This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32352e302e302f31362d3137203d3e2036333036.roa
File:                     3138362e32352e302e302f31362d3137203d3e2036333036.roa (raw, json)
Hash identifier:          nwXxYpW2fb2TKw3MWn/p2eEEYJl7iI4nJrs9cdmuGio=
Subject key identifier:   01:FD:28:74:22:4C:74:F7:BC:80:F6:A3:DD:F2:72:41:E8:B7:9B:73
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       2BA026BA525DAEC07D1304A28B688E7A98023265
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32352e302e302f31362d3137203d3e2036333036.roa
Signing time:             Tue 06 Jan 2026 19:27:32 +0000
ROA not before:           Tue 06 Jan 2026 19:22:32 +0000
ROA not after:            Tue 05 Jan 2027 19:27:32 +0000
asID:                     6306
IP address blocks:        186.25.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a0:26:ba:52:5d:ae:c0:7d:13:04:a2:8b:68:8e:7a:98:02:32:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan  6 19:22:32 2026 GMT
            Not After : Jan  5 19:27:32 2027 GMT
        Subject: CN=01FD2874224C74F7BC80F6A3DDF27241E8B79B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:91:b4:bb:82:46:b4:5f:ee:48:9e:03:ba:86:
                    21:66:14:d4:43:15:88:e4:36:e2:dc:12:fd:ab:1b:
                    08:bf:23:ee:52:2a:81:fa:bf:d4:f4:69:6c:ac:53:
                    92:97:de:8f:6d:51:29:04:d6:4f:92:dc:f0:e5:72:
                    d6:06:4f:c6:21:f2:e6:dd:53:1d:7e:b7:a9:eb:43:
                    75:62:04:e8:29:33:03:ed:c0:ec:d5:c7:a0:f4:33:
                    88:65:27:ca:65:8b:f8:37:99:da:e7:61:85:12:1c:
                    e3:90:da:7b:70:7c:36:0c:e5:7b:77:8e:54:2a:f1:
                    16:11:6c:32:a3:06:03:27:a4:33:7d:1d:0a:22:89:
                    81:e8:a4:6c:8e:32:84:aa:83:8d:8c:c7:37:75:0b:
                    57:5c:a3:81:c9:41:df:db:5b:c9:0c:62:8b:2b:d5:
                    c4:5e:bc:3c:7b:dc:c8:2a:33:76:5e:27:ec:e3:cd:
                    21:bf:f9:68:da:d7:24:62:20:4c:3b:53:fb:24:b2:
                    af:ce:88:71:0a:c7:e4:a6:fe:bd:bc:61:16:4a:09:
                    8a:26:c5:d6:b5:b5:39:fa:74:62:9a:c2:82:de:c2:
                    f4:0b:15:71:26:40:cb:47:b9:44:be:4c:a3:70:f3:
                    e6:87:c9:44:e9:b1:15:03:1f:b8:f4:f3:23:69:9f:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FD:28:74:22:4C:74:F7:BC:80:F6:A3:DD:F2:72:41:E8:B7:9B:73
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32352e302e302f31362d3137203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.25.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7f:d6:e3:b6:3c:10:39:c6:e7:0f:5f:7e:4c:f8:1d:f2:bb:41:
         1a:a7:0c:14:24:2e:8d:ff:87:c3:e1:32:76:28:fe:69:93:af:
         fb:c3:9b:c6:13:e6:27:e5:e9:06:d8:1c:df:83:2c:5a:82:8f:
         56:f2:18:34:17:6c:b1:24:0c:91:df:7f:19:0d:bd:87:c9:7b:
         cb:32:1d:ff:55:39:fe:09:c2:30:11:c3:f4:37:11:e0:d7:04:
         94:e4:71:a8:1f:7a:6a:55:fc:ba:36:bc:bc:70:b1:bb:8c:89:
         15:ad:4e:21:cb:9d:8f:ba:57:3a:8c:e2:a4:2b:1d:17:91:a3:
         ea:f6:d4:4a:00:45:d6:a7:33:a6:62:9a:9f:42:3c:a4:8d:0d:
         0b:78:2c:08:80:48:7d:63:94:ea:bd:5f:1a:2a:30:88:b2:ea:
         26:f9:78:2c:fc:63:12:41:6b:eb:3e:61:ef:05:da:c8:f3:07:
         08:2a:b3:e7:25:02:dd:f0:3b:88:ee:67:e3:5c:c8:96:a6:a0:
         75:00:92:8b:3a:ab:81:55:7c:4b:dc:77:c3:7c:9e:02:f4:45:
         45:54:ad:21:dc:71:2a:30:2b:7c:0b:8a:7f:8c:3c:11:7f:54:
         3f:43:64:c7:6f:fa:b1:75:9d:30:7f:c7:f4:27:51:2c:96:50:
         9d:20:b0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:01:18 2026 by rpki-client