This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e3130302e302f32322d3234203d3e203236363137.roa
File:                     3138362e33322e3130302e302f32322d3234203d3e203236363137.roa (raw, json)
Hash identifier:          SIJd83cF448a+0uHNypAxT0dKWaPCnO9qVw0l8XAa38=
Subject key identifier:   F1:B3:49:C9:02:CE:24:72:40:B0:D1:B5:82:17:9C:65:90:8B:B5:21
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       43D971D22A941FAFEEF24A076F5F130D02FCC45C
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e3130302e302f32322d3234203d3e203236363137.roa
Signing time:             Tue 06 Jan 2026 20:53:28 +0000
ROA not before:           Tue 06 Jan 2026 20:48:28 +0000
ROA not after:            Tue 05 Jan 2027 20:53:28 +0000
asID:                     26617
IP address blocks:        186.32.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 08:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d9:71:d2:2a:94:1f:af:ee:f2:4a:07:6f:5f:13:0d:02:fc:c4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:28 2026 GMT
            Not After : Jan  5 20:53:28 2027 GMT
        Subject: CN=F1B349C902CE247240B0D1B582179C65908BB521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a4:60:f2:3b:ae:44:57:d3:4c:fe:ce:61:fa:
                    49:30:a7:1e:9b:b7:ef:33:64:5c:57:01:9c:95:06:
                    4c:83:7b:30:40:b1:6d:36:22:13:83:50:31:0a:a9:
                    20:a4:e3:b8:51:49:3b:b5:99:32:44:c8:56:72:41:
                    11:4b:d5:74:ac:c6:7b:96:d4:60:25:b1:49:1d:9a:
                    ac:ab:ca:9a:09:53:97:cf:61:5b:b5:01:14:37:4f:
                    52:87:9d:06:c8:0c:d3:ae:d0:d8:64:f5:93:70:23:
                    68:23:63:a2:8a:9b:e3:b7:88:2b:ee:39:32:a2:d4:
                    1e:41:2f:09:b3:a9:75:31:6f:72:b5:a8:81:8d:4f:
                    00:73:ef:3c:0b:cd:13:30:03:4a:5e:9f:f4:ba:76:
                    eb:5c:19:c8:2a:36:f4:dc:f6:e7:35:b5:0a:4a:fa:
                    75:94:56:ea:3f:7a:6e:c1:44:2b:b7:6b:05:bd:9a:
                    40:3b:34:86:3f:78:13:08:22:ad:23:22:3c:c8:00:
                    3b:1a:4a:1a:16:00:b9:6d:a2:a2:81:16:57:73:93:
                    3f:5d:8e:87:18:93:6e:18:67:e8:97:cd:c1:13:e0:
                    cb:c4:0f:a7:45:01:3b:21:3e:1e:e3:ae:5d:6e:20:
                    d2:ca:00:26:9c:91:dc:97:88:ae:0b:af:54:8c:b9:
                    3d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B3:49:C9:02:CE:24:72:40:B0:D1:B5:82:17:9C:65:90:8B:B5:21
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e3130302e302f32322d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:56:86:39:a0:03:63:89:78:76:b6:8f:93:95:a2:d8:6b:5b:
         91:12:5f:97:01:57:f7:e3:70:2d:60:ec:a3:5d:23:3f:6e:29:
         ed:34:e0:d3:4c:cc:5e:e0:e4:02:a9:77:3c:e6:c6:fc:04:58:
         e4:04:a1:9a:0b:56:0c:03:4d:7d:c4:f9:0b:f8:04:83:22:34:
         e1:74:4a:d6:dc:e3:45:5d:b4:80:45:66:7a:e9:b8:2e:e0:38:
         81:fb:10:4a:6c:bd:8b:d0:02:08:a0:5e:b6:e9:08:68:b3:da:
         d1:53:0e:ce:35:4e:fa:d5:6d:e9:5d:35:47:f9:5c:e1:eb:ad:
         da:29:51:33:3f:d8:86:bb:d7:ef:89:85:29:e7:3f:25:0a:ea:
         17:92:2b:25:f1:6b:7c:fa:8e:0a:6f:a4:e0:7d:d4:38:f6:54:
         e6:f8:42:e0:83:5c:fe:b6:97:66:0b:1f:d7:6a:dc:3c:cf:49:
         4d:6b:b0:6c:19:19:e6:fb:ff:a8:07:7f:f4:f8:62:e7:6b:12:
         0c:75:62:1f:08:ec:bc:65:4d:0d:ca:36:81:61:a1:22:57:b1:
         16:42:35:61:fe:72:7b:71:9b:f6:86:da:a3:ae:10:a1:e3:a2:
         f8:b0:eb:a7:fa:47:fd:e5:0b:f3:4e:5f:14:4b:e2:05:9c:92:
         ad:de:1a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 00:00:25 2026 by rpki-client