This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e33312e3132382e302f32322d3234203d3e20323635373035.roa
File:                     3138362e33312e3132382e302f32322d3234203d3e20323635373035.roa (raw, json)
Hash identifier:          oUHxIWB+HhiOlocsA4vSQe5HTDh0FFbpEzPVwJ6dVjw=
Subject key identifier:   53:7B:85:9E:E1:4E:D3:9A:33:51:C1:E9:0C:CA:41:47:54:48:82:68
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       5221D66F661F48C669E64E35B699ED6FD6E51E12
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e33312e3132382e302f32322d3234203d3e20323635373035.roa
Signing time:             Tue 06 Jan 2026 19:14:02 +0000
ROA not before:           Tue 06 Jan 2026 19:09:02 +0000
ROA not after:            Tue 05 Jan 2027 19:14:02 +0000
asID:                     265705
IP address blocks:        186.31.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:21:d6:6f:66:1f:48:c6:69:e6:4e:35:b6:99:ed:6f:d6:e5:1e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Jan  6 19:09:02 2026 GMT
            Not After : Jan  5 19:14:02 2027 GMT
        Subject: CN=537B859EE14ED39A3351C1E90CCA414754488268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:eb:4f:10:52:9a:79:7c:e6:8b:b3:54:4e:37:
                    f1:c3:79:b1:db:2b:7c:4f:45:d2:0a:25:27:fe:6b:
                    d7:ca:a8:f7:63:5b:7d:1e:2e:e1:8c:0d:f2:dc:53:
                    3a:ac:eb:d3:0e:47:72:8a:88:95:11:ba:c4:c8:5d:
                    7c:ae:96:49:37:88:b8:7e:72:f2:78:a3:eb:3e:41:
                    ab:cb:d7:dd:80:61:5a:d1:2e:eb:b7:cb:b5:2e:f8:
                    08:20:dd:cf:3b:76:48:75:dd:a6:51:5a:d4:bb:48:
                    02:91:c0:4f:d6:d8:6b:98:d5:ad:d8:d7:81:44:ac:
                    29:44:1e:98:56:6b:30:89:4f:ad:61:a0:74:25:71:
                    7d:4e:ec:f3:74:b6:6e:5c:43:4c:ba:5c:f3:82:03:
                    75:99:64:b4:29:73:8d:ea:e9:b5:a3:e9:33:b4:34:
                    dc:82:38:11:74:43:59:f4:04:81:5e:c4:20:e0:30:
                    e3:4b:aa:d0:b9:ff:ea:62:85:eb:df:1d:ec:61:59:
                    c0:21:4a:a2:b2:9e:74:56:7c:09:e4:af:7c:d3:dd:
                    37:73:ab:9f:d1:7f:d9:fa:f7:fa:77:ca:db:4c:8d:
                    96:60:79:7c:73:76:75:51:ec:b3:f1:b7:28:77:b5:
                    0b:74:f1:76:54:80:11:53:c2:a5:d2:d9:d2:6b:1f:
                    88:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7B:85:9E:E1:4E:D3:9A:33:51:C1:E9:0C:CA:41:47:54:48:82:68
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e33312e3132382e302f32322d3234203d3e20323635373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.31.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:33:1b:31:cf:b8:7b:0f:5f:c2:21:fb:38:08:e1:b8:76:f1:
         89:3c:d7:56:9b:bc:bd:d3:70:12:f2:a0:5e:d0:d2:0b:39:5c:
         56:a8:04:3f:ee:be:dd:eb:9e:9a:5e:9c:be:e4:1a:57:2a:17:
         bd:b3:44:53:2d:f8:1b:ce:a3:ec:fa:82:63:62:ff:03:b2:06:
         00:9d:ed:4c:b5:8a:0c:27:14:ee:0c:f6:88:fc:8f:21:2e:69:
         8c:47:5f:b9:95:44:6d:8e:ef:78:a0:59:3b:bb:25:6a:c4:7e:
         86:a3:68:4d:3a:eb:e0:ff:26:64:ca:b6:91:bc:25:29:c5:42:
         87:79:04:07:0f:c2:69:ad:49:5d:fa:65:46:8c:9c:4e:4d:b5:
         19:6f:33:7c:9d:d5:62:a4:0e:95:5e:81:3e:26:2a:f3:f7:1c:
         55:b9:ad:99:83:09:8a:93:5e:1f:40:56:95:d9:27:6d:66:d9:
         28:8e:46:00:63:ba:d6:bc:a0:76:8e:8c:ae:e0:e8:ad:1d:5b:
         96:19:8f:38:a2:d2:e9:9b:63:51:6c:9e:1d:b1:be:ef:25:65:
         b0:78:d6:67:88:ee:19:67:7f:e7:d1:31:ec:8a:e6:36:5a:01:
         ec:5d:7a:86:c5:21:67:eb:7f:14:46:d2:de:11:37:70:27:a6:
         60:95:3d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:34:26 2026 by rpki-client