This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31302e302e302f31362d3234203d3e203237363531.roa
File:                     3138362e31302e302e302f31362d3234203d3e203237363531.roa (raw, json)
Hash identifier:          DzgjzESbao2OY51ghuf/U2Kqxa1TIiWVVfPtGmpIoC8=
Subject key identifier:   DB:81:20:FB:D5:63:6E:89:05:C1:41:5D:35:FB:60:95:57:1E:F0:65
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       0637C5EEC3456311D8F7F5616FD183DB89016E7F
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31302e302e302f31362d3234203d3e203237363531.roa
Signing time:             Tue 06 Jan 2026 19:37:36 +0000
ROA not before:           Tue 06 Jan 2026 19:32:36 +0000
ROA not after:            Tue 05 Jan 2027 19:37:36 +0000
asID:                     27651
IP address blocks:        186.10.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:37:c5:ee:c3:45:63:11:d8:f7:f5:61:6f:d1:83:db:89:01:6e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Jan  6 19:32:36 2026 GMT
            Not After : Jan  5 19:37:36 2027 GMT
        Subject: CN=DB8120FBD5636E8905C1415D35FB6095571EF065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:5e:25:fa:24:8c:15:83:d7:6f:fb:4a:e3:
                    f2:76:4a:5c:4f:4b:43:b1:16:52:38:de:03:e0:47:
                    bf:c6:cc:fa:51:f9:50:21:d2:ed:f5:86:3b:79:92:
                    4e:95:a6:28:6c:f8:7d:66:ba:25:fd:63:e0:fb:19:
                    f9:3f:8b:d0:c1:ef:c7:79:47:6d:0b:ac:4e:7a:27:
                    dc:25:8a:02:1f:c4:10:dc:71:df:cc:2c:be:91:30:
                    35:c9:88:77:23:6e:fb:9b:f3:e0:f2:0b:6b:b7:0f:
                    44:d0:5a:76:41:b9:e1:9a:99:30:39:50:9a:ce:db:
                    e4:3e:d0:35:08:a5:f5:0f:f2:de:09:30:aa:e9:a5:
                    3a:50:aa:08:6d:4e:37:75:15:8e:87:37:4c:42:bd:
                    ac:a1:30:08:5e:74:4c:50:44:57:ae:aa:85:89:9a:
                    a4:98:72:e7:95:ae:a5:a0:a1:28:4d:8a:19:c6:a2:
                    3c:d5:ed:60:eb:3b:1b:0b:95:51:8e:52:64:d5:70:
                    5b:fa:a8:39:7c:99:77:78:cf:ff:f9:42:8b:9f:d5:
                    28:7e:4a:2a:ce:ec:ee:f9:12:13:67:0b:7d:35:04:
                    35:96:c6:09:a1:f4:30:06:5b:92:51:4d:7d:7a:d9:
                    83:31:f4:f6:ae:96:ba:9c:31:27:23:b2:50:2e:1f:
                    48:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:81:20:FB:D5:63:6E:89:05:C1:41:5D:35:FB:60:95:57:1E:F0:65
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e31302e302e302f31362d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.10.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         76:53:a3:f7:9a:28:6d:51:23:1a:a0:61:1c:d3:e6:7f:20:24:
         73:66:b3:a8:ba:96:1f:8e:b8:af:4e:33:49:0f:95:9d:e5:cf:
         7f:05:8a:17:ca:e4:ea:dd:b3:7e:a6:c8:f6:87:7d:13:d1:64:
         81:10:94:72:73:e0:41:91:a1:67:0a:08:21:30:86:ac:12:d3:
         92:f6:2d:03:4d:1d:b7:b5:bf:3a:b1:d2:bd:f7:c6:ec:fa:06:
         75:e0:91:a7:5d:13:21:80:2e:b8:bf:65:2d:b8:c1:25:f8:5f:
         85:94:f8:07:f7:e2:00:62:d9:78:c1:cf:8a:63:23:ec:fe:b1:
         47:f7:b6:ff:5f:e2:e3:d6:c5:77:a4:0e:3d:b8:5c:62:96:8d:
         f7:ea:4a:d8:30:c1:00:3c:ab:76:cb:63:9f:04:f1:27:24:a5:
         d8:96:e6:bb:b1:07:41:df:a7:3d:0c:a3:4e:aa:16:38:8a:c2:
         b8:31:24:0a:bf:23:1c:ff:d0:a3:df:f4:48:d8:4b:9b:0f:e6:
         e5:76:f4:3f:2b:f2:b3:1c:fb:c1:8b:7b:28:af:d5:d8:92:61:
         30:78:39:89:12:71:c4:dc:13:09:62:e5:f9:b5:6f:7b:e9:75:
         ee:07:20:e0:8a:2a:23:f6:c8:cd:b7:c7:62:a2:46:3f:24:9e:
         aa:40:3e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:54:55 2026 by rpki-client