This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e342e302e302f31382d3234203d3e203230323939.roa
File:                     3138362e342e302e302f31382d3234203d3e203230323939.roa (raw, json)
Hash identifier:          5E5zlRGZaNBcU5qCGynp2hONlV/TsA8N95i6fW+nXN0=
Subject key identifier:   08:E3:61:59:FC:8F:F4:DE:58:A8:F3:5D:46:AC:F9:95:9A:D2:EF:81
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       379535A77EED9D10BCC1CA77E6D0C8BB2AF392DF
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e342e302e302f31382d3234203d3e203230323939.roa
Signing time:             Tue 06 Jan 2026 19:11:12 +0000
ROA not before:           Tue 06 Jan 2026 19:06:12 +0000
ROA not after:            Tue 05 Jan 2027 19:11:12 +0000
asID:                     20299
IP address blocks:        186.4.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 03:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:95:35:a7:7e:ed:9d:10:bc:c1:ca:77:e6:d0:c8:bb:2a:f3:92:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Jan  6 19:06:12 2026 GMT
            Not After : Jan  5 19:11:12 2027 GMT
        Subject: CN=08E36159FC8FF4DE58A8F35D46ACF9959AD2EF81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:b2:12:5a:15:c7:05:41:a9:d8:43:eb:90:
                    a2:a2:99:8d:07:23:35:f5:a7:38:55:ef:bf:a6:56:
                    da:25:f5:18:27:fc:8d:b5:2e:44:1c:b2:3a:8d:c2:
                    c2:95:9a:90:57:70:4e:b6:df:3f:f6:c4:6d:4f:de:
                    db:78:c8:9e:ec:f4:9f:04:9a:df:19:ee:87:81:93:
                    65:2b:c4:69:cb:13:5e:55:2f:60:88:99:c0:2e:da:
                    e4:6d:6b:b5:25:a3:0e:ca:4f:0f:bb:53:4b:7a:10:
                    89:72:53:39:bb:c7:14:2b:39:59:fe:57:fb:93:a3:
                    c2:ac:a1:d1:be:5f:e9:9c:2a:94:a9:8b:11:85:d5:
                    66:f6:7c:93:d2:aa:80:1e:44:d4:aa:02:b7:7e:9a:
                    92:81:f8:f0:ef:fc:a8:a7:f5:47:0e:f8:cb:e8:5f:
                    0f:cd:0e:98:94:ed:28:b4:32:88:0b:54:6e:88:a7:
                    33:92:91:b8:71:03:13:06:01:0d:d3:01:96:12:58:
                    3c:49:73:53:3e:1b:ee:69:e6:ce:46:2e:cb:a4:38:
                    7b:34:be:db:d4:71:27:c6:a0:a4:b0:64:e7:e4:f2:
                    ab:05:ed:05:f5:5f:dd:0d:0d:9e:c7:9d:b5:91:ec:
                    b7:91:37:1c:57:b4:d6:7d:75:fe:36:ca:54:81:3e:
                    c5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E3:61:59:FC:8F:F4:DE:58:A8:F3:5D:46:AC:F9:95:9A:D2:EF:81
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e342e302e302f31382d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.4.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b7:c8:69:ed:79:61:75:b8:e5:da:9d:cd:1d:2a:a7:fd:42:c4:
         62:ea:56:9d:67:d1:6e:e4:4b:bd:5b:3c:a8:ae:25:a0:33:28:
         88:bf:0a:76:1f:9c:6f:83:f8:c2:69:33:fd:92:2c:f8:1f:bf:
         89:72:53:b2:23:d0:42:61:ff:91:89:c4:e4:9d:68:46:90:fe:
         58:72:27:0b:37:60:ad:3a:1b:73:9e:80:66:8f:ed:a3:6b:a8:
         ec:24:80:40:3d:9c:9e:f0:1e:16:2a:68:23:28:e9:2f:09:c9:
         c3:b1:77:d4:61:2c:ce:3c:e7:15:ea:b6:b5:9e:79:06:78:f7:
         d9:9d:b8:96:9b:90:8c:f0:96:ea:1c:51:ad:b7:3a:ea:99:52:
         af:f2:46:32:2c:47:67:a9:36:f8:53:29:ba:7c:a9:05:22:3d:
         e0:0c:fc:4c:8d:70:d4:e0:98:48:13:fe:7f:94:e1:61:f8:b9:
         48:7a:61:53:01:53:66:b6:4f:99:f9:43:f1:68:87:45:33:53:
         e5:75:34:6d:f0:62:68:96:d3:d8:5f:4b:28:f3:86:9f:b6:ba:
         e5:ac:01:d7:0c:98:f5:b1:47:a4:65:a1:7d:1b:df:41:ac:eb:
         3c:87:e2:44:81:1f:fe:1b:3a:de:5a:4f:54:93:fc:e6:d7:4b:
         68:11:2b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:34 2026 by rpki-client