This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e36342e302f32302d3234203d3e203134373534.roa
File:                     3138362e3135312e36342e302f32302d3234203d3e203134373534.roa (raw, json)
Hash identifier:          H3y9kemRWRucpW0h/B3VERyUmNXJHDaLZP7g/sMVk6M=
Subject key identifier:   18:71:EE:6F:FF:E7:18:92:80:03:FE:34:53:CF:18:93:AA:B7:76:36
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       60E094A65B2C0330184C648920066BA4B3D6CA82
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e36342e302f32302d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 19:47:13 +0000
ROA not before:           Tue 06 Jan 2026 19:42:13 +0000
ROA not after:            Tue 05 Jan 2027 19:47:13 +0000
asID:                     14754
IP address blocks:        186.151.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 18:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e0:94:a6:5b:2c:03:30:18:4c:64:89:20:06:6b:a4:b3:d6:ca:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Jan  6 19:42:13 2026 GMT
            Not After : Jan  5 19:47:13 2027 GMT
        Subject: CN=1871EE6FFFE718928003FE3453CF1893AAB77636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:36:b9:cb:f3:7f:78:a7:7b:05:1c:30:0a:e6:
                    a7:97:e2:6e:28:ca:3f:43:1e:ed:42:cd:ce:c7:d6:
                    b6:a7:97:d4:f1:09:7d:ee:15:9e:85:66:16:3b:fa:
                    40:1d:c6:00:07:c5:38:80:b0:eb:3c:e7:9c:14:7b:
                    c9:0a:0c:59:60:de:5c:77:9d:7f:95:b9:fd:9b:06:
                    b3:59:5e:2f:04:9f:a6:82:5b:9d:f3:9d:7d:c9:f0:
                    1a:46:f8:60:99:c4:2e:0d:d6:1f:d7:12:e3:9b:00:
                    78:64:98:c9:9d:8a:ea:77:c0:e3:39:39:dd:8b:30:
                    45:76:09:25:78:c2:68:70:1c:41:1b:18:c5:01:46:
                    a2:47:c4:d9:6f:46:35:3e:58:7f:6a:85:8c:36:20:
                    4b:a2:d1:d9:d8:12:9e:92:59:a1:a9:a5:45:07:b9:
                    e4:26:82:33:48:ae:e5:ab:c8:d9:c1:8a:82:e0:5b:
                    1a:fd:0b:bf:f2:8e:9c:21:e5:63:2c:66:b2:c1:cc:
                    14:8f:41:53:9d:ca:ff:62:58:8f:14:60:f9:71:5b:
                    16:9a:e7:23:6a:3c:69:5e:29:f6:82:78:18:db:d7:
                    2b:48:1e:8f:80:5a:7b:49:6a:6b:44:35:08:5b:44:
                    6c:31:8c:9c:86:4d:53:0e:d1:3c:25:68:98:ea:65:
                    c8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:71:EE:6F:FF:E7:18:92:80:03:FE:34:53:CF:18:93:AA:B7:76:36
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3138362e3135312e36342e302f32302d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.151.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:b9:a2:28:d9:15:cc:f4:ae:dc:f8:b4:99:a6:d4:75:0f:79:
         a0:a7:f5:b1:02:51:05:bd:2d:fe:b2:cc:5e:f3:ac:22:88:7e:
         1e:08:0f:ce:3a:92:ea:d2:d6:19:55:82:fa:0c:bb:8f:05:cd:
         93:a6:f8:e6:2c:a7:47:a8:7c:24:d3:14:2a:f5:39:3e:de:26:
         17:8a:43:b7:67:79:00:6e:91:98:d7:c5:d6:41:1b:2c:7b:b4:
         f3:8b:b0:19:6f:09:8c:2f:16:d8:0a:4d:30:18:fb:e1:60:5b:
         4d:c0:78:a0:2b:e8:ae:d7:9c:b0:a6:91:9f:57:aa:d4:38:37:
         5e:d3:d7:85:28:73:3f:5b:b6:ab:e2:04:8d:bc:1c:d7:ef:99:
         60:d4:4d:f2:02:d5:f4:b2:ef:b9:73:e2:13:18:31:03:37:57:
         c8:fd:48:ab:a7:26:07:a5:ef:88:c3:cb:69:41:09:8f:81:41:
         9c:ba:6a:95:c1:9b:63:3a:62:b8:51:67:4c:75:a5:2a:9e:f9:
         f0:4a:96:dd:53:0e:b4:dd:00:42:36:fb:f9:7a:9e:60:e1:1d:
         45:23:f9:70:d6:07:ef:25:47:4f:da:e5:52:29:b0:d3:b2:95:
         1d:eb:74:13:ae:3a:bb:90:eb:94:09:1b:3e:78:42:7c:79:0e:
         c5:c5:a0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 06:52:12 2026 by rpki-client