This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3234302e302f32302d3234203d3e2037303034.roa
File:                     3138362e3130332e3234302e302f32302d3234203d3e2037303034.roa (raw, json)
Hash identifier:          L0lx/28nS9n0UR2Zpl6eEC0xemMO4NfnWJ2I66Y+p58=
Subject key identifier:   E7:B4:BF:BF:4A:DB:D6:9C:0D:F1:57:F5:1A:91:6D:E9:2C:A8:39:1F
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       615131820621ED05975A663AAC6407EF5104C8EA
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3234302e302f32302d3234203d3e2037303034.roa
Signing time:             Tue 06 Jan 2026 20:52:03 +0000
ROA not before:           Tue 06 Jan 2026 20:47:03 +0000
ROA not after:            Tue 05 Jan 2027 20:52:03 +0000
asID:                     7004
IP address blocks:        186.103.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 13:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:51:31:82:06:21:ed:05:97:5a:66:3a:ac:64:07:ef:51:04:c8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:47:03 2026 GMT
            Not After : Jan  5 20:52:03 2027 GMT
        Subject: CN=E7B4BFBF4ADBD69C0DF157F51A916DE92CA8391F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:96:34:45:a4:81:eb:d5:98:77:2a:fb:ce:
                    46:74:2f:ce:ab:b6:ae:eb:54:13:40:48:c6:cc:e5:
                    3c:a5:7c:e3:5e:5a:fa:6c:f5:dd:4c:3f:39:1b:5d:
                    f4:83:e6:b1:20:86:73:51:e8:b7:1e:b3:57:39:4f:
                    03:9a:14:10:a7:bc:6c:06:14:6e:d0:b6:5f:34:c7:
                    cf:3c:2f:00:6a:d8:c5:11:e7:af:6c:af:78:6e:e7:
                    c4:38:3f:1f:90:c7:c9:41:c1:53:db:de:56:f6:f9:
                    cb:cb:ec:31:80:fb:68:55:6e:58:fc:00:03:c7:f0:
                    82:c0:98:e6:e6:cf:5a:8d:cf:c2:6b:a6:78:a6:63:
                    9d:b5:c8:7b:5c:55:e2:46:1c:29:13:47:23:58:d7:
                    93:3f:81:90:97:13:86:a8:71:f6:0f:d2:c6:04:00:
                    e5:15:24:4e:3b:0b:e0:51:71:d2:40:02:32:0b:ba:
                    d2:56:11:b7:a0:39:08:66:9b:4a:8c:80:a6:9a:9c:
                    d6:4e:7b:43:e7:26:16:04:2c:1d:18:71:c1:3e:55:
                    cd:e3:a0:c8:54:32:5b:13:e9:5f:94:97:f8:63:78:
                    76:c7:33:57:c8:18:58:76:98:47:d5:31:47:23:2a:
                    47:fe:bc:0f:9c:6e:ac:42:ec:de:62:d0:d3:51:a0:
                    2d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B4:BF:BF:4A:DB:D6:9C:0D:F1:57:F5:1A:91:6D:E9:2C:A8:39:1F
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3234302e302f32302d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.103.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:48:34:8d:99:bc:7d:72:19:2a:45:fb:5a:e7:8a:1a:6c:
         d4:72:3c:91:e1:e2:eb:dc:96:4d:71:63:b1:57:b6:40:a3:b6:
         95:80:60:50:5b:5f:2c:ac:f9:d8:1a:08:30:eb:a9:76:09:25:
         4f:0f:8b:b9:db:1d:9e:7d:63:3a:96:b3:f9:dc:9c:29:43:cc:
         ff:8a:9f:3e:c9:4e:72:e9:76:95:ae:ea:91:00:4f:8e:1d:fb:
         59:ec:32:aa:01:f6:3a:58:48:2b:4c:58:f7:b0:19:9e:61:04:
         a8:b0:a1:d8:f2:1b:96:cb:15:df:ea:3e:46:d2:04:ea:b9:02:
         ef:d5:6d:be:e0:fa:9e:1b:f3:aa:fc:bb:82:73:28:ee:b9:19:
         8f:fd:b7:78:1c:e7:f7:9f:7e:1e:8c:fe:5e:0e:f3:e8:8e:db:
         03:b4:3d:75:24:59:6a:e9:de:3a:4c:75:a2:77:7e:b9:d8:ee:
         92:19:10:c2:88:ed:c1:c9:c3:e7:4b:b3:29:43:c9:9a:1c:3a:
         6a:c2:4a:71:b6:fb:3b:6b:28:89:7e:d5:ed:71:a9:75:d5:bb:
         12:65:2b:45:17:44:07:e3:cc:be:e3:8c:af:1a:13:ab:27:36:
         ac:96:82:54:ad:ad:f8:1f:bc:c7:66:79:c0:dd:a4:5c:87:a3:
         24:44:2a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:29:28 2026 by rpki-client