This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e36382e302f32322d3234203d3e203237373733.roa
File:                     3138362e33322e36382e302f32322d3234203d3e203237373733.roa (raw, json)
Hash identifier:          IkMgMj2AZik45FfLrpD4umMi04WmnSu2lr1sJ2YWENc=
Subject key identifier:   37:9E:02:4B:95:99:FF:B6:F5:FC:E0:93:05:6D:56:19:78:FC:E0:74
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       2E54CFA942222CE8F0ED5BEA3D818FBDEA9BCB71
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e36382e302f32322d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 20:53:24 +0000
ROA not before:           Tue 06 Jan 2026 20:48:24 +0000
ROA not after:            Tue 05 Jan 2027 20:53:24 +0000
asID:                     27773
IP address blocks:        186.32.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 08:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:54:cf:a9:42:22:2c:e8:f0:ed:5b:ea:3d:81:8f:bd:ea:9b:cb:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:24 2026 GMT
            Not After : Jan  5 20:53:24 2027 GMT
        Subject: CN=379E024B9599FFB6F5FCE093056D561978FCE074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ec:d6:08:cc:b5:8d:25:96:cd:f9:40:ca:32:
                    67:a8:92:86:15:b1:de:3f:5e:f0:3e:34:b4:66:cb:
                    0e:01:e0:06:76:fa:10:f2:bc:34:8a:87:71:b6:5c:
                    82:88:c5:89:14:27:d7:0d:2d:8e:d8:c7:7f:9f:a7:
                    d5:00:4c:de:6c:8d:35:d7:12:bb:3c:79:b2:02:9f:
                    e5:ce:1b:25:bf:f8:06:9f:de:35:15:29:40:6d:67:
                    58:35:9f:03:9b:83:f3:c9:9b:cc:91:8f:8e:81:fd:
                    b3:fd:20:ed:49:90:ff:68:00:2d:c5:9d:4b:a5:a4:
                    7d:6e:c5:a3:4a:cd:19:42:bc:f9:7a:3f:70:04:b2:
                    5f:03:d2:c5:f6:77:c4:15:5e:e8:37:de:7e:42:be:
                    79:df:7e:07:c1:61:8c:37:ce:c4:77:ed:23:3c:a1:
                    91:2b:23:7f:9b:0e:a1:37:c9:eb:0a:03:2a:bf:f0:
                    dd:59:02:b5:27:39:bc:33:2a:60:b8:38:8f:28:6b:
                    e6:84:4d:ec:81:be:e3:07:39:8e:bc:69:8d:b7:6f:
                    e3:15:86:17:dc:a9:fe:81:61:f2:ba:2f:55:f0:4a:
                    44:de:c5:b9:b9:85:a4:5c:f7:c8:b8:59:03:d1:29:
                    3e:fd:2e:03:9c:13:82:84:40:63:9c:71:17:a9:46:
                    ef:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9E:02:4B:95:99:FF:B6:F5:FC:E0:93:05:6D:56:19:78:FC:E0:74
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e36382e302f32322d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:bd:ee:ce:d2:f4:98:bc:a2:ac:db:bf:69:26:38:a5:1e:d8:
         dd:e4:1c:3d:94:e7:55:9f:02:0f:04:df:51:cc:ea:68:46:58:
