This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3138362e3138392e37322e302f32312d3234203d3e203532333431.roa
File:                     3138362e3138392e37322e302f32312d3234203d3e203532333431.roa (raw, json)
Hash identifier:          mQ/ZqcBQCJMjKDi47XzWfmqczPPw6QhalwYoINxxdrw=
Subject key identifier:   E9:B8:02:D7:B8:B2:52:D7:8C:FA:E3:0E:09:D1:DE:E4:3B:6A:84:DB
Certificate issuer:       /CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC
Certificate serial:       40A467BD1A505FA3545A9665FBBD4503A4D025F2
Authority key identifier: AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3138362e3138392e37322e302f32312d3234203d3e203532333431.roa
Signing time:             Tue 06 Jan 2026 19:36:55 +0000
ROA not before:           Tue 06 Jan 2026 19:31:55 +0000
ROA not after:            Tue 05 Jan 2027 19:36:55 +0000
asID:                     52341
IP address blocks:        186.189.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 02:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a4:67:bd:1a:50:5f:a3:54:5a:96:65:fb:bd:45:03:a4:d0:25:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC
        Validity
            Not Before: Jan  6 19:31:55 2026 GMT
            Not After : Jan  5 19:36:55 2027 GMT
        Subject: CN=E9B802D7B8B252D78CFAE30E09D1DEE43B6A84DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ae:15:05:9b:45:78:97:28:12:6a:21:dd:75:
                    be:23:88:f3:59:4b:f2:5b:e5:cb:4e:f8:2b:98:37:
                    6d:8c:90:c0:5b:e1:db:3a:bb:46:33:2d:c3:2f:fb:
                    45:71:90:b9:6e:87:38:ae:98:af:a1:f3:03:12:ad:
                    95:75:a2:d4:74:32:7e:09:60:d2:ec:25:dc:72:27:
                    67:a7:09:52:4a:56:46:22:a2:7a:fd:8e:6d:7f:b2:
                    33:03:6d:97:6a:4f:fc:d9:ff:02:40:67:f1:66:9b:
                    99:10:d5:42:6f:7e:d5:e0:c9:7f:3e:6e:29:38:61:
                    e1:28:89:ba:32:28:41:11:09:5b:4d:4e:2a:d5:82:
                    a4:e8:e7:8c:aa:c8:be:b5:b2:5a:99:9b:9e:64:4d:
                    8e:0f:8b:ee:bd:f2:1c:82:17:c8:4c:e9:fd:43:2f:
                    f9:ed:ee:2f:2a:3d:9a:36:5a:73:7b:1f:ca:d8:35:
                    54:0b:9b:ab:c4:6c:77:b1:54:86:e0:4a:6d:37:c3:
                    0c:04:6e:b4:2b:14:4c:c7:7f:93:d3:d8:2e:e7:34:
                    68:03:a3:30:64:e0:59:06:84:dc:8b:2a:a4:40:b3:
                    ec:b7:91:d8:b6:d9:91:4c:b8:ee:f4:7e:f2:58:2a:
                    de:22:b6:7f:bb:b3:bf:41:b4:5c:74:55:fe:8b:a5:
                    74:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B8:02:D7:B8:B2:52:D7:8C:FA:E3:0E:09:D1:DE:E4:3B:6A:84:DB
            X509v3 Authority Key Identifier:
                keyid:AA:C4:27:B2:B3:F6:6F:D0:42:1C:36:F9:D8:A4:A6:25:EC:E8:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAC427B2B3F66FD0421C36F9D8A4A625ECE850FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07F5458804AC01560C7B2FAC95BC071138C1BA21D3E073D16DBE32F097CDEC75/0/3138362e3138392e37322e302f32312d3234203d3e203532333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:86:2b:6f:1b:8e:f2:a5:97:61:30:60:91:4e:62:c0:76:04:
         57:5e:b1:8c:fb:11:e5:b1:67:9c:46:ea:b1:75:cc:5e:38:d6:
         d7:bb:6e:c8:d7:5f:71:21:fc:95:ea:3f:43:a6:fb:d0:b2:55:
         79:5c:b4:63:07:1d:5b:76:70:61:f3:2c:98:cb:1d:25:25:28:
         f9:a4:94:0d:62:8b:c1:2c:09:45:8d:a9:0d:b8:c8:3d:ad:a5:
         c7:62:f5:1c:51:40:a5:22:2c:12:1f:9f:12:e1:39:81:07:e5:
         4d:b6:e5:b8:8c:64:e8:a5:f7:65:db:81:d6:6a:a0:09:27:ce:
         91:ef:dd:0c:43:77:7f:bc:e6:9a:e7:e1:09:30:d0:85:51:ad:
         de:bb:c3:64:52:a8:45:4b:fa:6f:6d:4f:56:83:20:b0:a7:1d:
         16:2b:ac:8a:6b:e9:5b:0a:3d:7d:22:6c:5b:6d:b5:19:cc:27:
         56:54:28:7f:7b:5b:c9:e5:f5:05:a4:31:ab:d4:76:62:2b:69:
         2d:06:1b:b8:37:11:89:e9:6d:ff:95:31:93:1c:f3:2b:c2:f7:
         f5:0f:bd:33:dd:fd:63:7c:b3:4f:8d:67:30:88:53:e1:6f:a9:
         64:32:b8:9a:38:09:cb:fc:9b:5e:f9:9a:d6:e8:0b:9f:f7:2e:
         1d:a2:9a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:39:36 2026 by rpki-client