This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3234382e302f32312d3234203d3e203336313635.roa
File:                     3138362e312e3234382e302f32312d3234203d3e203336313635.roa (raw, json)
Hash identifier:          ujIgdVYRfbZ0s9mHOp0SmY1ekiLgVkrnqkscxgrPygY=
Subject key identifier:   CB:C6:D6:47:1F:3F:DF:19:12:92:DB:57:85:A7:20:43:5F:43:52:C4
Certificate issuer:       /CN=D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D
Certificate serial:       144B8592008E4EBE61898AF21BED42BA139BCEA6
Authority key identifier: D2:62:F2:FD:5E:F5:D8:E2:C8:BA:9E:70:A9:40:AA:AF:7C:82:2F:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3234382e302f32312d3234203d3e203336313635.roa
Signing time:             Tue 06 Jan 2026 19:07:44 +0000
ROA not before:           Tue 06 Jan 2026 19:02:44 +0000
ROA not after:            Tue 05 Jan 2027 19:07:44 +0000
asID:                     36165
IP address blocks:        186.1.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 05:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4b:85:92:00:8e:4e:be:61:89:8a:f2:1b:ed:42:ba:13:9b:ce:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D
        Validity
            Not Before: Jan  6 19:02:44 2026 GMT
            Not After : Jan  5 19:07:44 2027 GMT
        Subject: CN=CBC6D6471F3FDF191292DB5785A720435F4352C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:db:ab:ba:9a:72:0f:75:6c:6e:60:68:cd:99:
                    3f:50:52:0d:58:da:4d:16:fb:d6:87:04:11:1a:4d:
                    1a:4d:50:73:3e:59:d3:a7:54:95:d0:2e:18:4c:6c:
                    77:aa:b0:a0:9f:15:3f:5c:39:5b:0c:42:62:08:c6:
                    68:9c:31:fc:b5:56:97:50:cc:31:7b:c5:6d:72:29:
                    91:b7:c3:5c:11:dc:ed:c7:11:7c:8c:88:c8:28:ed:
                    18:dd:89:ca:14:36:cd:03:48:c9:20:8f:a4:5e:79:
                    90:70:6c:05:9d:f2:de:95:e5:ee:d6:84:d1:f6:e6:
                    26:0c:89:d4:a3:62:30:32:aa:97:25:5a:0b:d9:7f:
                    0a:31:7f:d2:99:5d:c7:c3:d3:00:c6:ca:55:c5:be:
                    ea:3f:f5:40:2a:df:dd:b8:a4:39:23:2c:03:2a:9f:
                    09:d9:a2:75:31:5b:8f:c0:b2:db:7c:82:58:ef:6b:
                    eb:8e:be:95:9a:5e:11:06:58:4e:c4:33:7b:e1:82:
                    a3:79:1e:de:a3:ad:9f:fc:ac:84:af:f6:2e:24:58:
                    00:5b:eb:66:b5:81:21:47:e6:b3:29:ab:a8:8f:14:
                    93:6e:fc:df:86:92:14:7d:c5:83:87:6e:d3:d4:a3:
                    03:8e:c3:d5:b5:72:91:ae:d8:3c:ad:1c:c3:a8:e2:
                    1c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C6:D6:47:1F:3F:DF:19:12:92:DB:57:85:A7:20:43:5F:43:52:C4
            X509v3 Authority Key Identifier:
                keyid:D2:62:F2:FD:5E:F5:D8:E2:C8:BA:9E:70:A9:40:AA:AF:7C:82:2F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D262F2FD5EF5D8E2C8BA9E70A940AAAF7C822F9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBD6BE8166B61450C019664938FE6B78290AC1C3C29398708D26BF9A6D39C22C/0/3138362e312e3234382e302f32312d3234203d3e203336313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:c3:48:6e:c8:65:57:22:88:5d:f7:49:71:59:e5:c2:48:7e:
         90:e4:42:b5:3b:dc:8b:2c:45:e5:88:31:cd:c5:ba:aa:2b:f4:
         91:28:92:f2:25:49:9c:26:74:10:85:03:cf:f6:96:c7:6b:05:
         4e:d0:f3:5b:67:ba:3a:b4:69:21:25:b2:01:ce:ce:39:e8:73:
         e5:ac:db:9c:ba:c3:8e:73:37:98:68:c0:b8:5c:c9:7a:91:3b:
         2d:61:f9:b4:d8:83:bf:e9:af:0f:77:8b:e2:d2:93:cb:66:06:
         56:71:fe:ad:ef:4c:a3:10:2b:ad:87:bc:b1:ff:58:90:c0:14:
         08:b0:0f:23:71:d6:67:b7:c1:e6:6b:bd:cd:a4:31:42:e1:99:
         19:56:ce:5c:cf:72:6c:76:ab:cb:f3:cc:a0:60:0a:97:b8:7c:
         c9:35:e9:68:a4:40:a4:12:83:08:26:02:dc:b1:96:ed:24:64:
         e3:cd:f6:8a:a5:fd:6c:83:b0:b2:c0:ff:a1:86:77:ad:20:0d:
         ab:62:1d:2b:eb:84:cb:46:72:1f:bd:97:d1:0b:cd:8c:55:6a:
         67:c4:1b:6c:07:db:0c:69:dd:ed:32:7f:64:01:9f:96:7b:f0:
         42:53:59:f3:1d:db:69:62:09:3d:b9:16:3f:f7:f5:ae:3d:ee:
         7e:de:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:12:32 2026 by rpki-client