This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3235322e302f32332d3234203d3e203232333638.roa
File:                     3138362e3138332e3235322e302f32332d3234203d3e203232333638.roa (raw, json)
Hash identifier:          qxZhNywWo6u70Qr9St9YwEpjGDoKl2ZPUREW2tAFOvM=
Subject key identifier:   F3:A5:DB:FF:19:E2:65:CF:1A:6B:3A:2A:29:B9:97:86:EA:FD:4A:14
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       62F9759892E31FE2AF9CD835F086EFC4CB5855AB
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3235322e302f32332d3234203d3e203232333638.roa
Signing time:             Tue 06 Jan 2026 19:18:06 +0000
ROA not before:           Tue 06 Jan 2026 19:13:06 +0000
ROA not after:            Tue 05 Jan 2027 19:18:06 +0000
asID:                     22368
IP address blocks:        186.183.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 21:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f9:75:98:92:e3:1f:e2:af:9c:d8:35:f0:86:ef:c4:cb:58:55:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jan  6 19:13:06 2026 GMT
            Not After : Jan  5 19:18:06 2027 GMT
        Subject: CN=F3A5DBFF19E265CF1A6B3A2A29B99786EAFD4A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e5:7a:85:61:a3:76:88:92:43:9c:d2:6d:d7:
                    b0:f1:c1:c0:b4:20:58:84:ec:7b:e3:43:0f:da:08:
                    36:b9:1f:60:14:99:c2:b9:6e:1b:c4:44:fb:5d:ec:
                    c3:1b:6f:d7:bc:b8:b9:54:60:d5:b9:97:cd:1c:dc:
                    87:28:33:11:dd:c2:c2:45:3b:98:e4:bc:9a:29:9c:
                    15:27:ce:77:7e:09:36:4c:63:c9:4f:ae:b0:5f:60:
                    91:8d:95:ac:fd:b5:7a:a4:ae:bd:53:92:17:ad:59:
                    a5:df:33:fe:b1:00:88:c4:c9:b6:29:b9:c7:f8:87:
                    2c:3d:c7:2f:a4:03:ef:a4:b6:5e:ba:33:cc:53:f9:
                    fb:34:91:be:3e:73:3f:60:59:7c:2b:95:1f:15:ad:
                    ae:3c:03:d0:13:f3:f3:5e:9d:fa:d2:29:08:a8:de:
                    2e:72:b5:65:cc:c7:eb:a8:99:7c:75:5b:7f:32:a6:
                    14:e9:f0:14:c7:ed:9d:ab:f4:2f:43:0f:5e:bb:26:
                    8c:4d:12:84:85:7d:6b:7b:03:06:df:4f:d3:c8:ce:
                    c5:83:e9:bd:8d:99:07:ae:25:dd:23:cb:7a:a4:ba:
                    84:f3:7f:dc:ea:bd:5f:da:d4:fd:88:23:b0:d7:c7:
                    0a:2c:8a:a2:7c:46:40:2d:da:8e:4c:c0:2c:3e:d2:
                    ee:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A5:DB:FF:19:E2:65:CF:1A:6B:3A:2A:29:B9:97:86:EA:FD:4A:14
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3235322e302f32332d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:e3:f1:c4:d4:76:e1:d8:0d:7f:61:b5:77:b0:dd:10:3f:a9:
         d4:28:3d:6f:17:7b:ba:13:c4:23:21:15:9f:12:31:f9:86:60:
         82:71:77:e6:f2:eb:7a:18:5a:cb:6c:3d:6a:8c:9d:63:c8:23:
         d6:b5:d2:90:2e:aa:62:f4:f1:12:2b:d0:8e:83:6f:21:8a:ef:
         e7:48:a2:3d:45:96:d1:d8:ea:2e:a8:76:a9:d4:51:f3:1c:a6:
         35:48:c8:10:0a:d3:a6:56:eb:ef:2a:22:f5:ed:8b:ec:fb:3d:
         55:4f:bf:08:23:c0:69:8e:b3:cf:14:43:33:4c:23:5a:c6:fa:
         b7:39:55:51:f4:83:6c:7c:f1:11:c3:d3:3d:9f:99:0f:bf:bb:
         d2:5f:79:7b:4f:54:42:6b:e3:fc:ed:26:37:a8:e5:94:48:b0:
         f6:c6:dd:34:cf:a5:21:c4:4b:fb:ea:9f:25:6c:a5:ae:53:ca:
         ce:2f:d6:fd:06:a9:c2:7b:c1:80:01:f7:20:3f:36:f1:a1:90:
         28:3d:64:ee:c2:6b:4f:85:e2:0d:fb:23:90:c7:a0:6e:cf:dd:
         0e:db:ab:d5:a5:b1:17:20:36:44:bd:23:94:7d:d4:2c:b5:08:
         72:f6:e5:ce:b6:b5:1a:e9:6e:3a:59:c8:e0:76:a5:05:7b:b9:
         b3:61:e2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:10:12 2026 by rpki-client