This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138352e3132382e302f31372d3137203d3e2036333036.roa
File:                     3138312e3138352e3132382e302f31372d3137203d3e2036333036.roa (raw, json)
Hash identifier:          AYbGD2o6mm8KLIpU6EtcUFx9VoGtEhMvVzUNMzmUZGc=
Subject key identifier:   1B:A7:77:4E:B5:27:B5:43:AE:4C:BB:56:F0:F5:AA:2C:DD:C5:8A:96
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       0BCC7AD4FC406BB353A89024C1D45CF9AB5DCF4A
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138352e3132382e302f31372d3137203d3e2036333036.roa
Signing time:             Tue 06 Jan 2026 19:27:29 +0000
ROA not before:           Tue 06 Jan 2026 19:22:29 +0000
ROA not after:            Tue 05 Jan 2027 19:27:29 +0000
asID:                     6306
IP address blocks:        181.185.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:cc:7a:d4:fc:40:6b:b3:53:a8:90:24:c1:d4:5c:f9:ab:5d:cf:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan  6 19:22:29 2026 GMT
            Not After : Jan  5 19:27:29 2027 GMT
        Subject: CN=1BA7774EB527B543AE4CBB56F0F5AA2CDDC58A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c9:b7:44:22:aa:4b:ae:d2:c9:17:62:ff:7c:
                    4c:90:1d:f1:41:a5:94:08:04:35:7c:7d:a1:c1:c6:
                    41:e1:3c:a7:dc:1a:5a:74:1f:4d:ac:f8:ac:c8:06:
                    04:8b:a8:b6:12:bd:7e:fd:d1:fe:05:47:e4:c3:bd:
                    b1:70:29:84:a8:43:bf:0d:26:42:2c:3f:67:96:75:
                    e5:f8:eb:0a:d7:95:d6:b7:93:8f:6a:d4:74:c5:4f:
                    88:2f:f7:4b:14:c2:29:0a:0a:d9:21:81:11:64:5b:
                    90:52:f0:0f:24:06:9b:e3:a3:ed:ef:a2:47:90:68:
                    57:bb:ef:0e:50:b4:5f:d5:5d:a0:d5:e4:8c:74:21:
                    b3:67:5f:ff:a3:24:5b:27:60:b9:cc:de:a4:68:12:
                    0a:e2:a2:eb:ac:55:e7:41:96:92:a2:37:91:34:ca:
                    a8:68:14:d3:95:90:4a:19:a7:fe:6e:fb:6c:3c:27:
                    cf:59:27:b9:76:63:6b:48:e0:d8:f3:7e:7c:8a:06:
                    cf:f4:a3:bd:f8:6d:22:cd:f8:b8:76:09:0e:d9:7d:
                    96:77:bb:f8:bc:38:ab:94:20:0b:96:13:93:13:db:
                    15:fe:8a:32:ee:d2:af:be:20:f6:d5:b3:a4:18:39:
                    af:a9:5c:29:5b:c5:bf:96:8d:8b:76:53:a7:d0:f7:
                    ff:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A7:77:4E:B5:27:B5:43:AE:4C:BB:56:F0:F5:AA:2C:DD:C5:8A:96
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138352e3132382e302f31372d3137203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.185.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4e:b2:c4:ab:f9:93:c0:6a:42:b7:85:cc:28:9e:61:58:c4:87:
         49:9c:4d:71:1b:0a:90:69:54:e1:b6:6c:94:fa:9a:af:c8:65:
         10:92:34:60:13:dc:0f:7d:f1:5a:a8:b1:35:b5:18:a1:e0:b4:
         d1:7b:30:04:3f:17:ba:40:34:b2:de:e6:98:78:7f:3e:f1:f7:
         cf:6b:56:bc:c5:b2:52:b5:0f:18:17:c5:45:f2:ba:09:51:98:
         e7:64:e0:fc:12:8f:29:30:10:37:8b:44:b8:d5:01:e1:4c:76:
         db:fe:87:b2:df:8d:32:34:4d:c6:84:48:1b:67:a2:17:ba:3a:
         9d:52:2f:7e:d0:d7:72:31:3c:61:b3:c6:38:81:23:c2:ce:13:
         35:5b:93:d9:e3:33:a2:1c:e9:ed:a0:8c:31:e8:15:ba:09:50:
         ae:b8:95:bb:67:52:9c:11:5c:0d:52:70:c4:e5:e8:1b:c6:69:
         01:1f:ca:f2:9a:86:55:39:35:98:de:5b:f2:be:9e:f1:16:04:
         53:1f:24:07:f8:39:26:93:57:5d:b6:41:82:5e:aa:a8:e2:71:
         2c:6b:3f:87:8e:bc:b8:b0:87:06:d7:4c:d4:7a:a8:0d:79:e3:
         0b:b7:f6:89:59:4a:bb:d3:25:7c:a5:14:a3:ee:20:18:8a:7d:
         49:60:b4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:50:33 2026 by rpki-client