This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138362e302f32342d3234203d3e203130373738.roa
File:                     3136382e3139362e3138362e302f32342d3234203d3e203130373738.roa (raw, json)
Hash identifier:          t5I+McmBu1wRdr/GTikcQBh1yzSpiEjMG1Xf6ErHYZk=
Subject key identifier:   23:1D:D9:EB:72:48:5F:E6:8B:57:FB:F0:CA:44:A8:D7:48:08:40:A5
Certificate issuer:       /CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
Certificate serial:       1578D74AF4C0880A22BE70531123E749400DB164
Authority key identifier: E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138362e302f32342d3234203d3e203130373738.roa
Signing time:             Tue 06 Jan 2026 19:44:24 +0000
ROA not before:           Tue 06 Jan 2026 19:39:24 +0000
ROA not after:            Tue 05 Jan 2027 19:44:24 +0000
asID:                     10778
IP address blocks:        168.196.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 04:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:78:d7:4a:f4:c0:88:0a:22:be:70:53:11:23:e7:49:40:0d:b1:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
        Validity
            Not Before: Jan  6 19:39:24 2026 GMT
            Not After : Jan  5 19:44:24 2027 GMT
        Subject: CN=231DD9EB72485FE68B57FBF0CA44A8D7480840A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5a:56:85:f8:73:df:01:56:ac:5d:04:42:3e:
                    4e:5f:24:72:5b:1c:25:94:34:e6:0c:79:a2:5b:5f:
                    9c:8f:c2:88:d4:9b:0f:3d:e6:7a:a2:64:56:0b:b6:
                    ef:4f:49:68:b9:01:02:3f:3b:20:0e:0f:9e:f2:bd:
                    17:c4:55:3e:3e:77:25:41:04:05:20:38:c1:e4:36:
                    a0:6c:2b:34:f5:61:a2:53:d6:ea:94:73:50:ca:84:
                    37:f8:90:6e:64:40:7a:a9:35:54:c6:d6:c3:70:c4:
                    f3:c2:bf:21:2d:55:69:b1:6b:c0:33:9c:3f:5f:58:
                    e6:16:61:cf:53:f5:8b:b1:e1:ae:58:bb:c5:f7:b5:
                    81:83:4b:b1:da:ce:d9:15:1e:ed:d5:6e:c0:0d:02:
                    a3:53:74:6d:15:e3:8a:be:35:1f:f3:54:f8:72:99:
                    be:2e:6e:c0:22:85:cd:43:fa:d6:5f:e4:9a:b4:e6:
                    bd:ff:ef:8d:35:ca:b4:ee:cb:a8:b5:ad:49:92:49:
                    2f:c5:42:64:40:74:c9:d1:e6:49:0e:f3:3b:2d:29:
                    a6:06:b3:62:51:da:00:08:f4:bc:b9:c0:25:d9:a0:
                    26:90:46:b7:7c:ba:d0:de:97:ae:63:3f:7a:77:eb:
                    77:8e:2a:fb:96:91:f8:59:ac:46:49:80:3f:1e:30:
                    82:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1D:D9:EB:72:48:5F:E6:8B:57:FB:F0:CA:44:A8:D7:48:08:40:A5
            X509v3 Authority Key Identifier:
                keyid:E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138362e302f32342d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:34:3f:9c:6c:f6:ba:e9:11:e1:de:c3:ac:fb:74:90:f0:a3:
         9a:bb:5b:60:d4:b8:0a:75:dd:99:c3:26:f1:04:ca:21:91:80:
         ab:a1:6e:73:36:27:2c:e1:ca:a9:ed:2d:83:82:ad:1d:13:16:
         93:e5:4f:44:3e:55:0a:88:3a:ee:91:e0:eb:2f:20:21:ec:1c:
         c4:cf:27:16:5a:5f:ae:bb:91:00:df:c8:da:80:4c:04:28:93:
         87:10:11:ba:76:b0:41:55:7f:37:8b:b1:2a:11:52:2b:70:83:
         b0:33:50:8e:5c:79:66:d4:7c:9e:d2:4f:71:a7:d6:33:22:dd:
         e3:93:80:f1:e9:de:39:7d:1d:dd:6c:94:f7:e7:f6:44:ba:ac:
         ef:f4:00:79:cc:c6:22:b3:d0:38:3c:54:34:bd:b9:2e:63:11:
         85:53:21:16:1f:20:2a:a6:dc:5f:c7:9b:3e:35:b1:20:dc:e2:
         2e:25:cf:c5:ff:48:a0:4f:4b:b4:65:56:00:6e:58:f4:9d:90:
         35:73:59:5f:90:e5:61:b0:85:e8:56:44:fa:a3:d3:08:9f:c0:
         df:dd:57:a1:c2:85:cc:98:a6:a7:31:57:7c:4e:cb:20:ff:56:
         d0:be:df:bb:88:51:38:d9:62:6c:2c:80:de:cb:2c:9b:aa:82:
         2c:0c:7b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:10:14 2026 by rpki-client