This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231392e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3231392e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          ueKRuib/9ldkCQyPg/Vfqavr+lHKVp17JvliqF1hhVM=
Subject key identifier:   E8:C8:05:F2:5F:61:2D:D4:05:76:F4:90:31:15:A8:74:12:DD:3C:80
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       09A885B3B58664F6E3DEA8EDB64A2E927E5FB94A
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231392e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 06 Jan 2026 19:28:27 +0000
ROA not before:           Tue 06 Jan 2026 19:23:27 +0000
ROA not after:            Tue 05 Jan 2027 19:28:27 +0000
asID:                     262189
IP address blocks:        186.1.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 11:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a8:85:b3:b5:86:64:f6:e3:de:a8:ed:b6:4a:2e:92:7e:5f:b9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Jan  6 19:23:27 2026 GMT
            Not After : Jan  5 19:28:27 2027 GMT
        Subject: CN=E8C805F25F612DD40576F4903115A87412DD3C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:17:c1:8f:d4:52:29:88:2a:4b:37:9a:72:8f:
                    fa:56:72:73:46:5e:55:54:a0:c2:7b:14:36:ff:6b:
                    0d:6f:ce:ca:c8:0c:ac:d0:49:d2:d2:d5:73:8b:c0:
                    57:f1:63:f4:a3:f9:f3:4d:76:68:35:a6:16:da:9b:
                    82:95:3f:b5:f2:60:93:22:34:05:eb:d5:a1:47:77:
                    3f:4d:87:f0:b1:6f:d0:55:4c:b1:9b:4a:6f:14:68:
                    9c:88:1a:58:49:55:62:e7:eb:25:00:2a:b2:a9:ac:
                    91:98:51:a7:39:09:1d:28:66:db:3f:1f:5a:b4:2e:
                    7b:8d:bd:cf:c8:7c:ff:6d:7f:64:85:70:91:d6:a1:
                    fd:3e:38:b1:02:a8:19:23:a9:49:40:fc:24:c1:bb:
                    82:a6:22:7d:a2:16:65:7d:38:fb:08:67:a5:de:bc:
                    c6:1c:fa:ee:06:54:9c:d3:1d:05:11:f0:af:e8:d3:
                    d0:d1:37:85:72:97:f9:b3:d7:46:4a:42:d8:93:4d:
                    dc:90:7e:6f:1e:54:0b:4d:f9:38:bd:44:44:f1:2d:
                    d4:46:dd:5d:69:c2:fb:47:41:c5:d8:55:94:bd:90:
                    74:c1:06:2d:36:0c:34:01:19:7e:74:78:f2:d6:f6:
                    38:f6:6d:2f:3f:da:cd:ff:58:0f:1f:42:a0:53:a8:
                    dc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C8:05:F2:5F:61:2D:D4:05:76:F4:90:31:15:A8:74:12:DD:3C:80
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231392e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:45:f5:a0:49:0b:96:1f:d9:dc:e8:bd:0e:c4:ca:ac:19:58:
         b3:e6:fc:09:f1:79:1c:12:ab:a5:bb:9a:3a:d9:09:62:af:cd:
         bc:28:7b:62:d1:4e:41:b0:12:4f:90:a8:73:da:51:23:f4:05:
         1c:45:13:0a:73:4a:99:e9:77:8d:3f:17:62:7d:d6:e4:1e:4f:
         30:3b:d3:b4:42:9c:01:e5:99:cc:db:4b:01:6d:9b:5b:cf:85:
         38:a0:7c:64:87:50:07:e6:f4:0a:e2:cd:55:57:ec:01:93:bc:
         2f:90:ad:21:4d:d9:78:8c:ba:a6:2f:52:d6:36:d1:a9:20:14:
         5c:fc:98:cc:6b:1d:99:3d:87:07:95:96:8b:46:f0:6d:19:1c:
         94:ba:3e:9a:d1:3c:7c:91:36:73:17:80:c5:c8:45:d8:af:71:
         88:e3:cc:90:ca:c9:c4:ee:ce:e3:7f:eb:a6:b9:26:30:b1:e3:
         96:b0:0f:fe:65:d1:22:ee:6b:15:b4:8b:5b:f5:8d:55:9a:a4:
         6d:90:f9:03:e0:d2:5c:5a:ff:f5:26:d2:a7:cc:d9:7a:3b:b0:
         a6:86:bd:18:18:04:11:49:17:c7:a1:5e:ed:0e:a6:18:f7:c4:
         db:5f:01:1b:ba:84:88:83:43:01:f2:e6:1f:fe:87:d7:18:01:
         5c:6c:d3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:10:46 2026 by rpki-client