This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31302e3133382e302f32342d3234203d3e203237393836.roa
File:                     3138362e31302e3133382e302f32342d3234203d3e203237393836.roa (raw, json)
Hash identifier:          BRjfL5/yo3QXc8rLi/xnNp5e0gcrDP6FWZiu7UdApRk=
Subject key identifier:   56:8E:31:B1:BD:2B:0C:BA:AA:C1:DD:67:F9:1E:CA:E0:86:21:9B:CE
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       36AFFF7AB25CB7486A71C784718FDD3107C7027E
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31302e3133382e302f32342d3234203d3e203237393836.roa
Signing time:             Tue 06 Jan 2026 19:37:38 +0000
ROA not before:           Tue 06 Jan 2026 19:32:38 +0000
ROA not after:            Tue 05 Jan 2027 19:37:38 +0000
asID:                     27986
IP address blocks:        186.10.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:af:ff:7a:b2:5c:b7:48:6a:71:c7:84:71:8f:dd:31:07:c7:02:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Jan  6 19:32:38 2026 GMT
            Not After : Jan  5 19:37:38 2027 GMT
        Subject: CN=568E31B1BD2B0CBAAAC1DD67F91ECAE086219BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d7:58:f4:c5:f5:82:bf:a9:5b:1f:92:3f:fd:
                    0b:a0:75:4b:db:24:b0:bb:b9:45:4b:c7:29:43:0c:
                    01:43:d5:a8:58:dc:c7:97:7a:bd:49:c2:e5:2c:20:
                    83:78:e4:92:f3:cb:62:7b:e4:f7:93:99:fb:e5:1f:
                    ff:07:60:6c:59:1e:de:88:7f:a6:b6:7c:c4:dc:b0:
                    cb:7f:34:41:17:e2:93:f4:9c:27:40:ad:48:fa:0a:
                    4d:1e:a2:14:59:22:40:dd:b9:cf:80:17:1c:7f:84:
                    8b:71:f7:fa:aa:af:33:67:dd:9a:3e:95:ff:9c:41:
                    f1:b7:a9:80:fc:f6:ee:5d:9b:79:6f:e8:62:13:7c:
                    53:ec:bd:4f:62:1f:72:d2:61:b9:22:cf:d0:da:29:
                    95:68:48:85:10:76:0c:10:34:84:3c:f3:13:d2:75:
                    74:40:e2:91:0e:ac:45:da:62:d3:14:6f:a2:72:ec:
                    ca:07:d4:2f:9a:0a:fa:6c:a7:82:0a:49:d4:9b:61:
                    c0:14:c5:8f:05:b9:dc:22:77:ac:2b:55:ff:43:9e:
                    ea:4f:cc:23:2b:d3:97:3c:e7:7c:bb:bd:1c:b0:6e:
                    eb:11:55:f8:32:12:ad:9e:e1:73:49:53:de:33:b6:
                    91:a1:24:95:17:75:42:3e:73:10:00:15:5a:ec:94:
                    68:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8E:31:B1:BD:2B:0C:BA:AA:C1:DD:67:F9:1E:CA:E0:86:21:9B:CE
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31302e3133382e302f32342d3234203d3e203237393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.10.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:5d:07:f4:88:b1:9e:36:6d:39:39:3b:05:c4:65:d3:60:d1:
         31:b0:27:84:0a:72:0f:a6:03:6e:18:9a:05:5e:cf:ef:a4:7b:
         f4:75:ac:aa:95:b3:78:d4:8d:a7:f1:92:c4:26:35:92:3e:22:
         f8:12:24:87:ab:c2:c6:3d:cb:a0:a9:e9:eb:66:4c:56:b9:cb:
         de:94:58:d9:3d:74:43:49:9b:c7:5a:d8:f6:44:52:c2:e9:da:
         ea:cc:e1:52:e0:f4:15:09:92:d2:b5:4e:e2:f5:87:a0:1a:c4:
         55:e5:c3:76:95:e0:e9:a5:f3:48:af:9a:5e:5c:0a:ac:09:2b:
         98:8e:ed:ca:fe:de:39:b5:67:7a:d4:6b:61:be:82:5e:ff:11:
         18:a2:c0:ba:14:36:4d:56:e8:67:42:18:8f:c3:ce:33:3e:b4:
         ba:49:ed:89:b9:6b:ab:ee:8e:ac:d3:97:88:aa:cc:b8:48:a1:
         46:84:74:ae:29:ca:da:ee:27:1b:ea:0a:c5:f8:a4:40:e7:38:
         22:5e:df:06:1a:9c:06:25:05:f1:1d:53:08:41:30:fc:22:f6:
         da:08:71:be:6b:1a:55:03:db:8e:2e:91:97:e1:4c:1c:9a:88:
         0c:c2:b0:10:ce:03:77:f5:29:5e:67:81:e9:b9:68:dd:7c:dd:
         75:d0:31:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:49:02 2026 by rpki-client