This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/3138362e3134382e3230302e302f32312d3234203d3e203532333530.roa
File:                     3138362e3134382e3230302e302f32312d3234203d3e203532333530.roa (raw, json)
Hash identifier:          gj7mdmlG0KY0B6SdkX6V2ZISubEkbJtJbVzLX74lCfA=
Subject key identifier:   60:52:67:A0:0F:56:09:70:6E:52:DA:A2:DE:B5:64:67:60:63:51:C9
Certificate issuer:       /CN=CE1FC93A3F20326BE83B6424F678E2EA6714433C
Certificate serial:       3A47EB2C148B39E70F6103B99DE13F9F90A4CE9C
Authority key identifier: CE:1F:C9:3A:3F:20:32:6B:E8:3B:64:24:F6:78:E2:EA:67:14:43:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/3138362e3134382e3230302e302f32312d3234203d3e203532333530.roa
Signing time:             Tue 06 Jan 2026 19:07:53 +0000
ROA not before:           Tue 06 Jan 2026 19:02:53 +0000
ROA not after:            Tue 05 Jan 2027 19:07:53 +0000
asID:                     52350
IP address blocks:        186.148.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:47:eb:2c:14:8b:39:e7:0f:61:03:b9:9d:e1:3f:9f:90:a4:ce:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1FC93A3F20326BE83B6424F678E2EA6714433C
        Validity
            Not Before: Jan  6 19:02:53 2026 GMT
            Not After : Jan  5 19:07:53 2027 GMT
        Subject: CN=605267A00F5609706E52DAA2DEB56467606351C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:a9:ca:f1:4a:20:06:a5:e2:36:4f:cd:be:
                    a2:6a:0b:c2:58:e4:50:0a:4a:8b:17:cc:b5:bc:bf:
                    96:9e:0a:d6:21:73:0b:cc:95:b0:0d:a0:43:06:87:
                    a3:76:60:e2:7f:b7:fb:ae:09:db:fc:94:a3:24:f1:
                    c9:f7:9a:73:cb:59:46:84:83:a1:86:8f:f6:0a:03:
                    28:14:db:88:c0:01:7b:e5:19:20:cf:5a:d5:d9:3b:
                    e3:19:ab:f8:7e:a4:a5:c4:4a:43:6b:d7:06:07:42:
                    22:db:b5:44:15:76:fd:fa:76:41:e7:18:73:22:b8:
                    ed:05:04:b7:c5:de:3c:cd:5b:2e:03:3f:46:4c:3c:
                    83:8a:31:dd:81:18:d2:88:fe:e6:20:8a:f2:d2:8f:
                    bf:52:63:6a:82:23:9a:d4:c4:cf:17:b6:29:ec:7d:
                    f0:4b:0f:94:bb:38:f3:cf:b5:78:87:39:ae:af:0a:
                    43:b9:bb:d0:be:fa:f0:ef:e8:20:2c:e6:f4:2d:50:
                    6e:12:48:4a:5c:f9:4c:0f:db:8d:71:53:90:41:35:
                    72:72:22:3f:9a:5f:bb:e0:d1:50:18:ee:88:84:e2:
                    e9:22:38:2f:74:e9:f8:90:b7:fa:05:51:4f:32:e4:
                    b5:b7:f9:46:90:6f:7c:a0:60:c0:0b:71:d1:94:a6:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:52:67:A0:0F:56:09:70:6E:52:DA:A2:DE:B5:64:67:60:63:51:C9
            X509v3 Authority Key Identifier:
                keyid:CE:1F:C9:3A:3F:20:32:6B:E8:3B:64:24:F6:78:E2:EA:67:14:43:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/3138362e3134382e3230302e302f32312d3234203d3e203532333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:2b:61:1c:8a:f9:3f:a6:c2:b3:ab:f9:e7:d2:0c:50:67:68:
