This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138362e3139302e3136302e302f32302d3234203d3e203237393533.roa
File:                     3138362e3139302e3136302e302f32302d3234203d3e203237393533.roa (raw, json)
Hash identifier:          3+fIzzj4eSV23sX5pMe2ZgmjkDpw6eCUH21hkAaq8lA=
Subject key identifier:   88:01:D8:7A:7E:AE:96:98:FB:29:3F:A6:66:B9:B1:1C:D5:09:F8:F2
Certificate issuer:       /CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
Certificate serial:       4E45580FA801DF9F28C8CE5A9954D8DD2B04B2B3
Authority key identifier: D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138362e3139302e3136302e302f32302d3234203d3e203237393533.roa
Signing time:             Tue 06 Jan 2026 19:48:09 +0000
ROA not before:           Tue 06 Jan 2026 19:43:09 +0000
ROA not after:            Tue 05 Jan 2027 19:48:09 +0000
asID:                     27953
IP address blocks:        186.190.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 17:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:45:58:0f:a8:01:df:9f:28:c8:ce:5a:99:54:d8:dd:2b:04:b2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
        Validity
            Not Before: Jan  6 19:43:09 2026 GMT
            Not After : Jan  5 19:48:09 2027 GMT
        Subject: CN=8801D87A7EAE9698FB293FA666B9B11CD509F8F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:51:45:56:0e:64:f6:6c:0c:a0:b3:60:d5:
                    12:81:8d:05:56:96:67:53:f7:78:19:52:16:6c:f8:
                    fe:3e:95:0b:2a:e8:a4:7e:aa:dc:f9:6c:49:f4:21:
                    c2:c4:0c:89:57:7c:b8:62:33:c4:fd:15:b9:1d:ac:
                    85:00:68:6f:1b:af:b8:be:a0:f3:fe:c7:77:e0:f2:
                    45:15:78:db:a3:10:ae:b1:c7:f8:3c:50:1f:6c:6e:
                    59:2c:28:b2:23:21:68:a5:83:da:d5:22:2d:58:19:
                    b4:75:66:6b:8d:3b:e6:d5:c3:b6:f3:8e:97:04:46:
                    4b:2e:f5:03:a9:c8:7f:5c:92:9e:86:2e:b0:fc:04:
                    dc:05:1f:b8:e6:8d:ed:bf:e0:b7:48:9a:83:9e:75:
                    c3:0d:25:81:23:28:a4:20:61:ae:28:a1:84:aa:ae:
                    cc:b1:2f:c5:69:6a:32:fe:5b:4e:7a:bf:05:9b:c9:
                    68:04:76:8e:88:d1:49:21:03:58:10:41:1f:97:65:
                    14:1f:c6:76:da:12:08:df:3f:10:4a:e5:c2:cb:c3:
                    f2:ac:5f:65:fc:3c:96:c7:a2:42:71:48:99:87:04:
                    ba:b0:51:8a:89:1b:83:c1:9c:c6:ab:5d:f9:68:aa:
                    5c:ce:d2:5b:a4:27:c9:a6:c4:57:b4:01:be:a4:63:
                    5d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:01:D8:7A:7E:AE:96:98:FB:29:3F:A6:66:B9:B1:1C:D5:09:F8:F2
            X509v3 Authority Key Identifier:
                keyid:D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138362e3139302e3136302e302f32302d3234203d3e203237393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:5f:97:f5:52:19:06:10:92:87:c4:c1:cd:a6:d9:7d:e0:f5:
         47:d3:54:88:aa:a8:10:ee:5d:55:3d:db:a8:8e:9d:34:b1:ff:
         29:48:17:fb:41:55:2f:1f:99:a7:1e:60:69:a1:e6:a2:a2:90:
         96:61:5e:fc:dc:28:93:de:3b:31:9b:2c:2c:77:d8:cc:b4:78:
         62:c9:d1:96:fa:0f:fa:2c:ff:da:9f:a8:66:0d:4e:3a:bb:7f:
         73:82:ab:1c:78:22:f5:c4:f0:37:e1:22:a0:0c:44:2f:36:0b:
         28:ff:45:86:6f:be:07:04:02:fe:da:a6:40:61:10:12:c8:e6:
         30:11:66:94:6a:e7:77:c7:6e:64:21:ad:eb:d4:22:18:fc:c3:
         81:dc:cd:63:53:37:4f:28:1e:fb:e3:62:2d:cb:d6:2c:b6:dd:
         a6:de:c2:02:a4:43:f3:31:db:46:03:97:bc:ba:6a:ce:3c:ac:
         f1:cb:31:9a:12:21:db:e1:af:25:c8:53:e0:6a:92:89:81:20:
         48:36:40:47:34:69:f0:1e:52:ef:c4:26:54:bf:d9:75:bd:27:
         33:fa:9e:d2:de:8b:99:6f:90:45:fb:93:ac:3b:6e:cb:d0:19:
         16:8b:5b:c7:1f:ec:a2:28:9d:7d:21:87:07:6c:6a:d4:78:82:
         d6:d6:2a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:07:07 2026 by rpki-client