This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3138362e31342e302e302f31362d3234203d3e203231383236.roa
File:                     3138362e31342e302e302f31362d3234203d3e203231383236.roa (raw, json)
Hash identifier:          jltOQvugsYueTi4C6vqBXGZhnDWDsDB+DiK0uoW6WVQ=
Subject key identifier:   9F:37:C7:99:A8:B9:0B:16:38:F6:0F:8C:82:02:FD:CE:A0:03:40:96
Certificate issuer:       /CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
Certificate serial:       241F3B8CF8DBC2120823829E54BE6DF55C18D58C
Authority key identifier: 16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3138362e31342e302e302f31362d3234203d3e203231383236.roa
Signing time:             Tue 06 Jan 2026 19:37:42 +0000
ROA not before:           Tue 06 Jan 2026 19:32:42 +0000
ROA not after:            Tue 05 Jan 2027 19:37:42 +0000
asID:                     21826
IP address blocks:        186.14.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1f:3b:8c:f8:db:c2:12:08:23:82:9e:54:be:6d:f5:5c:18:d5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165E0F133EF8A6DF2ECCBFDD6E915964893A4324
        Validity
            Not Before: Jan  6 19:32:42 2026 GMT
            Not After : Jan  5 19:37:42 2027 GMT
        Subject: CN=9F37C799A8B90B1638F60F8C8202FDCEA0034096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:71:24:90:88:05:88:94:e9:a6:d2:7f:4c:5e:
                    99:9f:99:4d:ec:8b:15:a4:be:14:2e:04:a0:71:8f:
                    b8:de:ac:2f:2f:d7:70:b2:2f:1a:c8:51:e5:a4:e8:
                    7b:9b:e2:dc:c1:5c:de:7d:64:ef:f8:a6:61:b2:33:
                    ac:ea:15:0d:17:f0:64:0e:24:0a:71:59:ab:a7:23:
                    1e:77:d8:ed:24:3d:2c:62:64:b3:65:f4:1c:75:7c:
                    d8:84:fc:b5:59:c4:c7:44:e0:96:34:a7:b0:db:16:
                    42:95:74:b9:8d:9a:0e:fc:a9:86:61:ee:70:3b:b3:
                    a5:29:4b:db:f9:41:e4:21:1f:82:b1:d7:35:18:ca:
                    5f:54:51:30:39:9c:7f:c0:4e:8f:04:bf:44:a2:3b:
                    78:85:c3:b6:17:7b:5c:58:51:7b:64:b8:69:a5:58:
                    52:51:f3:be:ef:93:8c:86:ce:76:23:28:e1:75:b6:
                    1b:15:0c:9d:7b:c1:a8:b5:9c:70:b1:7c:2d:12:51:
                    ad:6d:44:e6:de:f4:2e:52:1f:71:6f:cc:fd:f2:12:
                    70:ea:66:88:7f:74:90:32:6a:17:d0:5e:f4:c8:e2:
                    68:19:02:2d:4e:dc:14:55:e0:bb:04:28:71:b3:50:
                    3b:84:8c:29:5d:e4:4f:57:34:a5:ec:60:ef:d6:60:
                    86:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:37:C7:99:A8:B9:0B:16:38:F6:0F:8C:82:02:FD:CE:A0:03:40:96
            X509v3 Authority Key Identifier:
                keyid:16:5E:0F:13:3E:F8:A6:DF:2E:CC:BF:DD:6E:91:59:64:89:3A:43:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/165E0F133EF8A6DF2ECCBFDD6E915964893A4324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFF9744E64C56E138AEC517D910F61D895CAD645CCF21CB7C16A278D5C2F944C/0/3138362e31342e302e302f31362d3234203d3e203231383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.14.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1f:6b:90:81:37:a9:56:26:d3:ee:f2:be:be:86:55:7a:32:bd:
         bc:da:69:07:8a:d8:d0:59:b5:0e:45:3f:bc:8c:73:20:07:a2:
         ff:aa:16:de:93:c1:0c:8b:da:4a:9d:6f:bd:a2:e4:7a:13:14:
         5a:20:38:7c:bd:18:7d:4e:94:16:93:6e:74:f7:2e:42:97:64:
         d2:d9:85:86:eb:5f:95:61:e8:50:5f:00:1f:78:ea:a6:5a:2f:
         87:69:e3:85:27:a9:81:f4:01:03:c9:39:fc:9a:d0:6a:11:c6:
         b4:f6:f7:6f:dd:c9:5c:1f:c4:48:70:a0:b9:45:73:f1:5c:70:
         f4:eb:0b:39:ae:96:af:bd:22:2e:cd:7b:ef:bb:c1:fd:6c:e5:
         ec:44:27:a9:d2:32:fe:e3:d4:a5:30:72:a3:c6:26:be:da:7d:
         44:1c:f8:0e:6e:f5:19:50:6a:7a:33:3a:06:83:d2:56:3d:bc:
         1b:85:6a:03:82:82:69:70:54:fa:d0:20:c1:f4:bf:55:23:13:
         46:00:2f:9d:f2:1a:b4:93:e9:38:d1:27:a7:ab:e0:e0:24:30:
         c8:07:98:2b:9e:5e:d5:6d:71:d1:07:a1:bc:ba:2f:ec:58:de:
         f3:6f:ba:22:7b:9a:71:a7:f6:f6:9e:a1:8b:b5:6b:ef:c0:17:
         d2:72:36:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:22:14 2026 by rpki-client