         28:39:27:6d:53:cc:92:b0:17:c0:2a:74:5c:bc:7c:69:73:fb:
         0b:28:8c:8a:60:6a:75:7c:27:9a:62:c6:5b:5a:80:23:97:87:
         9f:83:ca:55:f8:93:6e:33:7d:05:06:35:69:af:69:ab:08:64:
         65:cf:11:c7:e1:22:92:56:6c:7a:a5:a2:de:5e:52:8b:12:33:
         78:17:3d:d0:b5:a5:43:bb:b2:f8:55:66:e1:e2:04:4b:c1:83:
         9d:5c:b6:0c:e8:ea:7c:67:ee:b7:6b:40:86:76:b5:3f:80:9a:
         9a:fa:c9:b2:ea:09:4f:ac:1d:b5:ca:3a:a3:76:a7:c4:1b:f5:
         1b:9b:b3:58:9d:b3:40:6c:d7:3b:d0:1c:d1:2a:c0:9b:4a:7d:
         5b:e3:79:e2:de:52:fa:ff:ae:77:60:83:93:f6:05:dd:14:bc:
         f8:e2:5e:77:9b:2c:97:d1:39:c1:b6:e6:42:e2:9a:42:5b:b4:
         f7:77:3a:6d:13:9d:70:3a:d0:ef:c2:e2:18:5d:00:d6:12:61:
         c8:6a:78:ad:dd:3d:89:0a:c8:21:20:e0:53:d5:a4:d9:94:b0:
         fc:95:8e:aa:e9:b1:98:1b:0a:c5:32:49:13:b5:18:22:76:fb:
         55:ed:13:de
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOkfrLBSLOecPYQO5neE/n5CkzpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxRkM5M0EzRjIwMzI2QkU4M0I2NDI0RjY3OEUyRUE2
NzE0NDMzQzAeFw0yNjAxMDYxOTAyNTNaFw0yNzAxMDUxOTA3NTNaMDMxMTAvBgNV
BAMTKDYwNTI2N0EwMEY1NjA5NzA2RTUyREFBMkRFQjU2NDY3NjA2MzUxQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zKnK8UogBqXiNk/NvqJqC8JY
5FAKSosXzLW8v5aeCtYhcwvMlbANoEMGh6N2YOJ/t/uuCdv8lKMk8cn3mnPLWUaE
g6GGj/YKAygU24jAAXvlGSDPWtXZO+MZq/h+pKXESkNr1wYHQiLbtUQVdv36dkHn
GHMiuO0FBLfF3jzNWy4DP0ZMPIOKMd2BGNKI/uYgivLSj79SY2qCI5rUxM8Xtins
ffBLD5S7OPPPtXiHOa6vCkO5u9C++vDv6CAs5vQtUG4SSEpc+UwP241xU5BBNXJy
Ij+aX7vg0VAY7oiE4ukiOC906fiQt/oFUU8y5LW3+UaQb3ygYMALcdGUpm2RAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUYFJnoA9WCXBuUtqi3rVkZ2BjUckwHwYDVR0j
BBgwFoAUzh/JOj8gMmvoO2Qk9nji6mcUQzwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NjdENEY0MkNDM0FENkFERkMzNkE0ODU3RTREOEEyOUU3
MjJBNjkwOUE4NTNGMEU2QzExOEUwMzcwQTFBOTZGLzAvQ0UxRkM5M0EzRjIwMzI2
QkU4M0I2NDI0RjY3OEUyRUE2NzE0NDMzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRTFGQzkzQTNGMjAzMjZCRTgz
QjY0MjRGNjc4RTJFQTY3MTQ0MzNDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODY3RDRGNDJDQzNBRDZBREZDMzZBNDg1N0U0RDhBMjlFNzIyQTY5MDlB
ODUzRjBFNkMxMThFMDM3MEExQTk2Ri8wLzMxMzgzNjJlMzEzNDM4MmUzMjMwMzAy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMyMzMzNTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDupTI
MA0GCSqGSIb3DQEBCwUAA4IBAQBYK2Ecivk/psKzq/nn0gxQZ2goOSdtU8ySsBfA
KnRcvHxpc/sLKIyKYGp1fCeaYsZbWoAjl4efg8pV+JNuM30FBjVpr2mrCGRlzxHH
4SKSVmx6paLeXlKLEjN4Fz3QtaVDu7L4VWbh4gRLwYOdXLYM6Op8Z+63a0CGdrU/
gJqa+smy6glPrB21yjqjdqfEG/Ubm7NYnbNAbNc70BzRKsCbSn1b43ni3lL6/653
YIOT9gXdFLz44l53myyX0TnBtuZC4ppCW7T3dzptE51wOtDvwuIYXQDWEmHIanit
3T2JCsghIOBT1aTZlLD8lY6q6bGYGwrFMkkTtRgidvtV7RPe
-----END CERTIFICATE-----
Generated at Mon Jan 12 02:06:49 2026 by rpki-client