This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3231382e302f32332d3234203d3e20323632323032.roa
File:                     3138362e3135392e3231382e302f32332d3234203d3e20323632323032.roa (raw, json)
Hash identifier:          bxrt9p6shhw6lpUXh4gthuyaM/Dme0dQx77KQ9fT8F8=
Subject key identifier:   EE:43:CA:B0:B1:70:C1:FD:B6:2E:24:85:05:40:0C:9B:49:9D:5F:AC
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       28F11A1CB5FAE6D1A509EF17084224B0C843FB43
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3231382e302f32332d3234203d3e20323632323032.roa
Signing time:             Tue 06 Jan 2026 19:00:07 +0000
ROA not before:           Tue 06 Jan 2026 18:55:07 +0000
ROA not after:            Tue 05 Jan 2027 19:00:07 +0000
asID:                     262202
IP address blocks:        186.159.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f1:1a:1c:b5:fa:e6:d1:a5:09:ef:17:08:42:24:b0:c8:43:fb:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Jan  6 18:55:07 2026 GMT
            Not After : Jan  5 19:00:07 2027 GMT
        Subject: CN=EE43CAB0B170C1FDB62E248505400C9B499D5FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:f8:d9:c7:eb:82:31:bd:0a:98:fc:ef:6a:
                    23:59:77:83:1d:85:3e:35:a1:5e:14:28:0e:e7:f5:
                    06:cf:d0:11:fa:3d:94:0b:4f:85:ef:db:11:ad:20:
                    e9:74:68:48:b1:2e:9b:9f:a3:de:a5:5a:67:39:43:
                    07:e7:12:c0:46:90:f6:74:95:aa:39:9d:fa:76:4f:
                    9a:18:b7:be:f5:23:a9:47:99:32:da:6e:d6:74:64:
                    19:31:62:0d:ba:56:e1:e8:ed:75:7c:4a:d4:1d:54:
                    1e:bd:7f:9a:8e:5b:66:1e:c0:8c:3f:01:04:00:96:
                    c6:e2:77:39:6b:7c:c1:22:24:3e:82:e2:6c:5e:1c:
                    f7:98:0e:cb:80:b3:03:28:2e:06:67:13:52:34:0a:
                    11:8f:d5:8d:ff:08:a0:4d:0e:02:99:e8:78:78:2b:
                    12:54:3c:b3:8a:c0:75:85:b3:45:00:dd:62:ee:c2:
                    45:e8:e6:5d:a7:21:57:00:62:f0:f8:3f:47:41:76:
                    e2:97:0e:7f:46:d2:19:ac:5a:e1:d7:55:86:b5:8a:
                    df:c0:4f:a7:81:2c:72:98:b3:24:84:82:6e:5c:31:
                    86:01:f4:55:dc:00:37:a9:e5:f3:01:62:1f:21:27:
                    58:f5:36:3a:08:18:57:ec:a4:44:6a:91:12:92:23:
                    4c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:43:CA:B0:B1:70:C1:FD:B6:2E:24:85:05:40:0C:9B:49:9D:5F:AC
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3231382e302f32332d3234203d3e20323632323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:6d:d2:e3:dd:3b:3a:cf:71:c7:6a:05:e1:1f:95:e1:5a:db:
         0f:bb:4c:f4:12:59:4a:d3:11:43:8a:bb:5d:69:87:e3:0d:97:
         8b:6e:bf:72:dc:7a:15:25:fc:ce:7e:d4:35:47:85:0e:82:e8:
         f0:5f:08:11:f6:06:04:9e:cd:d6:da:e7:42:4c:19:22:20:22:
         80:f0:cf:56:14:b2:f3:83:c7:f5:36:94:ea:dd:ba:5f:4f:3c:
         e3:c3:83:67:e2:d7:56:52:33:26:71:28:e5:8b:47:c9:07:38:
         5d:40:68:41:c8:e2:49:17:95:84:4e:e3:28:1e:87:e2:b3:bd:
         2b:a1:f8:a3:72:7b:52:0c:33:1a:63:44:82:38:95:3b:7f:d5:
         9c:a0:70:12:46:16:af:2c:42:4b:84:0c:02:65:b3:f4:85:dc:
         9a:90:22:bd:15:88:da:52:b3:49:02:7c:32:76:69:d5:84:3c:
         f5:d7:1f:0c:da:d6:17:ba:17:22:02:e2:b8:8a:be:87:7f:1f:
         a9:9e:40:91:2e:be:c8:1b:d6:61:61:48:d1:a0:a6:b1:58:a1:
         b7:d2:29:1d:37:bd:bd:35:0f:e4:70:70:d9:9f:bf:0a:af:fc:
         29:93:62:31:c5:2b:36:09:76:44:6c:24:38:7d:8e:25:6c:53:
         37:e3:c3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:50:45 2026 by rpki-client