This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3132382e302f31382d3234203d3e203532323537.roa
File:                     3138362e33332e3132382e302f31382d3234203d3e203532323537.roa (raw, json)
Hash identifier:          M97mmY6VBtFUaJW15Eh4dUCObFmJmvw4OIRstuhAqKc=
Subject key identifier:   3A:6A:BA:8E:26:06:66:5D:5B:22:D2:DB:FF:9E:D8:71:3D:14:D9:8B
Certificate issuer:       /CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
Certificate serial:       628F1CCDB13EF882A874030DA6B65D10E55A2C6E
Authority key identifier: 63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3132382e302f31382d3234203d3e203532323537.roa
Signing time:             Tue 06 Jan 2026 20:53:04 +0000
ROA not before:           Tue 06 Jan 2026 20:48:04 +0000
ROA not after:            Tue 05 Jan 2027 20:53:04 +0000
asID:                     52257
IP address blocks:        186.33.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8f:1c:cd:b1:3e:f8:82:a8:74:03:0d:a6:b6:5d:10:e5:5a:2c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
        Validity
            Not Before: Jan  6 20:48:04 2026 GMT
            Not After : Jan  5 20:53:04 2027 GMT
        Subject: CN=3A6ABA8E2606665D5B22D2DBFF9ED8713D14D98B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:66:29:c5:99:3e:db:eb:53:b4:6f:28:52:
                    e9:3a:96:fd:ad:5a:1c:8f:c6:be:bc:4a:a0:c4:ce:
                    bb:dc:01:55:2c:62:bd:e4:27:2a:e7:75:82:7e:64:
                    46:b3:2a:76:3f:38:03:4e:c1:ee:c0:47:84:94:2f:
                    37:5a:55:57:ea:69:c0:93:4b:df:5a:07:23:ee:8a:
                    bd:93:a7:53:f8:37:83:99:3d:0f:24:4f:7b:c9:18:
                    25:a2:d4:27:bd:84:f8:6d:fe:5f:c5:14:68:5d:51:
                    30:eb:1d:54:60:91:b4:0f:45:cd:e6:d3:3b:50:89:
                    66:ee:95:9f:e3:81:62:be:d0:3f:2d:77:f6:a1:83:
                    7a:1a:76:6a:40:d8:a7:76:a9:6b:11:5d:a6:a2:73:
                    84:f0:34:a4:47:62:8f:09:a8:81:7b:33:9c:07:15:
                    17:25:33:12:59:d1:4f:a7:ad:da:76:66:ef:d2:d0:
                    4c:6e:8a:de:8e:81:8d:31:cf:15:85:57:63:27:1f:
                    c5:ea:1c:70:c1:94:99:1c:07:cf:c1:87:9a:f3:c2:
                    12:79:a7:e5:ee:ba:db:9e:9a:90:b5:35:4c:5d:78:
                    b6:82:40:c2:ec:a6:d7:2b:76:8d:56:aa:40:f4:b1:
                    08:80:a7:f6:be:55:06:9e:89:bc:eb:b7:f7:4f:6f:
                    eb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6A:BA:8E:26:06:66:5D:5B:22:D2:DB:FF:9E:D8:71:3D:14:D9:8B
            X509v3 Authority Key Identifier:
                keyid:63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/3138362e33332e3132382e302f31382d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         88:8d:34:13:bd:e3:f9:3e:ec:83:45:19:c9:a0:f7:c6:6e:e8:
         34:f2:d4:6f:23:bb:a9:55:88:11:d0:4b:41:2f:6e:ed:68:8a:
         27:31:45:b8:3b:df:77:48:1a:ce:03:29:fe:06:0c:51:28:4f:
         ef:98:54:6e:92:d0:af:e5:a3:da:44:91:33:47:52:97:b9:31:
         ef:7f:4a:4b:a8:56:a0:84:5b:d8:34:61:0b:47:33:da:33:47:
         6a:a3:d9:54:2f:75:b9:c9:e5:4f:55:d2:d9:1c:7a:8a:80:a5:
         89:d2:77:05:3c:23:72:2f:3b:b7:3f:68:5f:2c:01:c8:0e:fb:
         ba:43:b4:b2:99:3c:53:28:3b:f6:80:93:19:a8:01:8a:4d:cd:
         c5:3e:34:f9:ef:cd:c4:5d:d7:d5:1c:ff:af:bc:e5:bf:9a:d1:
         6d:3f:ce:7e:16:ae:61:9f:58:f6:f4:53:05:30:17:48:0a:ab:
         ac:b0:f0:31:72:2d:d7:6e:1b:cc:b3:4b:9e:d6:fd:6c:92:21:
         bb:57:e9:53:5a:0e:d4:0e:e7:53:e8:1d:4d:6f:d9:ef:0e:35:
         c6:3b:c5:40:8b:16:57:3a:21:c6:55:22:73:34:d1:95:99:f6:
         97:3c:76:64:d5:84:b4:43:fb:24:89:44:46:6a:56:31:8a:8f:
         3c:8f:0a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:34:41 2026 by rpki-client