This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e31302e302f32332d3234203d3e203238303336.roa
File:                     3138362e33322e31302e302f32332d3234203d3e203238303336.roa (raw, json)
Hash identifier:          A6QixeQmksZbb2T83yntBiSdoCLOiiI5ttwB/cgA6Js=
Subject key identifier:   65:0A:57:5A:DE:B6:4F:07:28:E8:AE:D8:57:26:F6:7C:EA:9C:1E:2A
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       CE1D2495F3426A87240AF9ADEFC503FD885529
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e31302e302f32332d3234203d3e203238303336.roa
Signing time:             Tue 06 Jan 2026 19:11:15 +0000
ROA not before:           Tue 06 Jan 2026 19:06:15 +0000
ROA not after:            Tue 05 Jan 2027 19:11:15 +0000
asID:                     28036
IP address blocks:        186.32.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ce:1d:24:95:f3:42:6a:87:24:0a:f9:ad:ef:c5:03:fd:88:55:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Jan  6 19:06:15 2026 GMT
            Not After : Jan  5 19:11:15 2027 GMT
        Subject: CN=650A575ADEB64F0728E8AED85726F67CEA9C1E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a8:9b:ed:a0:47:1a:15:07:99:b5:d3:30:f9:
                    2a:d1:0a:14:dd:0e:0f:88:e8:04:81:fc:62:44:b7:
                    75:27:a2:8a:be:09:cf:8c:74:06:27:d0:ac:20:92:
                    0c:4e:f7:96:6c:19:da:5b:d1:43:8a:f4:09:8a:75:
                    a5:26:c4:c7:a1:5e:70:c9:3f:06:88:03:42:7c:71:
                    1b:76:48:3b:7c:2e:c3:e4:a3:00:86:c6:13:71:8f:
                    f8:d4:05:a6:3e:39:32:da:14:a7:b4:b9:f1:8a:b3:
                    f1:48:a9:22:cf:21:85:f4:b2:ab:67:31:9a:26:fa:
                    7d:a1:68:27:c6:01:5f:a4:68:e6:a5:0a:b8:78:27:
                    37:1c:3b:e2:c0:f0:22:8c:f9:c6:ac:de:53:c1:cf:
                    3d:d7:b0:82:58:0d:c0:b2:22:81:33:93:f8:07:42:
                    0a:50:61:46:b0:15:2a:64:c7:16:e3:fc:41:5c:19:
                    eb:44:1c:0d:e6:4a:24:7c:3f:29:04:56:44:c3:ab:
                    01:a5:64:e5:21:89:76:f4:e2:50:56:4a:d3:a6:7b:
                    b1:37:c6:05:57:b8:2d:32:a1:d9:75:9f:ba:25:ba:
                    9c:40:fb:b2:01:af:12:aa:99:3f:72:3d:39:a0:04:
                    8f:c3:8d:d9:84:fb:45:6b:79:bb:90:72:69:cb:84:
                    19:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0A:57:5A:DE:B6:4F:07:28:E8:AE:D8:57:26:F6:7C:EA:9C:1E:2A
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e31302e302f32332d3234203d3e203238303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d4:37:d8:d4:2b:94:d6:18:9c:ed:2a:89:8c:98:f2:6f:77:b1:
         cf:79:7d:70:52:b4:5a:5d:6f:08:6c:59:61:3a:a0:80:27:64:
         fb:3d:e5:39:f1:da:33:1e:0b:de:ae:ae:21:b2:d6:16:c9:ab:
         29:8a:34:8a:41:cd:b5:33:70:78:81:e5:94:31:66:a3:40:13:
         a8:dc:33:58:04:94:ad:53:b2:cb:f5:f8:eb:ab:2c:f2:29:7a:
         b3:54:28:40:1a:ef:18:34:ee:fd:5d:dd:8d:52:69:56:5e:c1:
         a0:91:86:95:41:1c:8a:b8:db:b2:68:6e:f6:d2:2b:0b:88:89:
         84:9b:ae:60:80:d2:93:73:67:56:26:53:a4:d7:eb:0a:48:cd:
         19:87:30:95:3d:a6:79:b6:5c:44:57:91:15:5a:59:e0:f2:a8:
         c1:cf:64:0e:2e:fb:d3:e4:8d:d2:cc:d7:21:f2:1f:a4:9c:d0:
         47:66:f4:20:be:4e:80:6f:29:3a:3d:7a:eb:e5:29:a6:d4:0e:
         76:f8:b6:ac:d3:59:13:13:cb:cc:88:86:76:a3:f4:60:48:d2:
         87:63:b8:a8:bf:2c:24:86:da:4f:72:b5:f7:ba:d8:fa:a8:08:
         05:97:5e:07:ee:26:8d:48:b8:46:14:d4:c2:c9:dd:d4:60:71:
         23:12:8b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:28:34 2026 by rpki-client