This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e3138302e302f32332d3234203d3e20323635373035.roa
File:                     3138362e32382e3138302e302f32332d3234203d3e20323635373035.roa (raw, json)
Hash identifier:          gOQA0Alol/r4t1vbl8VB2SFn5fjqQ4euv/aRYzuA5EM=
Subject key identifier:   32:09:AA:7C:0E:EA:F1:11:4C:92:39:4B:21:AA:D2:5C:40:16:26:9F
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       09D0AF798C408D52E31A8991C79DDF8792E6A6BA
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e3138302e302f32332d3234203d3e20323635373035.roa
Signing time:             Tue 06 Jan 2026 19:14:00 +0000
ROA not before:           Tue 06 Jan 2026 19:09:00 +0000
ROA not after:            Tue 05 Jan 2027 19:14:00 +0000
asID:                     265705
IP address blocks:        186.28.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d0:af:79:8c:40:8d:52:e3:1a:89:91:c7:9d:df:87:92:e6:a6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Jan  6 19:09:00 2026 GMT
            Not After : Jan  5 19:14:00 2027 GMT
        Subject: CN=3209AA7C0EEAF1114C92394B21AAD25C4016269F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:a9:28:34:74:55:72:c1:76:e9:4e:05:a0:
                    66:3a:cd:16:b2:0f:af:83:20:55:41:d8:4d:49:f1:
                    7a:88:97:f2:a9:f0:74:e3:1f:a1:46:62:87:24:85:
                    f9:5e:3d:01:1c:87:e6:c3:58:57:26:f0:42:2e:f1:
                    be:88:0d:99:3a:c8:41:af:1f:94:02:dc:75:e3:22:
                    b3:f3:28:46:18:f1:d9:7e:34:57:e3:10:d5:dc:e6:
                    be:d4:ec:01:68:4c:07:6d:36:fe:16:55:cf:7e:cb:
                    b7:83:a7:6e:51:22:65:5d:6d:00:a3:9b:44:b7:27:
                    9b:25:39:ac:d7:9e:47:9d:78:b2:77:90:ae:e0:9c:
                    b8:31:cb:f5:d9:42:4b:e2:ba:ad:b2:66:ca:71:22:
                    7d:36:41:f2:f6:75:36:d5:82:8c:b9:1d:f4:af:8b:
                    30:0f:12:8f:49:46:6a:09:e9:80:12:97:59:e7:12:
                    b6:0f:65:8a:7d:b7:14:e7:41:a5:f2:b9:cd:92:d0:
                    dc:7e:70:1d:0f:40:75:67:92:55:8a:da:6b:07:f7:
                    39:f3:69:70:2f:f9:a0:c5:36:8c:7e:e4:bf:d1:78:
                    77:f6:c6:35:25:b3:ca:dd:58:0c:7c:35:58:b6:b1:
                    c6:69:99:ba:23:52:94:8b:8c:c9:40:15:66:18:4b:
                    0f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:09:AA:7C:0E:EA:F1:11:4C:92:39:4B:21:AA:D2:5C:40:16:26:9F
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e3138302e302f32332d3234203d3e20323635373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.28.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:72:88:31:03:f4:2c:6f:4c:f6:3b:89:3c:5a:79:a6:6f:e5:
         35:14:1f:dc:7b:6d:f7:09:dc:96:c3:50:45:e7:7a:82:19:ae:
         8c:9f:8d:67:b6:91:11:a3:0a:1d:41:fb:72:18:86:c2:4f:51:
         82:41:a3:f0:ee:22:f0:be:9f:73:82:2a:5b:7a:fd:42:cd:0e:
         a1:b5:20:ab:52:4f:ea:e0:d6:66:7f:70:da:7f:8a:6b:46:10:
         6f:3a:60:36:62:f7:d3:41:e3:32:82:a8:d9:1f:76:50:fb:96:
         46:2b:16:c0:b1:9e:33:e5:26:4b:0d:aa:b5:52:f9:f4:2f:f9:
         72:f7:3b:ef:8d:e0:f3:ed:be:bf:9a:ef:85:16:b9:ab:6e:c0:
         dc:d2:20:a8:ae:93:c2:e9:a5:56:ff:21:c7:4c:c1:00:00:98:
         a1:bc:f1:2f:38:da:16:64:1c:f6:50:be:95:b8:39:ac:ea:4b:
         91:a4:7b:73:5c:8d:82:73:ec:38:47:48:1a:95:d0:69:d6:1a:
         a0:48:22:f0:01:dd:36:66:ef:29:0e:83:b6:70:e9:3f:fa:cc:
         10:8e:f9:5a:06:6f:50:bd:a6:97:02:cc:7f:03:ec:a7:84:fc:
         23:57:7d:e3:a2:7d:5e:c3:64:7e:fe:7f:80:41:ee:a7:86:c9:
         1a:72:db:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:36:35 2026 by rpki-client