This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/3137392e36332e32302e302f32322d3234203d3e20323731383337.roa
File:                     3137392e36332e32302e302f32322d3234203d3e20323731383337.roa (raw, json)
Hash identifier:          i9Ion5A1PD3XVwTQtY1yZ1ZSeU+qOZtcBXOI3gRTZkA=
Subject key identifier:   8F:16:1A:75:BB:76:84:CF:37:1A:A9:3E:5B:2F:1B:AF:44:73:11:BB
Certificate issuer:       /CN=13F664EFE791C2FAE7E4B151E394302E508408AF
Certificate serial:       4755E8FF7ECA55C2B65D345979488A96462C9E1A
Authority key identifier: 13:F6:64:EF:E7:91:C2:FA:E7:E4:B1:51:E3:94:30:2E:50:84:08:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/3137392e36332e32302e302f32322d3234203d3e20323731383337.roa
Signing time:             Tue 06 Jan 2026 19:34:47 +0000
ROA not before:           Tue 06 Jan 2026 19:29:47 +0000
ROA not after:            Tue 05 Jan 2027 19:34:47 +0000
asID:                     271837
IP address blocks:        179.63.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 06:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:55:e8:ff:7e:ca:55:c2:b6:5d:34:59:79:48:8a:96:46:2c:9e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F664EFE791C2FAE7E4B151E394302E508408AF
        Validity
            Not Before: Jan  6 19:29:47 2026 GMT
            Not After : Jan  5 19:34:47 2027 GMT
        Subject: CN=8F161A75BB7684CF371AA93E5B2F1BAF447311BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:6c:2b:12:d9:ba:0a:90:d1:5e:70:75:be:
                    ea:0b:36:d5:d0:37:93:07:03:17:08:57:bf:43:0c:
                    cd:08:0d:ca:ca:e7:72:38:12:20:a1:96:01:ff:d5:
                    ca:40:70:66:ba:4e:b6:3d:ac:fe:1d:b0:15:d1:f4:
                    83:05:04:e2:3e:ef:a7:5b:80:eb:91:76:38:13:4b:
                    42:35:fe:dc:28:90:d0:f3:5f:b3:55:cd:43:3f:db:
                    5c:70:78:3a:8b:13:56:03:04:a8:6b:99:b3:a1:1d:
                    f3:48:46:7e:ca:3e:38:2e:6d:80:55:64:ca:1b:36:
                    76:1b:38:c9:23:a8:53:63:9c:63:e4:a0:d1:38:cf:
                    2f:39:44:1d:7a:69:76:67:c5:44:15:14:c8:fe:7c:
                    cb:6d:94:22:6d:33:22:cc:b7:df:23:c2:dc:35:cd:
                    59:56:9e:15:a2:49:db:b3:e4:bf:e2:29:3d:1b:37:
                    de:d1:b1:f7:23:e3:79:42:17:de:a0:81:1e:40:83:
                    5d:28:e1:74:d7:a4:81:89:6f:ea:89:07:54:f6:4d:
                    72:c6:7f:c7:2c:12:37:8f:80:3b:3f:29:ae:02:b9:
                    4c:21:bb:eb:f2:76:73:16:18:da:7f:d6:47:1e:dc:
                    e7:32:bf:4a:19:ce:20:2c:8c:b4:8e:4e:1c:b2:b3:
                    f4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:16:1A:75:BB:76:84:CF:37:1A:A9:3E:5B:2F:1B:AF:44:73:11:BB
            X509v3 Authority Key Identifier:
                keyid:13:F6:64:EF:E7:91:C2:FA:E7:E4:B1:51:E3:94:30:2E:50:84:08:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/3137392e36332e32302e302f32322d3234203d3e20323731383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:4b:41:80:32:2b:7a:88:24:5b:16:57:25:c4:81:aa:0d:ff:
         ab:1c:0f:e4:a5:c6:44:cf:bc:b6:15:68:2f:09:ad:b4:2d:4d:
         5b:c8:df:9a:4b:dc:e5:91:18:af:a8:77:e7:98:40:35:f3:d7:
         19:df:f7:cd:14:9f:9e:f5:2d:e0:ad:18:15:3b:8a:de:18:d3:
         2c:db:af:34:1b:f6:cb:f9:88:99:2c:b9:a8:c6:5d:8c:6b:51:
         7a:ac:12:bf:81:00:67:12:3f:47:fd:04:da:fb:15:71:ca:c2:
         fc:d5:34:f5:c9:c7:bc:9f:8a:a2:26:73:a6:35:ef:1a:14:45:
         1f:c5:4f:85:46:19:92:15:c0:83:03:73:5c:52:72:f0:e4:12:
         6f:fb:dc:2e:6f:93:ef:d4:ca:8a:cb:75:f5:75:e6:de:d9:1a:
         7c:71:a7:07:26:d0:d5:26:b2:cb:62:12:13:16:3d:42:43:ad:
         24:f1:6d:94:7d:c1:b8:71:e9:98:73:6b:0f:2b:8c:10:2c:8f:
         f8:08:72:d0:d7:2a:68:2e:38:be:7a:bd:97:16:a3:1d:22:b7:
         37:1d:01:b2:fc:66:93:c6:ab:f7:88:07:3e:45:94:5d:ae:a6:
         e1:b3:47:53:9a:0a:b4:47:bb:5b:99:6d:85:76:f4:d4:d8:79:
         e2:1c:15:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:40:51 2026 by rpki-client