This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e302e302f31362d3234203d3e203237393437.roa
File:                     3138362e3130312e302e302f31362d3234203d3e203237393437.roa (raw, json)
Hash identifier:          +IQ9DozH5FvZQH4IwcaSMWVGVh0KqmN8pnvhJz6/FjM=
Subject key identifier:   75:EC:AC:78:D1:0B:A9:FD:FF:58:7E:D3:95:74:62:6E:32:56:75:1B
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       6BA75D754EB4F3359A14B7AC86480CE93DDF51A1
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e302e302f31362d3234203d3e203237393437.roa
Signing time:             Tue 06 Jan 2026 19:08:41 +0000
ROA not before:           Tue 06 Jan 2026 19:03:41 +0000
ROA not after:            Tue 05 Jan 2027 19:08:41 +0000
asID:                     27947
IP address blocks:        186.101.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 13:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a7:5d:75:4e:b4:f3:35:9a:14:b7:ac:86:48:0c:e9:3d:df:51:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Jan  6 19:03:41 2026 GMT
            Not After : Jan  5 19:08:41 2027 GMT
        Subject: CN=75ECAC78D10BA9FDFF587ED39574626E3256751B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:a3:92:78:7a:86:31:4d:02:5b:d0:9a:f7:
                    4d:fe:d0:8e:a8:84:10:ff:f0:69:aa:53:c2:0e:d2:
                    90:2a:31:f8:8a:df:40:97:f7:7f:a7:a3:a0:27:99:
                    19:f7:05:10:9a:95:87:68:af:0c:3d:22:cd:0b:7a:
                    3b:04:3d:bf:83:57:48:3c:b0:9b:04:2d:14:09:de:
                    d5:dc:fc:29:f2:85:28:50:02:74:a3:4c:c5:3c:96:
                    d5:7c:11:03:48:74:9a:86:6b:2e:53:c0:c1:f5:2f:
                    f5:b8:f9:81:a1:d1:bd:af:50:ab:d2:82:ab:39:2e:
                    f2:b5:29:81:77:d6:d3:ee:43:fa:98:50:d8:ad:e5:
                    b2:f3:c0:37:9c:d3:ea:f0:49:6a:20:2d:87:ee:9b:
                    b5:1a:dc:1c:50:4d:fc:b1:b6:c9:c6:54:60:18:24:
                    7c:c2:19:11:a3:fe:7f:c7:48:c2:7d:64:02:91:a8:
                    d0:7a:6a:41:dc:73:0f:78:b2:17:1c:c1:12:d4:60:
                    ff:fa:00:1c:65:e2:ea:e4:cc:db:34:58:78:55:6a:
                    8f:1e:43:7f:e6:62:28:3a:29:26:61:ba:6e:e0:0d:
                    86:80:a3:06:45:1b:66:56:29:5e:f5:61:12:cc:0c:
                    71:7b:76:a9:91:37:42:92:6b:ff:96:58:1b:db:dc:
                    eb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EC:AC:78:D1:0B:A9:FD:FF:58:7E:D3:95:74:62:6E:32:56:75:1B
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e3130312e302e302f31362d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.101.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         14:74:2b:41:19:80:9a:35:d7:8f:4b:e7:8d:b9:e1:22:ff:51:
         34:f9:4b:63:b2:18:05:07:41:3b:18:2b:dc:7e:68:f3:14:15:
         2d:57:74:68:f5:35:44:3a:c5:b0:d0:01:aa:c9:75:90:6c:c0:
         49:0c:8a:f9:f6:1a:cd:1c:c3:5f:5e:ec:62:cb:55:4d:5a:99:
         a7:2f:c0:61:e4:b0:19:5d:6d:84:c1:a2:72:58:74:65:60:49:
         5d:6a:45:79:3a:5d:00:ed:1d:bc:de:ff:f1:2b:a8:e9:1d:e4:
         40:7c:fd:16:ea:d1:bc:d8:6e:e4:4d:45:fb:79:b8:52:d1:fb:
         a3:d5:2e:62:23:be:b5:b7:51:a1:60:22:15:9b:31:de:81:49:
         b8:22:c4:b5:d1:b0:fc:53:c5:84:c2:4d:b5:03:46:e4:4b:e6:
         91:f0:ee:43:60:c1:9e:62:2a:ff:83:99:b8:f2:8c:c4:17:e3:
         9d:a8:70:b7:46:56:ad:ee:e4:2d:0e:5b:07:6c:89:32:d6:95:
         57:21:86:29:91:12:4c:45:a0:74:c7:7d:a1:f5:90:d9:a8:3d:
         bc:7e:c6:fa:3b:96:9c:10:3b:62:97:06:10:9d:07:d3:c3:53:
         e6:9a:a5:04:1e:28:c8:bf:89:2a:a6:1f:56:9d:24:f3:87:d0:
         88:a5:3c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:15:04 2026 by rpki-client