         a3:de:57:7c:e3:8c:8a:99:51:e2:73:81:1f:df:bd:33:d3:d5:
         03:ac:77:cf:70:48:7a:09:cb:a7:1c:50:d0:1f:52:17:81:4c:
         ae:a2:4d:01:60:dc:74:3e:8e:b8:93:d1:ee:3f:2d:39:fc:47:
         3e:53:48:4f:e0:d6:a2:97:22:8a:66:75:77:d6:7d:f8:66:d7:
         3c:04:6a:51:d6:eb:e9:2e:a6:a3:31:66:d5:c8:9e:b1:18:84:
         75:f3:2b:d1:34:86:37:bf:02:2a:63:f0:38:13:49:75:22:29:
         99:3a:f5:ab:22:b5:9b:e2:d0:69:d1:d5:0d:dc:fb:5a:b0:f9:
         b3:f4:97:d7:7e:71:ba:bd:62:cd:4a:87:af:41:62:a0:6e:de:
         3a:50:fb:22:d2:b4:6f:37:32:90:6e:b5:b8:2a:f1:e9:aa:13:
         58:aa:62:aa:ce:fd:48:e8:08:64:0f:e3:cb:11:39:3e:21:ac:
         4b:8e:4c:26:66:71:6e:fd:e6:b5:52:7e:52:f3:78:9a:81:76:
         d7:41:a7:62:ff:0f:61:59:f8:56:6e:5f:dc:da:8f:54:d5:fa:
         07:37:b0:58
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIULlTPqUIiLOjw7VvqPYGPveqby3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJDQ0JENjhFQjIyQzM3Qjg4NkQ4MUJERkM4QkE3N0NE
NzMxMjIwODAeFw0yNjAxMDYyMDQ4MjRaFw0yNzAxMDUyMDUzMjRaMDMxMTAvBgNV
BAMTKDM3OUUwMjRCOTU5OUZGQjZGNUZDRTA5MzA1NkQ1NjE5NzhGQ0UwNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7NYIzLWNJZbN+UDKMmeokoYV
sd4/XvA+NLRmyw4B4AZ2+hDyvDSKh3G2XIKIxYkUJ9cNLY7Yx3+fp9UATN5sjTXX
Ers8ebICn+XOGyW/+Aaf3jUVKUBtZ1g1nwObg/PJm8yRj46B/bP9IO1JkP9oAC3F
nUulpH1uxaNKzRlCvPl6P3AEsl8D0sX2d8QVXug33n5CvnnffgfBYYw3zsR37SM8
oZErI3+bDqE3yesKAyq/8N1ZArUnObwzKmC4OI8oa+aETeyBvuMHOY68aY23b+MV
hhfcqf6BYfK6L1XwSkTexbm5haRc98i4WQPRKT79LgOcE4KEQGOccRepRu9VAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUN54CS5WZ/7b1/OCTBW1WGXj84HQwHwYDVR0j
BBgwFoAUm8y9aOsiw3uIbYG9/IunfNcxIggwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTVGMkY4N0QxMTc4NkZCM0ZDQURBQTA0MzQzMUVCMDEz
Q0RCQUQwMDI0N0VEQjdBNjUwMkJGRkQ4QjRDQzI0LzAvOUJDQ0JENjhFQjIyQzM3
Qjg4NkQ4MUJERkM4QkE3N0NENzMxMjIwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QkNDQkQ2OEVCMjJDMzdCODg2
RDgxQkRGQzhCQTc3Q0Q3MzEyMjA4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E1RjJGODdEMTE3ODZGQjNGQ0FEQUEwNDM0MzFFQjAxM0NEQkFEMDAy
NDdFREI3QTY1MDJCRkZEOEI0Q0MyNC8wLzMxMzgzNjJlMzMzMjJlMzYzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczNzM3MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK6IEQwDQYJ
KoZIhvcNAQELBQADggEBAEa97s7S9Ji8oqzbv2kmOKUe2N3kHD2U51WfAg8E31HM
6mhGWKPeV3zjjIqZUeJzgR/fvTPT1QOsd89wSHoJy6ccUNAfUheBTK6iTQFg3HQ+
jriT0e4/LTn8Rz5TSE/g1qKXIopmdXfWffhm1zwEalHW6+kupqMxZtXInrEYhHXz
K9E0hje/Aipj8DgTSXUiKZk69asitZvi0GnR1Q3c+1qw+bP0l9d+cbq9Ys1Kh69B
YqBu3jpQ+yLStG83MpButbgq8emqE1iqYqrO/UjoCGQP48sROT4hrEuOTCZmcW79
5rVSflLzeJqBdtdBp2L/D2FZ+FZuX9zaj1TV+gc3sFg=
-----END CERTIFICATE-----
Generated at Sun Jan 11 19:24:07 2026 by rpki-client