This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3138362e36342e302f31382d3138203d3e2036333036.roa
File:                     3138362e3138362e36342e302f31382d3138203d3e2036333036.roa (raw, json)
Hash identifier:          TqsV0JaPyG6IxMI1vNJDTZGoirWzu3O9aWWgKfS/GT8=
Subject key identifier:   19:17:79:DD:98:EB:8E:05:62:47:FB:CC:86:56:DA:FF:93:B8:E2:41
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       049D690AB3653CD123D76F49AB0428C9D49C216A
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3138362e36342e302f31382d3138203d3e2036333036.roa
Signing time:             Tue 06 Jan 2026 19:27:32 +0000
ROA not before:           Tue 06 Jan 2026 19:22:32 +0000
ROA not after:            Tue 05 Jan 2027 19:27:32 +0000
asID:                     6306
IP address blocks:        186.186.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9d:69:0a:b3:65:3c:d1:23:d7:6f:49:ab:04:28:c9:d4:9c:21:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan  6 19:22:32 2026 GMT
            Not After : Jan  5 19:27:32 2027 GMT
        Subject: CN=191779DD98EB8E056247FBCC8656DAFF93B8E241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:bb:c0:a2:20:09:85:c3:08:de:6d:8e:bb:
                    82:3b:9b:25:b4:91:c8:78:a8:71:8e:78:c4:bb:0b:
                    0d:5e:2b:4e:cc:66:76:b1:21:42:7a:12:90:ec:ce:
                    14:79:ef:cb:35:48:f3:22:3c:cb:d6:eb:cc:8b:53:
                    ef:9f:d9:e4:44:7a:f7:c5:d2:61:48:67:35:35:e8:
                    32:51:ed:a2:e9:67:33:1f:9f:7c:8f:32:8e:6d:00:
                    1a:0a:a9:5c:b7:f9:d4:5f:dd:e5:5d:c5:f8:cc:d1:
                    39:ce:f3:59:a7:c1:33:92:e0:61:a0:8c:fc:3e:5e:
                    8f:6f:3c:df:99:37:a2:d0:41:d0:db:e4:0e:5b:7c:
                    bc:7f:77:1e:bc:7a:07:e4:58:ab:69:fa:54:70:64:
                    e8:10:f7:85:34:49:d4:71:89:63:c9:e4:94:0a:fb:
                    0f:1d:89:24:1c:90:54:58:25:6c:a0:5c:d5:a7:3d:
                    2e:15:b0:85:d2:d0:e4:e9:1c:50:27:1f:4c:08:b6:
                    70:22:a4:a2:23:b4:ad:9f:18:ac:f5:53:e4:74:a6:
                    a7:7e:d6:77:0d:4a:98:23:25:3a:56:9f:5d:47:6a:
                    f3:21:21:26:70:1b:c4:99:e7:53:ec:c1:4d:66:8a:
                    c0:20:b8:57:b7:39:00:30:2b:6a:95:d4:5b:5e:43:
                    d8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:17:79:DD:98:EB:8E:05:62:47:FB:CC:86:56:DA:FF:93:B8:E2:41
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3138362e36342e302f31382d3138203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.186.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4e:48:2f:57:2f:f0:b7:b4:dd:04:b5:de:d9:9b:23:40:35:9e:
         74:76:67:16:4f:32:e5:e7:95:eb:b7:ae:2d:eb:aa:0c:cd:0b:
         5c:cc:6f:ce:69:89:63:b2:39:7b:8b:94:b0:7f:2a:b2:71:5c:
         90:74:56:8f:b0:16:d8:89:39:24:33:66:6c:76:76:81:74:8a:
         46:35:3f:ca:2a:73:28:c7:e8:6a:21:65:ea:76:06:13:7c:04:
         8a:ea:1b:bd:fc:7d:83:5d:b3:3b:91:0c:76:03:51:f7:57:a4:
         c3:6c:1a:8e:5b:26:72:db:23:d5:75:55:41:08:64:6f:99:37:
         6e:41:3c:f3:97:0c:23:b9:5a:2b:35:fc:9f:8a:8d:ff:e2:57:
         d3:20:e1:43:5b:93:67:16:1b:c2:db:7a:66:6c:a3:3b:81:11:
         78:6e:92:f2:13:c4:ac:c8:b9:af:f7:64:c3:68:bd:8a:43:60:
         c3:61:91:3c:4c:fa:42:42:e4:3b:4c:eb:ff:0f:39:5c:4b:3a:
         5e:de:f0:d7:3e:48:c7:d0:c1:74:5a:b7:78:44:ea:c8:1e:b2:
         a8:f9:00:6b:2c:ca:a7:7d:19:c8:bb:f1:2f:22:10:6a:49:34:
         41:01:cf:04:ed:cf:0d:c7:cc:c9:80:37:c8:1c:ac:68:14:1f:
         36:cb:40:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:16:42 2026 by rpki-client