This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3137392e302e31302e302f32342d3234203d3e203532343637.roa
File:                     3137392e302e31302e302f32342d3234203d3e203532343637.roa (raw, json)
Hash identifier:          tXbUfKgcG0aRepnM6AbUGmbfWD1CEqlz229s9exe7bk=
Subject key identifier:   0D:8C:29:76:1D:74:A1:4A:39:80:2B:63:BE:54:55:64:23:7B:55:BA
Certificate issuer:       /CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
Certificate serial:       22C74D5F3D6F2E3B85A63D1CECEA8BF653A26760
Authority key identifier: 64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3137392e302e31302e302f32342d3234203d3e203532343637.roa
Signing time:             Tue 06 Jan 2026 19:03:30 +0000
ROA not before:           Tue 06 Jan 2026 18:58:30 +0000
ROA not after:            Tue 05 Jan 2027 19:03:30 +0000
asID:                     52467
IP address blocks:        179.0.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c7:4d:5f:3d:6f:2e:3b:85:a6:3d:1c:ec:ea:8b:f6:53:a2:67:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
        Validity
            Not Before: Jan  6 18:58:30 2026 GMT
            Not After : Jan  5 19:03:30 2027 GMT
        Subject: CN=0D8C29761D74A14A39802B63BE545564237B55BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:0a:eb:4c:6e:f3:06:77:be:6d:d8:ed:10:
                    f9:03:fe:e3:9d:68:4c:d6:51:96:5a:bb:00:f3:08:
                    ab:f5:ee:96:21:09:1d:87:32:fb:99:12:79:1b:06:
                    aa:e3:81:d9:2f:16:f1:a9:8f:fb:99:43:71:1e:8d:
                    21:1f:75:13:69:8a:52:70:18:66:54:c0:49:54:72:
                    81:26:29:45:24:5b:9e:da:d7:ce:70:09:3a:45:9e:
                    f0:20:d6:15:54:1a:54:2f:b3:ce:7e:83:7a:c7:e9:
                    bf:38:a7:c9:e7:9a:4e:8a:95:e1:3f:4c:01:b2:2c:
                    ee:cd:d4:da:d3:68:1f:8f:1f:68:39:68:e1:99:e3:
                    84:2a:99:6b:42:49:e6:73:e2:dc:fd:70:1f:b9:f7:
                    f5:0c:c6:3c:2a:39:d4:c4:f8:d3:84:74:da:a4:dc:
                    ca:5d:de:c1:22:a1:fa:23:fb:54:d9:42:43:84:aa:
                    af:b4:60:ac:e6:4f:c6:8b:18:09:14:a6:eb:07:11:
                    13:90:94:62:6a:c4:5a:d5:f1:fe:3d:60:bc:b9:b5:
                    9b:6a:73:e1:0b:3c:91:ef:20:b6:1c:18:ed:88:13:
                    01:46:ac:62:67:df:cd:0f:f5:6e:70:1f:d9:53:78:
                    dd:f3:f1:a9:ae:ae:94:51:c8:9d:6d:01:53:c4:20:
                    0d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8C:29:76:1D:74:A1:4A:39:80:2B:63:BE:54:55:64:23:7B:55:BA
            X509v3 Authority Key Identifier:
                keyid:64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3137392e302e31302e302f32342d3234203d3e203532343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:e0:95:41:6b:ce:8e:66:85:fd:ef:5f:c6:ae:a3:79:ce:72:
         ad:2a:a0:7b:d2:aa:0d:d5:e8:ef:38:b1:0e:10:48:f4:95:1d:
         ec:bc:24:27:99:de:7c:c2:a5:f2:f8:54:99:54:e3:67:74:61:
         a3:1d:60:59:36:fa:b3:33:56:bd:44:0a:6b:7a:8e:b8:df:ba:
         2d:49:2c:0c:68:9a:d7:8f:52:fd:9b:19:00:17:69:4d:87:dc:
         d2:d8:09:b3:ec:35:57:73:21:a7:f6:13:c1:a6:6a:f1:8d:80:
         23:b3:e2:77:1c:c2:cf:94:49:16:f2:05:91:5e:26:9b:4e:14:
         a3:c1:55:6f:3b:91:e9:f0:0e:08:e0:0f:4e:33:54:83:34:39:
         7c:7a:a1:ad:c6:5e:23:4e:ee:f9:cb:fc:aa:05:7a:39:38:02:
         93:1f:6b:23:0d:fd:54:cc:37:07:2a:8d:08:3d:16:7e:94:28:
         06:47:cc:2c:40:4b:6f:fa:cf:76:1b:d3:eb:35:5c:60:fd:82:
         41:25:b9:aa:18:39:2f:c0:93:6d:cd:bc:c1:49:88:b2:54:5f:
         73:e8:fa:12:24:26:c2:d1:61:99:68:24:ea:d5:87:f5:59:a8:
         78:58:3a:ba:92:32:cd:04:3c:38:5e:7e:5d:d5:57:5a:fc:cc:
         51:ac:e5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:04:16 2026 by rpki-client