This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138362e32362e3132382e302f31372d3230203d3e203237383839.roa
File:                     3138362e32362e3132382e302f31372d3230203d3e203237383839.roa (raw, json)
Hash identifier:          CcMJOFhmgqBMQmrykQqEaAyLocGm/Al2Cyt7JxOQViA=
Subject key identifier:   A0:A0:73:D1:65:79:77:79:68:43:00:08:3E:D5:28:8D:C6:B1:C7:B2
Certificate issuer:       /CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
Certificate serial:       02544BA7F6FEC00794E749F342C36D9A41201066
Authority key identifier: 3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138362e32362e3132382e302f31372d3230203d3e203237383839.roa
Signing time:             Tue 06 Jan 2026 19:28:57 +0000
ROA not before:           Tue 06 Jan 2026 19:23:57 +0000
ROA not after:            Tue 05 Jan 2027 19:28:57 +0000
asID:                     27889
IP address blocks:        186.26.128.0/17 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 14:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:54:4b:a7:f6:fe:c0:07:94:e7:49:f3:42:c3:6d:9a:41:20:10:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
        Validity
            Not Before: Jan  6 19:23:57 2026 GMT
            Not After : Jan  5 19:28:57 2027 GMT
        Subject: CN=A0A073D165797779684300083ED5288DC6B1C7B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:77:2c:b9:6c:21:0e:c3:d1:74:16:2f:36:20:
                    55:75:79:cd:c2:c5:84:c2:f8:4a:f9:c9:9e:6e:5b:
                    f7:35:dc:c9:a2:bc:89:1f:84:d4:d5:3f:bf:c9:af:
                    d1:95:6f:45:3e:53:9c:ee:01:7d:0b:3a:37:ba:15:
                    be:ea:7f:bc:81:13:41:a8:4b:ad:92:65:2d:e9:f5:
                    b9:ca:80:62:50:0e:ac:13:2c:71:d3:d5:6e:a6:16:
                    db:5b:54:7b:f3:3d:82:7f:7e:cf:44:48:c9:a0:e5:
                    5a:80:77:ea:0a:70:23:5d:17:30:c7:d9:58:a3:e2:
                    fb:de:6e:3e:b1:b6:4f:03:58:1c:a7:e2:d1:6a:b7:
                    fc:b8:c1:33:0a:db:9f:3a:e9:56:c5:dd:fe:03:f4:
                    c6:7e:9e:5c:39:8c:5a:76:b8:7b:35:96:0f:78:d3:
                    6e:17:7d:7f:f1:c0:9e:c7:9b:d9:b0:2c:d6:bd:87:
                    e7:36:12:41:44:5c:20:e8:e8:fc:9f:e4:df:5b:a8:
                    d1:6e:de:d9:6b:79:a7:ae:b2:e3:70:d4:ac:cf:eb:
                    ba:bc:62:a5:7e:5a:f7:6c:be:25:42:f6:19:96:6d:
                    e0:76:f2:ff:d1:36:2d:e0:87:65:e5:f9:93:a7:9b:
                    98:d3:dc:d8:a7:71:c5:c5:a2:44:f5:44:6c:b7:46:
                    d4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A0:73:D1:65:79:77:79:68:43:00:08:3E:D5:28:8D:C6:B1:C7:B2
            X509v3 Authority Key Identifier:
                keyid:3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138362e32362e3132382e302f31372d3230203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4d:43:1f:e3:cb:30:56:df:80:32:aa:82:c3:f9:1e:fe:94:8a:
         4e:2c:a6:48:6e:6c:10:c3:1f:ed:fe:4e:9b:54:9e:70:f1:4c:
         2a:ba:da:cf:0b:a9:32:a2:3a:dc:61:5c:86:36:54:4b:95:62:
         81:cb:f7:46:04:64:af:37:d7:27:63:22:c0:15:bb:ac:5d:c6:
         6c:f6:0a:7e:37:e6:c0:bb:8b:60:9b:2d:5d:e6:c3:0f:8e:d0:
         fb:c2:ba:1a:25:58:65:8f:5e:70:08:65:22:87:0b:5a:56:d4:
         f3:69:9d:aa:b2:9a:f2:da:ea:01:c5:12:96:1d:35:a8:90:ac:
         07:b4:75:cb:be:c5:a0:2b:50:08:1a:16:3c:e1:12:de:ae:6e:
         95:9f:03:44:f8:b9:df:dc:56:5c:60:0c:d3:33:e4:b2:d1:7d:
         c2:ce:72:42:f1:69:f2:af:36:05:96:5e:a1:e7:19:9d:bc:30:
         fe:a6:17:e6:71:e7:71:24:90:42:00:de:79:28:1d:2c:1f:7e:
         af:73:19:73:e4:3b:42:29:67:ac:97:b1:e6:44:74:b5:f8:11:
         f4:ec:45:f5:6b:7d:fc:d6:7b:39:77:9f:37:18:70:7b:6f:75:
         96:86:a2:48:b5:67:33:ec:72:f7:ea:cc:5e:e2:72:ff:00:3e:
         ce:1b:1c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:12:14 2026 by rpki-client