This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3138362e33322e3234302e302f32312d3231203d3e203230323939.roa
File:                     3138362e33322e3234302e302f32312d3231203d3e203230323939.roa (raw, json)
Hash identifier:          XWaIneXsGLcYDq5LsMNDPMSPEE/osL6USR8tdPjS0Tg=
Subject key identifier:   64:3C:95:29:1C:31:73:1F:63:4A:61:2C:39:B0:15:55:2E:09:83:BD
Certificate issuer:       /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial:       1184BBEB24862F5FC9AC4E44F5D4CF817A4DDE76
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3138362e33322e3234302e302f32312d3231203d3e203230323939.roa
Signing time:             Tue 06 Jan 2026 19:41:36 +0000
ROA not before:           Tue 06 Jan 2026 19:36:36 +0000
ROA not after:            Tue 05 Jan 2027 19:41:36 +0000
asID:                     20299
IP address blocks:        186.32.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 07:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:84:bb:eb:24:86:2f:5f:c9:ac:4e:44:f5:d4:cf:81:7a:4d:de:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
        Validity
            Not Before: Jan  6 19:36:36 2026 GMT
            Not After : Jan  5 19:41:36 2027 GMT
        Subject: CN=643C95291C31731F634A612C39B015552E0983BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:4a:a8:ff:8c:6c:8a:64:91:ce:ff:47:c6:
                    6e:ee:30:1d:24:c6:ce:98:76:79:6a:51:8a:55:ad:
                    ab:61:19:68:69:eb:9c:17:49:60:8c:27:30:27:5c:
                    d0:05:78:67:01:e6:15:99:55:26:75:b5:f2:39:50:
                    b1:96:8f:c0:5a:d8:c5:26:4d:e4:e3:52:03:fb:6b:
                    c4:5b:71:2e:2f:45:ea:ee:15:c7:af:5b:00:63:43:
                    4c:1d:57:bf:f2:06:2c:5d:6a:5f:e6:7d:12:0c:0b:
                    67:a7:47:ad:be:84:72:bc:e8:49:e5:6c:e8:0b:21:
                    64:68:56:4d:6d:41:30:d5:aa:9a:20:c9:74:b7:68:
                    3a:3e:bf:3d:dc:5d:1f:9c:91:f0:04:a4:33:34:41:
                    db:bc:66:27:68:78:e2:28:cf:cd:5f:12:ed:55:cd:
                    1b:fd:a9:c6:94:d1:1d:9c:0b:86:89:65:3e:d5:75:
                    04:59:e2:04:b3:e6:16:bf:60:ce:1f:97:ce:4c:df:
                    7a:60:60:7e:66:50:dc:e3:66:f7:76:2e:fa:03:56:
                    00:b4:c4:a2:4f:02:4e:36:72:05:b4:26:01:69:c1:
                    a3:3f:08:2f:a3:52:28:76:a3:37:3f:f0:df:3f:61:
                    27:e1:51:1f:f7:e6:b5:3f:a8:b0:15:f0:bd:c9:6a:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3C:95:29:1C:31:73:1F:63:4A:61:2C:39:B0:15:55:2E:09:83:BD
            X509v3 Authority Key Identifier:
                keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3138362e33322e3234302e302f32312d3231203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:9d:f2:f3:b8:32:fa:eb:c6:8f:3c:c4:34:dc:ec:5c:3c:c4:
         bd:e2:34:0f:8d:f1:e3:b4:92:1f:9e:d7:f3:6b:20:87:b5:dc:
         c3:f6:28:5f:ce:31:d5:11:8c:c3:e4:e6:b9:3e:02:d9:17:e6:
         28:dd:5d:fd:2d:22:5b:af:2e:40:73:06:9c:9f:e5:7a:25:c4:
         d0:c5:98:58:af:38:33:54:11:c8:df:ad:9e:1f:0f:31:d4:a0:
         e8:01:9f:5e:4f:d3:0d:b4:64:ef:98:bf:ea:c5:0c:2c:95:63:
         c3:b5:84:b5:06:10:ce:76:a6:36:7b:85:d0:71:b8:3b:1e:4c:
         86:4d:c9:d1:f4:2c:ba:12:40:96:33:55:0b:c3:48:ea:fb:64:
         ec:24:e0:32:fe:4a:be:e8:39:59:a1:d7:0a:49:61:d4:fd:27:
         a5:2e:8d:ba:e5:7f:18:50:db:01:94:e8:85:59:de:d7:55:8e:
         a0:90:74:3a:46:92:eb:95:68:a6:30:5a:a4:c0:42:77:75:e8:
         5e:d2:9d:46:03:04:89:72:e7:75:00:e6:00:b1:23:d8:b1:e7:
         36:73:98:00:8e:e8:ab:27:9d:8a:72:21:97:ae:36:9b:47:dd:
         35:f3:0e:d7:27:72:35:d4:67:ba:6a:2b:e4:46:b9:f5:75:4c:
         c1:33:a9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:51 2026 by rpki-client