This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e31322e302f32322d3232203d3e2036333036.roa
File:                     3138362e32342e31322e302f32322d3232203d3e2036333036.roa (raw, json)
Hash identifier:          QrVEu6Wwvg3TlnVs3GKSUP8fVD6Zk4XHaEmFlKzHCHA=
Subject key identifier:   AE:FB:48:AF:E8:E0:09:18:4B:E9:1A:0C:FD:2A:D2:35:06:24:AD:7F
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       6A8A5CCF48C3FEC3B829731CA832366275F1E8D9
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e31322e302f32322d3232203d3e2036333036.roa
Signing time:             Tue 06 Jan 2026 19:27:37 +0000
ROA not before:           Tue 06 Jan 2026 19:22:37 +0000
ROA not after:            Tue 05 Jan 2027 19:27:37 +0000
asID:                     6306
IP address blocks:        186.24.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8a:5c:cf:48:c3:fe:c3:b8:29:73:1c:a8:32:36:62:75:f1:e8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan  6 19:22:37 2026 GMT
            Not After : Jan  5 19:27:37 2027 GMT
        Subject: CN=AEFB48AFE8E009184BE91A0CFD2AD2350624AD7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:82:b4:93:9e:1c:f2:48:00:23:9e:ce:2d:
                    61:bc:25:3a:97:97:32:af:8d:be:bc:cb:c9:d7:8d:
                    21:8a:4f:94:20:16:f7:7c:ce:6b:4b:0a:a0:b2:cf:
                    57:cf:7d:cb:7d:11:c5:6c:48:51:f6:58:66:50:fe:
                    ca:0d:7f:0b:0e:ea:46:e1:fa:41:3b:8a:be:aa:07:
                    24:40:da:68:3d:22:4a:f7:fd:dc:e2:a4:b3:fe:44:
                    e4:85:a7:61:27:0f:80:bf:e7:0f:2b:03:e2:78:ff:
                    c3:43:ef:9e:c2:7f:1d:a6:da:d7:b0:42:03:d3:26:
                    c4:8a:a6:9a:2e:bc:b4:ea:4e:4f:3a:c6:9a:45:c4:
                    cf:b0:6c:36:d3:f7:15:eb:07:b2:a1:ff:84:87:fc:
                    ce:d5:3a:18:50:4d:34:09:79:8f:96:72:c7:5b:97:
                    ef:a2:3b:65:4e:ae:be:54:db:3e:5e:a2:04:bc:b0:
                    65:4a:fb:1e:c6:4e:77:bd:85:db:02:06:98:e7:80:
                    6b:0a:41:47:08:7e:49:54:29:03:01:21:66:bc:61:
                    df:34:31:fb:cc:06:71:3a:93:76:62:b9:28:04:ca:
                    55:41:c2:1b:22:9d:42:0e:70:6c:c4:10:c0:11:6e:
                    6c:11:4e:02:32:2f:75:b4:11:3d:af:c9:d5:8f:9e:
                    ee:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FB:48:AF:E8:E0:09:18:4B:E9:1A:0C:FD:2A:D2:35:06:24:AD:7F
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e31322e302f32322d3232203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.24.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:d0:9b:cf:56:ea:1d:41:ac:14:94:99:10:82:d5:54:6a:4c:
         92:8d:32:20:39:47:00:e9:79:a4:20:1b:49:11:79:00:02:b5:
         ae:84:83:7d:52:92:ee:f0:ea:3b:8d:6b:79:68:6e:05:86:47:
         a2:98:22:da:07:50:63:c8:65:4c:a3:72:98:de:30:ec:9a:57:
         30:97:23:30:33:b0:ca:7e:31:ba:64:57:cb:61:d6:29:e7:c2:
         20:f2:5e:87:79:e5:ff:81:c0:c6:c5:fb:7a:27:3f:ec:c9:27:
         61:86:17:d2:7c:98:a3:85:f7:7e:83:3e:d5:1e:96:07:cd:d2:
         d1:56:6d:fe:12:66:17:a4:5b:4f:9b:d8:bf:45:a9:a7:d2:6e:
         2c:f5:59:06:43:75:46:36:b1:48:b4:de:43:a3:33:1a:90:8d:
         7f:9a:1c:67:e8:f9:2a:df:92:39:04:52:78:b6:00:e2:80:a8:
         bd:46:be:d7:6c:77:15:f4:f1:30:f6:b3:0d:49:c0:73:b3:c1:
         7e:18:17:87:9e:46:fd:b5:47:dd:c5:a4:1a:87:47:23:d5:60:
         4a:a5:96:a4:cb:d7:a4:42:90:21:82:fd:23:35:f1:80:b8:2f:
         07:ad:10:d0:93:5c:58:31:4c:8f:62:64:fd:ea:a9:f5:ca:7c:
         84:1d:5a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:32:37 2026 by rpki-client