This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e36362e3132382e302f31372d3234203d3e203134353232.roa
File:                     3138362e36362e3132382e302f31372d3234203d3e203134353232.roa (raw, json)
Hash identifier:          MXbHivAl0rS+kWo8VgKj7EkZzWWQdQjCEp+fPJQZsrw=
Subject key identifier:   36:56:C7:65:BB:9C:C5:E2:CB:E1:FB:ED:C8:CC:4C:B4:70:12:1E:BE
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       39964E4F68FE121F5607422C0A2A0DCE111704E2
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e36362e3132382e302f31372d3234203d3e203134353232.roa
Signing time:             Tue 06 Jan 2026 20:58:56 +0000
ROA not before:           Tue 06 Jan 2026 20:53:56 +0000
ROA not after:            Tue 05 Jan 2027 20:58:56 +0000
asID:                     14522
IP address blocks:        186.66.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 20:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:96:4e:4f:68:fe:12:1f:56:07:42:2c:0a:2a:0d:ce:11:17:04:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Jan  6 20:53:56 2026 GMT
            Not After : Jan  5 20:58:56 2027 GMT
        Subject: CN=3656C765BB9CC5E2CBE1FBEDC8CC4CB470121EBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:99:8e:2d:91:3f:6f:2e:74:24:80:36:13:
                    48:2e:36:0c:3d:99:ef:b3:c0:88:e8:2b:9d:d7:54:
                    1a:0a:18:94:3b:5b:b1:a2:d0:6e:b8:d6:ba:2b:43:
                    86:95:61:84:4c:7a:e3:1a:a0:dd:11:6e:65:95:dd:
                    d9:2d:86:2b:50:8c:56:8b:f5:ee:87:39:f1:78:bd:
                    be:0c:97:0b:9d:46:53:a5:47:eb:03:b3:17:ed:66:
                    fa:91:b7:df:27:32:26:79:79:98:ff:43:17:86:c9:
                    72:33:76:fb:41:e5:8d:be:e2:9d:6f:20:69:db:74:
                    74:4f:55:f2:3c:08:75:eb:71:9c:e2:7e:3c:47:69:
                    48:62:97:aa:c2:0f:ef:94:85:c4:25:39:14:f5:d0:
                    00:07:d1:50:71:d5:5e:fe:9a:b4:8f:70:c1:b9:45:
                    aa:da:ac:8b:ee:66:a6:d3:5d:a4:c2:72:31:84:3a:
                    d7:6a:ba:34:a3:43:28:fe:d0:10:2e:dc:d5:65:1a:
                    ad:04:b6:a3:5a:44:98:94:54:e2:20:49:97:aa:c1:
                    d0:3a:72:5f:85:62:8d:07:3e:16:6a:c6:d7:75:ab:
                    a3:7b:bb:b3:d9:e9:59:c8:5f:b5:ea:e6:5b:79:a6:
                    4b:4a:7e:ce:8b:27:be:4a:4e:98:dc:f3:49:b7:06:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:56:C7:65:BB:9C:C5:E2:CB:E1:FB:ED:C8:CC:4C:B4:70:12:1E:BE
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138362e36362e3132382e302f31372d3234203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.66.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         17:23:67:d2:c6:ad:b5:50:0c:d0:92:b6:43:cd:f0:9c:9f:bf:
         42:ab:96:ad:7d:61:fb:54:d6:e4:0a:f6:b9:76:fc:44:83:35:
         1a:1b:3b:f8:17:c0:b2:54:49:0e:88:c4:7d:60:dc:dd:a5:89:
         49:1d:c7:91:c0:73:5b:48:82:99:f0:b1:1c:da:48:61:5d:23:
         83:29:c6:c7:63:d5:42:ac:84:db:e1:ee:72:27:e4:07:8d:6b:
         4c:55:1e:5f:9e:4b:64:84:d4:38:b0:10:ff:93:5b:7b:ad:4c:
         9b:8c:de:b5:84:bb:c8:76:05:d0:84:64:73:52:62:95:9c:71:
         09:53:eb:4d:c8:66:3c:62:a4:a7:49:f7:a5:5c:3f:73:9b:52:
         b0:80:76:65:25:98:06:7a:21:e1:25:71:c0:3c:80:5b:07:c3:
         11:f1:c6:a8:cf:07:ca:80:de:87:09:c1:49:8d:ac:76:4c:e4:
         24:a5:66:33:55:c1:d8:6d:d7:73:2f:33:a0:33:21:99:1a:e0:
         5e:fd:96:f6:9c:3f:25:73:fe:aa:44:98:d6:de:88:a3:61:f1:
         26:45:46:60:7f:c8:1b:ca:86:70:94:00:b9:32:bc:d3:94:dd:
         c1:42:c9:7c:9a:3b:71:ae:73:bb:95:a6:c1:0d:15:3a:e9:3a:
         32:8c:cb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:10:27 2026 by rpki-client