This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138362e32322e302e302f31352d3234203d3e203237373437.roa
File:                     3138362e32322e302e302f31352d3234203d3e203237373437.roa (raw, json)
Hash identifier:          lpqbWhBKRBTIXbMXl4eGkTomfU7Tc82Mcj/gxAg4VKA=
Subject key identifier:   D4:2C:2E:B3:56:08:31:DD:93:6D:E2:82:EF:C0:1F:8E:B3:B0:5B:34
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       213D1A7A214BAFFDD587E81CEF74A715F12A45FB
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138362e32322e302e302f31352d3234203d3e203237373437.roa
Signing time:             Tue 06 Jan 2026 19:29:00 +0000
ROA not before:           Tue 06 Jan 2026 19:24:00 +0000
ROA not after:            Tue 05 Jan 2027 19:29:00 +0000
asID:                     27747
IP address blocks:        186.22.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3d:1a:7a:21:4b:af:fd:d5:87:e8:1c:ef:74:a7:15:f1:2a:45:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Jan  6 19:24:00 2026 GMT
            Not After : Jan  5 19:29:00 2027 GMT
        Subject: CN=D42C2EB3560831DD936DE282EFC01F8EB3B05B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:44:67:2d:a5:77:fe:9f:ce:ad:33:4c:d5:8b:
                    53:25:83:29:a0:9b:2a:5d:3a:9f:e8:f3:68:9f:f7:
                    db:33:4a:1c:2f:89:cf:60:44:98:17:78:25:09:ea:
                    6d:37:a8:08:15:c9:bf:a2:fb:a6:57:6c:23:e5:b5:
                    0f:85:0f:93:4b:82:6c:9a:2d:32:e4:0f:1b:ef:fc:
                    b8:55:b7:17:52:94:f8:96:4d:96:46:32:d5:c4:ce:
                    20:0e:3b:11:66:fb:ac:c3:ce:6f:d4:3c:07:f5:cb:
                    e8:f1:ce:fc:a6:9e:7d:e8:e6:44:fe:39:16:b9:63:
                    9e:e8:0a:92:b3:d9:c8:94:2e:3b:52:64:a6:0a:35:
                    60:1a:9a:0e:0b:18:b8:5d:74:0b:d4:c4:10:49:c7:
                    8a:ff:1d:7d:65:1a:74:f2:b7:e7:44:4a:43:e7:b4:
                    f2:fc:ea:d9:eb:85:c9:53:70:26:75:9e:3a:16:75:
                    e5:94:d6:6f:00:30:fb:fb:7c:34:ed:b3:b9:47:d4:
                    0e:14:82:d1:8c:df:13:fa:6b:de:3e:a1:5a:e5:4a:
                    c8:ed:0f:de:ce:e9:30:f7:c3:86:f8:0e:db:6d:48:
                    78:21:cf:21:4c:62:cf:fe:7f:fe:b7:d8:e1:d8:40:
                    d5:82:40:29:25:b7:f0:70:85:3c:5b:a1:7e:49:66:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2C:2E:B3:56:08:31:DD:93:6D:E2:82:EF:C0:1F:8E:B3:B0:5B:34
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138362e32322e302e302f31352d3234203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.22.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         39:d8:38:16:c7:69:43:29:2c:03:6a:dc:9a:ac:48:9c:b1:f9:
         5f:d0:37:cb:be:b3:f4:47:6a:98:b9:bb:4d:5a:e6:02:f9:03:
         aa:58:fe:42:fa:20:fd:da:cf:dd:0e:95:72:b0:df:f5:36:4c:
         dd:2c:a2:8f:c7:b1:3d:cc:d9:f7:6f:5d:6b:c9:54:17:31:83:
         94:52:5b:82:6e:db:8c:ac:f0:8b:9f:a4:a2:19:b7:56:3e:fd:
         e2:24:e0:b1:2c:a8:64:27:40:64:d9:7f:60:53:5a:67:63:fb:
         1b:d0:a8:f5:a9:55:e0:63:81:2e:1d:01:a9:e7:17:e9:63:ef:
         88:7b:06:31:4f:89:35:f0:70:25:d8:82:86:9c:07:19:7b:cf:
         be:f8:b8:70:73:ea:5f:00:e1:f0:41:66:a7:da:0c:0b:dd:44:
         47:a2:6c:4a:b2:89:ff:c3:65:b5:83:de:c8:94:38:04:21:e7:
         c8:73:b2:1c:90:f7:e6:53:0d:a1:f6:a3:11:29:d2:f6:02:dd:
         f9:28:d1:f6:02:b2:b5:b4:74:2f:dd:7e:16:a3:b5:d1:5e:c9:
         b1:c5:07:58:df:ec:20:5a:d8:35:ad:d5:26:23:26:73:4f:0b:
         d8:96:d6:ab:8e:0b:71:da:61:ea:e5:5f:ce:53:60:80:d1:aa:
         54:54:90:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:27:58 2026 by rpki-client