This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231372e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3231372e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          Z/pgXdiLOr+rxG7N8Q/7a7f58cLKY6TZNH/Zx0gQN2c=
Subject key identifier:   01:35:D7:9D:25:9D:F2:BF:A6:C1:1A:24:21:8D:86:8C:AB:3A:46:23
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       796EE701F06A9A8DDAC8F620B1DCABD91E40D7B0
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231372e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 06 Jan 2026 19:28:27 +0000
ROA not before:           Tue 06 Jan 2026 19:23:27 +0000
ROA not after:            Tue 05 Jan 2027 19:28:27 +0000
asID:                     262189
IP address blocks:        186.1.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6e:e7:01:f0:6a:9a:8d:da:c8:f6:20:b1:dc:ab:d9:1e:40:d7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Jan  6 19:23:27 2026 GMT
            Not After : Jan  5 19:28:27 2027 GMT
        Subject: CN=0135D79D259DF2BFA6C11A24218D868CAB3A4623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:e9:92:a5:ea:60:ee:07:13:c5:00:65:01:
                    ef:3e:c7:dc:b4:d9:1f:d0:30:12:67:9b:42:d4:e5:
                    fc:e8:6b:ba:67:92:cd:07:fe:3b:f8:20:7c:46:8e:
                    d0:93:6c:53:d3:f4:37:26:89:99:89:f8:37:b2:a8:
                    ea:7b:0a:43:d3:0b:38:e8:e4:19:3e:74:1a:cc:12:
                    cb:6d:3f:1a:17:9d:e5:c4:74:68:31:10:4a:53:0c:
                    53:4c:8f:3e:cb:8c:76:84:30:f0:fd:a1:88:ca:49:
                    1d:e0:14:86:2f:1a:c4:bd:60:52:40:72:95:7a:bc:
                    a1:a0:e4:f1:7b:ad:ff:8c:24:d5:89:e3:5d:03:41:
                    c5:88:65:b4:20:84:e8:30:37:d5:73:32:cb:16:59:
                    f6:5f:d9:89:7b:6c:31:78:ad:41:8f:72:e8:d1:f6:
                    7d:3a:d3:00:63:2e:ad:95:ed:22:31:a1:6e:3a:e9:
                    be:9f:ad:ad:db:c3:7b:73:06:64:03:08:73:d5:8b:
                    5e:83:8a:40:0a:88:4a:ad:82:d5:68:cf:5a:a6:70:
                    4f:10:69:1c:76:fc:e6:2c:57:78:cb:4d:b0:13:4b:
                    27:69:82:d6:d9:8c:1d:6b:b7:f2:e7:d9:2d:c3:12:
                    a0:07:00:6e:15:c0:1b:0a:af:44:f1:7a:72:52:b7:
                    9c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:35:D7:9D:25:9D:F2:BF:A6:C1:1A:24:21:8D:86:8C:AB:3A:46:23
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231372e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:bd:26:5e:c2:ab:8b:6d:1b:04:30:b3:33:d0:ce:af:28:88:
         f6:b0:30:90:18:ea:5e:91:f6:39:72:c9:57:ac:9f:20:20:c8:
         55:63:1a:5a:16:da:ea:a3:41:f6:72:95:75:3c:f9:cd:b0:72:
         dc:88:60:6d:be:c3:ea:3c:02:b3:e9:bb:f1:a2:26:7d:75:a7:
         9b:89:8d:df:fa:43:46:c7:18:10:08:d7:91:a0:df:14:fd:cc:
         60:24:68:a0:1c:18:88:ce:b0:94:cf:64:74:f8:62:e5:d3:4d:
         2d:24:1d:23:05:e2:a7:84:81:24:17:22:7b:ef:d4:ad:f8:ac:
         9a:5f:50:c6:33:b0:a3:14:d2:a4:5b:c4:98:7e:7e:50:3e:64:
         bc:67:06:2d:94:8f:e0:d4:36:f5:f0:3a:95:56:49:56:6e:d4:
         cb:90:08:05:ac:89:cb:c2:58:55:5b:b8:97:2b:9f:5d:10:6c:
         fb:45:31:9c:29:6a:22:10:81:5a:de:aa:4d:c8:16:94:44:54:
         a6:49:8e:fb:72:c9:1d:a0:19:33:46:5c:24:27:b8:89:77:cf:
         75:73:ea:0a:3e:b8:5c:5b:ca:91:bc:87:f2:ac:d3:1b:62:fc:
         2b:63:94:ee:b7:a1:dd:bb:8f:63:b9:3e:f1:3d:14:e2:3e:7e:
         a0:8e:eb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:01:55 2026 by rpki-client