This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e3132302e302f32312d3234203d3e203238313134.roa
File:                     3138362e3138332e3132302e302f32312d3234203d3e203238313134.roa (raw, json)
Hash identifier:          P+gTrvre99nXPvig6MDEhrLH23RZPK68NwzYB80MksI=
Subject key identifier:   BC:9A:E6:4D:A0:2A:A1:29:38:2B:31:AB:85:86:9C:F4:66:3B:FE:D8
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       010B8F615367D823AA45B10514798EA65EDC5235
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e3132302e302f32312d3234203d3e203238313134.roa
Signing time:             Tue 06 Jan 2026 19:05:14 +0000
ROA not before:           Tue 06 Jan 2026 19:00:14 +0000
ROA not after:            Tue 05 Jan 2027 19:05:14 +0000
asID:                     28114
IP address blocks:        186.183.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 02:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0b:8f:61:53:67:d8:23:aa:45:b1:05:14:79:8e:a6:5e:dc:52:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Jan  6 19:00:14 2026 GMT
            Not After : Jan  5 19:05:14 2027 GMT
        Subject: CN=BC9AE64DA02AA129382B31AB85869CF4663BFED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:6e:b7:27:80:a5:92:b1:2f:e9:65:cb:57:
                    ec:f1:d5:ab:ff:10:46:c7:e6:9b:dd:9b:df:61:ba:
                    17:0d:92:24:79:08:c8:c0:68:4f:6f:50:54:ed:58:
                    28:fb:f6:41:47:ac:6e:90:0b:3d:f5:6e:0a:92:63:
                    c3:65:38:ac:82:f4:57:bb:a2:ab:17:26:ff:31:fe:
                    20:8b:9f:a5:44:ab:dd:ee:46:58:79:73:31:18:7f:
                    32:e4:f9:4c:8e:3e:05:31:11:2a:90:07:c5:ec:d1:
                    12:9b:3d:13:1b:1e:98:de:f8:47:72:9e:03:a3:94:
                    01:26:b1:bc:d8:2f:8b:fa:07:9e:aa:73:3b:23:07:
                    43:22:68:f1:23:c4:8d:d1:7c:e9:11:9f:45:ee:f8:
                    db:97:60:21:06:91:d5:aa:6b:f6:8e:89:e9:7b:8a:
                    8e:5d:84:80:e5:c1:da:ff:bf:30:d2:fa:c4:7a:d7:
                    6e:37:70:5d:24:d9:54:9e:1c:21:f8:dc:2b:f1:51:
                    e5:e9:07:8a:1d:60:7f:9f:5d:9b:fd:49:19:22:0e:
                    ed:52:f8:19:89:84:cd:12:24:76:0a:85:73:19:f1:
                    43:dd:a9:94:95:e5:25:23:7f:2f:13:18:be:5d:4e:
                    c3:32:ee:5f:97:18:d3:12:37:50:ce:ba:22:29:26:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9A:E6:4D:A0:2A:A1:29:38:2B:31:AB:85:86:9C:F4:66:3B:FE:D8
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e3132302e302f32312d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:4d:9d:55:24:cf:cb:13:cf:a6:91:dc:0a:eb:19:88:d6:50:
         5d:00:70:6b:d1:d6:e0:cd:97:fb:2d:58:73:eb:41:0f:47:70:
         60:06:51:d6:10:b1:57:45:3f:cd:57:80:d2:33:32:ab:e7:1a:
         8d:a5:6b:c3:d0:f7:a3:88:8a:17:ed:6f:7f:d2:95:5e:e4:ef:
         83:61:c5:54:a5:aa:b7:2a:bf:60:67:d8:77:51:cf:e2:0c:ad:
         61:64:86:51:94:23:77:96:3b:c8:64:f5:fe:40:44:e0:f1:4b:
         89:96:16:99:eb:2b:fb:e4:3c:e4:15:0e:d1:29:3d:1f:11:c9:
         c4:47:ac:04:04:92:3f:bc:b9:28:ed:26:61:fe:75:1f:30:dc:
         72:01:f6:43:73:14:19:53:a2:9b:62:2b:be:ba:50:03:6a:71:
         0b:b1:23:c2:3d:d0:98:0a:b5:9d:6d:a6:18:7a:56:58:90:b5:
         05:2a:ca:f4:01:0d:40:6f:c3:3b:b4:da:76:91:2e:73:4f:87:
         51:92:73:64:42:2d:0f:f2:51:4e:43:21:e4:4b:03:6d:96:51:
         7a:55:8b:c0:c1:af:35:aa:15:61:36:96:38:23:cd:f3:fb:63:
         44:a8:e8:78:4c:a9:df:e4:1c:37:0e:af:00:4e:93:88:62:92:
         d5:58:2a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:40:06 2026 by rpki-client