73
            X509v3 Authority Key Identifier:
                keyid:4D:37:31:B1:88:E6:3A:65:29:15:2A:86:85:DF:D3:BD:0C:B3:5A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D3731B188E63A6529152A8685DFD3BD0CB35A82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AF0521E1886A48D28DA3941D93D6E96AB9E6B19EB0AA1B5349248D8BF241885/0/3137392e302e31372e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:8a:8d:cf:c1:d2:c9:8c:6f:f1:dd:8a:02:d0:98:fb:8f:99:
         a5:1b:51:96:71:55:7a:57:8a:29:79:99:e8:a8:12:dc:a2:12:
         d6:c4:d3:47:df:2b:ec:2c:f7:b9:4f:73:cd:31:fa:17:ec:2b:
         1d:ce:3d:3d:41:22:ef:ce:2d:48:5b:2c:85:66:4d:d6:bd:e3:
         6d:46:f9:50:06:b0:77:0f:fd:c1:3c:d8:3f:1b:b8:e1:9c:86:
         e0:e1:97:7a:08:09:df:54:01:48:17:42:25:b6:42:25:c7:df:
         68:af:f5:d3:31:3d:a2:6c:b9:43:a2:e1:e2:39:91:34:05:b5:
         63:a3:6d:0a:16:4e:cf:4f:5c:26:c2:07:03:36:02:c6:23:79:
         51:f8:7e:97:a4:50:b3:1e:a1:de:00:a0:1f:d6:55:61:c1:80:
         c5:06:97:80:5e:68:4b:79:4b:32:a3:37:d4:27:10:6b:87:36:
         5e:4a:a9:b3:d7:ac:dd:98:ae:ef:bd:5b:37:e0:f7:12:86:eb:
         d0:5f:3b:db:13:36:43:51:d4:fa:b7:d3:1b:0b:f2:11:e3:2a:
         db:f8:7a:dd:5a:ee:9f:b9:8d:d8:7c:06:60:ea:32:87:26:2d:
         ca:e5:07:7a:20:01:89:96:4a:0b:9a:02:83:bb:db:df:91:f5:
         b9:77:54:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:51:59 2026 by rpki-client