This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3235342e302f32332d3233203d3e2033383136.roa
File:                     3138362e3138332e3235342e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          d8wcXoE/SMrw/9CP7Ib9ApQo1Z4HcYDmLxS470NxcI0=
Subject key identifier:   19:43:84:DA:0E:1B:71:F1:DC:E4:6B:95:A3:73:72:16:7E:8C:7B:FD
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       3B31B282ADA5D12A79C35AD3FB425EEB6073EB9D
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3235342e302f32332d3233203d3e2033383136.roa
Signing time:             Tue 06 Jan 2026 19:17:59 +0000
ROA not before:           Tue 06 Jan 2026 19:12:59 +0000
ROA not after:            Tue 05 Jan 2027 19:17:59 +0000
asID:                     3816
IP address blocks:        186.183.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 21:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:31:b2:82:ad:a5:d1:2a:79:c3:5a:d3:fb:42:5e:eb:60:73:eb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jan  6 19:12:59 2026 GMT
            Not After : Jan  5 19:17:59 2027 GMT
        Subject: CN=194384DA0E1B71F1DCE46B95A37372167E8C7BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:d9:d8:f4:fe:9b:c7:68:e1:7c:a1:30:1c:
                    8e:13:bf:cb:8e:47:5a:3c:ed:86:8e:be:f6:0f:a8:
                    6e:72:cd:fb:28:99:2e:9b:e1:5d:d7:ab:bc:0b:b8:
                    2e:93:eb:92:fc:c5:9b:1f:49:63:61:cd:91:c3:76:
                    5d:8d:f6:ea:66:4f:19:49:5a:24:c4:1f:1a:fa:ac:
                    d4:b0:74:48:d4:62:0c:0c:e7:7f:c9:1b:29:b6:62:
                    ce:dd:77:e0:fd:d2:2c:c7:87:99:57:31:a1:a5:34:
                    d6:0d:b7:3f:72:a7:39:f6:99:29:16:97:db:55:4b:
                    c9:93:07:98:d5:95:7a:dd:16:9d:cd:6f:f2:0f:5a:
                    65:98:9d:5a:12:4b:2b:af:8c:7c:23:19:d4:fc:12:
                    67:15:a1:3d:aa:38:0b:e1:a4:8c:2f:db:29:2c:39:
                    02:c0:a5:53:9a:34:aa:1f:60:06:36:42:71:e2:f6:
                    51:bb:fd:c8:9c:05:cb:05:47:ec:08:a9:b5:26:95:
                    cd:8d:3c:81:bd:08:14:49:9a:e5:5e:91:59:e2:99:
                    e7:eb:cd:e3:12:99:6a:06:aa:fa:c7:00:a4:06:ce:
                    23:5c:ee:6c:86:cf:e4:d2:bb:0b:7b:f1:d6:f0:cf:
                    0e:bc:63:c0:e3:4c:77:31:15:d9:d9:eb:c3:2d:f7:
                    ea:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:43:84:DA:0E:1B:71:F1:DC:E4:6B:95:A3:73:72:16:7E:8C:7B:FD
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3235342e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:06:9e:b6:d9:9d:82:de:c2:9b:ac:80:34:94:db:e8:1f:3a:
         3b:ea:93:fc:34:e2:af:3c:dc:f5:35:7e:8a:89:ae:24:69:ef:
         28:97:8f:d6:63:95:8c:10:af:50:1a:3c:d6:a0:24:a6:9f:cc:
         d8:d0:10:f4:7a:1b:05:f2:84:15:9d:dc:a6:4a:ed:62:a9:1b:
         a1:9b:16:b4:28:84:37:8c:42:e4:1a:05:fa:4b:82:3c:28:cd:
         79:cc:af:73:1f:68:37:9f:d7:cb:bd:2d:ea:fa:c8:12:e5:d4:
         07:41:da:66:fd:d9:84:2e:a0:f3:3b:27:9f:96:48:fc:c4:a2:
         92:54:7e:33:93:7b:a0:f4:4b:a7:8d:89:7c:f1:b8:67:ad:f8:
         6d:19:42:48:1b:69:f2:9f:35:bf:e7:0a:31:9d:f2:76:0e:aa:
         b8:c9:42:cb:30:ef:1e:c2:3a:ac:29:cd:50:23:35:3a:ab:f8:
         0d:07:d1:a9:7d:84:9e:2a:48:f0:e3:60:01:81:14:7b:36:62:
         b1:24:17:37:63:9c:65:81:15:25:03:6a:22:89:7a:a6:8a:fc:
         81:ab:f7:df:5c:42:89:32:55:59:a0:72:78:55:42:d8:12:2f:
         78:76:d1:d6:00:1c:99:fe:a7:0f:5f:fb:02:6a:15:2a:2a:b4:
         dd:d6:41:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:16:17 2026 by rpki-client