This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3138362e32372e3132382e302f31372d3234203d3e203130323939.roa
File:                     3138362e32372e3132382e302f31372d3234203d3e203130323939.roa (raw, json)
Hash identifier:          xu/SXA+F6VEGX1/Uyc1vB0KorNRqDf7LZM8OUE+ifYI=
Subject key identifier:   41:6E:61:CD:15:9F:7B:12:95:C4:92:49:05:EA:40:47:67:AA:A7:D3
Certificate issuer:       /CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
Certificate serial:       5F108466FD691D20F35E03244375884A51E111AF
Authority key identifier: 9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3138362e32372e3132382e302f31372d3234203d3e203130323939.roa
Signing time:             Tue 06 Jan 2026 19:01:16 +0000
ROA not before:           Tue 06 Jan 2026 18:56:16 +0000
ROA not after:            Tue 05 Jan 2027 19:01:16 +0000
asID:                     10299
IP address blocks:        186.27.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:10:84:66:fd:69:1d:20:f3:5e:03:24:43:75:88:4a:51:e1:11:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
        Validity
            Not Before: Jan  6 18:56:16 2026 GMT
            Not After : Jan  5 19:01:16 2027 GMT
        Subject: CN=416E61CD159F7B1295C4924905EA404767AAA7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1c:df:06:9f:7e:cf:92:31:a4:d3:ea:08:3f:
                    b5:ba:7b:41:9a:b6:ef:e5:bb:b6:ff:e5:0c:a0:0d:
                    7f:c0:f5:40:20:22:aa:52:ae:60:58:61:54:8d:ba:
                    1d:b2:b2:68:19:74:5a:54:7b:d6:5e:f4:56:64:8d:
                    41:dd:34:dc:09:ef:6b:0c:2c:06:5e:77:24:7a:4a:
                    42:b1:0a:3c:68:6c:08:26:2a:12:5f:6e:9d:4f:24:
                    ea:94:79:b4:df:b2:80:e0:95:1f:7d:98:db:b8:b1:
                    31:77:b0:c6:a5:75:75:72:5e:40:4b:d1:75:fd:d7:
                    6c:5f:50:ad:f4:f5:62:7b:fa:99:bf:c3:46:f1:5d:
                    0d:59:a5:2d:f3:92:81:66:42:4d:35:0b:3b:db:ba:
                    bf:d9:f2:ee:7c:1a:59:be:73:40:ce:1a:26:ac:1c:
                    24:8d:6d:8b:90:ba:69:c7:7a:61:b2:3c:6e:e5:e8:
                    03:bc:ee:db:f0:33:df:bd:c5:13:44:b8:3e:3a:8e:
                    a5:41:6d:8d:29:cb:97:5a:e5:66:72:5e:d3:0b:36:
                    92:49:3b:54:98:6b:c1:39:fa:a5:d6:28:7f:d2:52:
                    f4:a3:c7:9a:0e:da:86:f5:33:02:3d:1c:89:a6:04:
                    d6:cf:11:3d:be:5e:20:0f:e0:1a:0c:36:47:ba:a3:
                    20:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6E:61:CD:15:9F:7B:12:95:C4:92:49:05:EA:40:47:67:AA:A7:D3
            X509v3 Authority Key Identifier:
                keyid:9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3138362e32372e3132382e302f31372d3234203d3e203130323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.27.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0c:6d:ae:7d:95:9b:cc:2a:a0:ac:52:58:ad:e6:4e:87:af:8c:
