This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232382e302f32322d3232203d3e203532333437.roa
File:                     3138362e3137372e3232382e302f32322d3232203d3e203532333437.roa (raw, json)
Hash identifier:          gY4JRqxT7NhpRZj3b3vetx4M2k86Wre6TePlQSRpJb0=
Subject key identifier:   10:9B:1D:37:C7:B6:60:09:80:63:68:A2:9E:28:43:D5:E7:8A:69:D3
Certificate issuer:       /CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
Certificate serial:       3F9BC2A80C9CAD2A000EFCA62977E7F8147726CF
Authority key identifier: 92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232382e302f32322d3232203d3e203532333437.roa
Signing time:             Tue 06 Jan 2026 19:16:08 +0000
ROA not before:           Tue 06 Jan 2026 19:11:08 +0000
ROA not after:            Tue 05 Jan 2027 19:16:08 +0000
asID:                     52347
IP address blocks:        186.177.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 22:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9b:c2:a8:0c:9c:ad:2a:00:0e:fc:a6:29:77:e7:f8:14:77:26:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBE75F42D27112FE5D8957FDF19495105F9ADF
        Validity
            Not Before: Jan  6 19:11:08 2026 GMT
            Not After : Jan  5 19:16:08 2027 GMT
        Subject: CN=109B1D37C7B66009806368A29E2843D5E78A69D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e2:59:47:67:f2:a7:80:a0:69:be:3a:88:4f:
                    6f:92:e9:e4:fd:76:3e:b3:a7:c2:fa:f8:cc:9a:7b:
                    a3:48:fe:40:f4:8e:85:f3:ac:22:7f:fc:aa:55:53:
                    40:94:d3:38:00:ff:9a:ab:91:05:70:c1:11:f0:7d:
                    5f:7c:c4:12:03:81:65:19:ac:d9:2e:22:06:d4:fc:
                    a8:b8:e4:f7:9a:63:80:a5:e1:aa:de:e8:cc:7c:52:
                    ac:d3:38:31:5b:5c:27:f2:fe:b4:85:b9:d7:9d:03:
                    37:13:0f:ec:6b:f7:c5:28:70:ec:e0:10:43:fc:11:
                    e2:40:d9:22:a9:92:e6:ba:76:9d:6b:f1:a6:9d:f4:
                    40:79:47:e3:d3:c4:37:53:2a:02:8f:28:e5:f4:a6:
                    4f:30:b3:a6:38:12:ec:bb:6d:d7:99:94:e9:c7:53:
                    18:7f:3e:42:88:b1:f6:5b:91:ab:ed:61:48:a3:23:
                    2e:b8:6a:5b:86:fe:7a:87:b1:73:8f:0b:12:72:88:
                    e3:bb:4c:ff:c6:a2:5e:ac:51:b1:4c:8a:02:77:53:
                    18:1d:48:25:74:04:68:68:df:76:8d:bd:45:34:d2:
                    c0:77:17:96:2b:12:be:f0:ea:cc:16:f7:87:d9:1e:
                    a0:60:39:65:4b:0e:87:d8:7e:5f:3a:ab:c0:4d:47:
                    11:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9B:1D:37:C7:B6:60:09:80:63:68:A2:9E:28:43:D5:E7:8A:69:D3
            X509v3 Authority Key Identifier:
                keyid:92:FB:E7:5F:42:D2:71:12:FE:5D:89:57:FD:F1:94:95:10:5F:9A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBE75F42D27112FE5D8957FDF19495105F9ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B19343FE47997D830C61CDE54CE81389E2FDF33EDD6247998D5CA6ED1DFC530/0/3138362e3137372e3232382e302f32322d3232203d3e203532333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:0e:b6:e5:1c:79:84:dc:2a:5b:42:ff:08:c5:27:b9:f5:f6:
         b9:10:19:61:be:75:7e:59:ca:2b:ef:4e:77:dc:a4:15:c3:40:
         6c:57:ef:e2:29:ff:5c:d7:32:a9:d9:f8:8e:d7:eb:eb:bb:24:
         97:81:58:24:b5:7f:41:cb:63:62:70:23:37:fc:d2:39:e1:fc:
         b6:5f:be:a7:61:9c:30:3b:49:bd:cf:ea:af:b3:78:32:d1:bd:
         05:c7:48:79:c6:13:7c:8f:95:cf:09:61:c5:8b:f7:02:8f:bd:
         88:6d:5e:d4:bc:10:e3:a9:95:ae:7f:ae:7d:86:08:48:12:9f:
         9f:95:26:f8:7e:20:77:0c:82:a3:69:dd:2c:30:d3:bb:10:c2:
         98:10:fc:91:ab:fd:30:e2:ca:f9:bd:43:96:90:00:eb:73:92:
         ad:4b:24:68:17:a1:09:ef:c0:a8:05:16:0d:c6:c6:f1:4c:b3:
         fb:54:39:b6:03:be:65:f1:57:29:79:5e:83:11:1d:5c:6c:b0:
         f1:8d:ec:60:52:a1:86:22:06:25:bd:62:b4:5d:81:4f:d8:24:
         87:ec:d4:89:d7:3e:e1:67:71:07:c0:98:f0:a4:66:fd:3a:72:
         b2:15:44:b6:11:62:a2:f8:47:db:29:55:71:3d:b9:8b:23:91:
         e0:b8:63:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:07:44 2026 by rpki-client