This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138362e31382e302e302f31352d3234203d3e203237373437.roa
File:                     3138362e31382e302e302f31352d3234203d3e203237373437.roa (raw, json)
Hash identifier:          YqHbzU/BgbxjGx+1Qnsj7cUKq789GdZhWpMl0U/6a/E=
Subject key identifier:   FE:99:70:53:9F:2D:98:29:8C:47:5B:C4:77:61:CC:BB:FE:67:5C:AD
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       53089F209151C1C63D46AEB8A775E4AF4EE20D0B
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138362e31382e302e302f31352d3234203d3e203237373437.roa
Signing time:             Tue 06 Jan 2026 19:29:01 +0000
ROA not before:           Tue 06 Jan 2026 19:24:01 +0000
ROA not after:            Tue 05 Jan 2027 19:29:01 +0000
asID:                     27747
IP address blocks:        186.18.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:08:9f:20:91:51:c1:c6:3d:46:ae:b8:a7:75:e4:af:4e:e2:0d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Jan  6 19:24:01 2026 GMT
            Not After : Jan  5 19:29:01 2027 GMT
        Subject: CN=FE9970539F2D98298C475BC47761CCBBFE675CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ce:fd:b9:c5:46:ea:35:5b:d6:72:42:52:09:
                    68:4b:8f:0c:f1:28:5b:a8:a5:f7:c0:2a:26:cf:7f:
                    66:41:ab:d1:65:66:b3:19:d2:19:60:42:12:f7:43:
                    33:10:8a:22:7f:25:e4:2b:3f:86:52:11:11:10:76:
                    a6:9a:d2:29:41:67:9c:2c:b3:4e:8e:a6:20:4e:52:
                    14:46:2c:f6:bd:1e:2b:9e:98:b1:62:6d:5a:c2:f1:
                    35:a1:19:be:bb:25:34:bd:b9:ec:26:b7:1f:2d:10:
                    95:aa:f0:05:6b:f9:53:c3:09:63:1e:d8:75:8d:84:
                    c9:06:6c:42:7d:82:d4:61:31:cb:ea:ef:39:b4:1d:
                    47:a1:5d:a6:fe:08:24:e0:b1:ff:78:69:bf:b0:ac:
                    24:14:2e:c7:dd:97:3f:38:0a:07:2c:3c:c9:58:fe:
                    e1:2f:84:f2:1b:bb:d2:fe:25:80:66:05:8e:30:f3:
                    3a:0c:a4:b2:d5:c5:32:af:3e:cd:1c:92:04:b9:49:
                    77:2b:cd:d4:43:80:44:b8:c2:a2:61:40:1e:7e:36:
                    df:35:3d:ce:38:2c:ac:27:8a:57:32:06:db:7a:76:
                    6c:e7:1b:f6:3d:ba:97:c4:a8:1a:fd:ec:a2:1a:90:
                    3a:fb:3d:47:95:10:b0:f9:2b:d0:ee:5c:c5:73:89:
                    c7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:99:70:53:9F:2D:98:29:8C:47:5B:C4:77:61:CC:BB:FE:67:5C:AD
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138362e31382e302e302f31352d3234203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.18.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         02:da:2d:f6:72:25:36:26:11:37:d8:11:69:bc:5f:b0:33:60:
         49:3b:07:c1:90:40:28:6e:0d:33:27:ed:b5:b9:f2:3a:fd:f4:
         67:f1:ee:54:f4:37:f7:c6:fb:87:0a:a9:d0:d1:6c:53:37:4e:
         9c:12:99:c0:aa:67:5b:a0:70:3e:34:47:27:61:af:96:a9:7e:
         c2:a3:ce:d7:0a:8d:37:23:88:7a:8b:80:7a:c5:6e:16:a6:1e:
         31:3e:db:00:09:9f:d9:45:38:0c:23:82:ef:35:23:ad:63:b3:
         c9:a6:09:58:a5:06:09:7d:d4:c6:1f:13:fc:95:80:d5:f9:03:
         af:a5:8d:83:be:85:5b:ce:52:5b:1c:82:65:46:cf:2c:87:de:
         09:1b:c2:35:ca:46:3a:c4:ca:d7:80:24:13:5e:a3:fd:9a:81:
         ee:ad:21:79:1e:dd:9f:3b:73:f0:0d:5f:7b:f8:5c:c8:63:76:
         a4:ff:63:af:da:7b:25:98:5a:1d:0e:83:3e:74:7c:c9:25:28:
         5a:3c:f5:7d:61:c7:07:20:7d:ff:ce:8c:9c:37:c6:1a:0f:76:
         80:99:a7:cc:b3:ba:31:cf:76:cb:e3:46:33:2e:89:b5:8a:b5:
         c1:44:30:27:bf:64:3c:d3:87:c2:85:6d:e9:54:93:43:48:16:
         c8:7b:7c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:28:14 2026 by rpki-client