         21:53:1a:6e:e2:5f:9c:49:8f:00:14:35:02:01:a0:46:b2:6b:
         13:f2:89:bf:e2:75:fa:88:29:cf:13:ce:d8:d0:48:98:33:ca:
         f1:df:d7:8b:dc:35:bd:94:63:6b:d7:77:f6:10:14:47:38:7e:
         1e:c6:a1:db:46:6c:1b:14:1c:24:28:f3:76:34:b5:b4:4e:74:
         f5:45:d8:e1:15:db:54:69:e6:3d:cb:e5:ef:7b:08:8d:90:04:
         db:e2:a0:9a:d6:75:26:c0:b0:28:29:af:27:ff:02:23:6e:dc:
         4b:6f:0c:9f:6f:8b:95:bc:f7:a2:59:04:bc:ad:5a:02:5d:c7:
         e7:cf:7b:1c:e0:1a:aa:39:8a:4b:f7:2c:b4:0f:e8:d7:8e:fe:
         36:10:f0:b5:3b:5e:2e:23:95:e9:21:92:25:1f:3f:4f:a0:35:
         72:d1:44:3c:f1:79:80:43:69:04:44:ef:fc:97:37:d1:1c:57:
         8c:48:0c:38:36:bd:b9:bb:59:28:fc:c4:ad:cb:82:06:d7:5b:
         9d:f0:da:83:19:f2:4a:05:29:24:60:a9:d5:b3:f1:00:65:f2:
         7b:b7:69:bc:27:15:dd:91:00:b0:36:95:04:04:2a:b7:1e:24:
         13:8f:c1:73
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXxCEZv1pHSDzXgMkQ3WISlHhEa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU1NTJFREEzQkY4QTVCNkNBREM1MzNFNDAzNTM3QjZE
QzcyOTkzODAeFw0yNjAxMDYxODU2MTZaFw0yNzAxMDUxOTAxMTZaMDMxMTAvBgNV
BAMTKDQxNkU2MUNEMTU5RjdCMTI5NUM0OTI0OTA1RUE0MDQ3NjdBQUE3RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyHN8Gn37PkjGk0+oIP7W6e0Ga
tu/lu7b/5QygDX/A9UAgIqpSrmBYYVSNuh2ysmgZdFpUe9Ze9FZkjUHdNNwJ72sM
LAZedyR6SkKxCjxobAgmKhJfbp1PJOqUebTfsoDglR99mNu4sTF3sMaldXVyXkBL
0XX912xfUK309WJ7+pm/w0bxXQ1ZpS3zkoFmQk01Czvbur/Z8u58Glm+c0DOGias
HCSNbYuQumnHemGyPG7l6AO87tvwM9+9xRNEuD46jqVBbY0py5da5WZyXtMLNpJJ
O1SYa8E5+qXWKH/SUvSjx5oO2ob1MwI9HImmBNbPET2+XiAP4BoMNke6oyDTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQW5hzRWfexKVxJJJBepAR2eqp9MwHwYDVR0j
BBgwFoAUnlUu2jv4pbbK3FM+QDU3ttxymTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUMzNzk4MzFEMkFFN0E1RDU2QUY2QTkwRDlBRjkxNUZC
NjM3N0VFOUZGOUIyQTI1RkU5MDk3MDBFOEEzQzdGLzAvOUU1NTJFREEzQkY4QTVC
NkNBREM1MzNFNDAzNTM3QjZEQzcyOTkzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTU1MkVEQTNCRjhBNUI2Q0FE
QzUzM0U0MDM1MzdCNkRDNzI5OTM4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVDMzc5ODMxRDJBRTdBNUQ1NkFGNkE5MEQ5QUY5MTVGQjYzNzdFRTlG
RjlCMkEyNUZFOTA5NzAwRThBM0M3Ri8wLzMxMzgzNjJlMzIzNzJlMzEzMjM4MmUz
MDJmMzEzNzJkMzIzNDIwM2QzZTIwMzEzMDMyMzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB7obgDAN
BgkqhkiG9w0BAQsFAAOCAQEADG2ufZWbzCqgrFJYreZOh6+MIVMabuJfnEmPABQ1
AgGgRrJrE/KJv+J1+ogpzxPO2NBImDPK8d/Xi9w1vZRja9d39hAURzh+Hsah20Zs
GxQcJCjzdjS1tE509UXY4RXbVGnmPcvl73sIjZAE2+KgmtZ1JsCwKCmvJ/8CI27c
S28Mn2+Llbz3olkEvK1aAl3H5897HOAaqjmKS/cstA/o147+NhDwtTteLiOV6SGS
JR8/T6A1ctFEPPF5gENpBETv/Jc30RxXjEgMODa9ubtZKPzErcuCBtdbnfDagxny
SgUpJGCp1bPxAGXye7dpvCcV3ZEAsDaVBAQqtx4kE4/Bcw==
-----END CERTIFICATE-----
Generated at Tue Jan 13 05:13:24 2026 by rpki-client