This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3133382e3138362e3230382e302f32322d3234203d3e203237373735.roa
File:                     3133382e3138362e3230382e302f32322d3234203d3e203237373735.roa (raw, json)
Hash identifier:          54J9yfgN16gXyuCIoWbNZsRgq+t8XvuujT/UYlcbGVI=
Subject key identifier:   89:62:AD:51:00:15:04:21:6E:7C:D4:6D:54:E9:95:E1:FF:74:0E:2F
Certificate issuer:       /CN=E448655A46C905154A46DF19D5CADDB20B5D1153
Certificate serial:       3B04CA3FA8814A9EF32609B77D1C33D8F1D39E14
Authority key identifier: E4:48:65:5A:46:C9:05:15:4A:46:DF:19:D5:CA:DD:B2:0B:5D:11:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3133382e3138362e3230382e302f32322d3234203d3e203237373735.roa
Signing time:             Tue 06 Jan 2026 19:20:37 +0000
ROA not before:           Tue 06 Jan 2026 19:15:37 +0000
ROA not after:            Tue 05 Jan 2027 19:20:37 +0000
asID:                     27775
IP address blocks:        138.186.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 23:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:04:ca:3f:a8:81:4a:9e:f3:26:09:b7:7d:1c:33:d8:f1:d3:9e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E448655A46C905154A46DF19D5CADDB20B5D1153
        Validity
            Not Before: Jan  6 19:15:37 2026 GMT
            Not After : Jan  5 19:20:37 2027 GMT
        Subject: CN=8962AD51001504216E7CD46D54E995E1FF740E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:23:4e:23:6f:58:92:fa:3d:d3:cf:d7:2a:
                    18:88:77:01:11:7b:32:16:1b:f1:c2:ef:0f:81:fa:
                    ba:1a:33:58:8a:1a:fe:9c:c0:5a:0f:b0:a2:63:98:
                    cc:78:ee:68:5e:4b:18:4d:32:21:1e:71:ab:8f:0c:
                    1c:7c:87:9b:13:9d:4b:0f:58:82:14:fb:3f:83:7d:
                    40:33:a4:d1:ad:09:60:ee:c5:65:9d:2c:de:6d:a8:
                    54:27:61:24:2e:44:85:b0:3d:9c:46:e4:70:93:32:
                    16:23:ce:0c:5b:e8:02:9e:27:7f:9c:1f:a8:96:88:
                    64:e8:86:cd:80:25:aa:cf:f3:6f:68:c5:c0:5d:1b:
                    bb:2d:fd:e0:e2:7a:da:25:a7:12:6f:68:35:c1:84:
                    19:c7:8f:a6:76:4b:bd:0d:fe:60:71:64:b3:fb:0f:
                    24:4d:80:e2:ff:62:69:7f:38:11:32:d3:66:68:43:
                    98:a6:b7:8d:fc:46:57:92:64:74:91:9d:e3:a2:90:
                    6f:19:e9:a6:32:c0:04:0d:b2:ac:d2:6e:1e:73:22:
                    6f:20:55:a3:30:1f:3a:b3:4c:0d:39:20:e6:08:7c:
                    d0:f4:e9:1a:7e:22:17:46:68:34:67:c8:99:94:9f:
                    89:1b:75:67:45:6b:0d:4b:5f:4f:48:8d:b8:f9:3d:
                    5a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:62:AD:51:00:15:04:21:6E:7C:D4:6D:54:E9:95:E1:FF:74:0E:2F
            X509v3 Authority Key Identifier:
                keyid:E4:48:65:5A:46:C9:05:15:4A:46:DF:19:D5:CA:DD:B2:0B:5D:11:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3133382e3138362e3230382e302f32322d3234203d3e203237373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:32:82:12:b0:05:36:2e:8d:08:b8:e8:21:2a:ba:f0:3a:b1:
         bb:13:5a:dc:51:72:e9:2e:14:23:51:e3:3d:71:b4:d8:4c:a1:
         9c:26:b9:5a:ff:7f:c3:4b:48:25:c5:4c:83:3f:fe:17:cb:89:
         10:66:b5:86:19:cf:07:af:33:f4:13:a6:82:63:e3:e9:17:33:
         ca:4a:19:cd:78:eb:e8:cf:f7:a6:60:76:a1:9a:5b:eb:04:27:
         a8:3c:e6:ec:94:2d:98:b0:3b:51:94:6b:24:66:c8:2b:0c:1a:
         32:79:5c:db:53:c0:e4:e7:ef:f7:82:65:12:19:77:a8:cf:30:
         0c:80:07:f6:ba:12:82:0f:82:c4:14:6d:c0:46:37:cd:a9:d5:
         35:4c:f7:7c:66:47:53:51:fe:1d:36:d1:92:ae:c7:e1:a2:b7:
         d9:88:19:5a:37:82:37:85:d6:3e:49:51:a4:f7:33:41:26:fb:
         9f:68:aa:c9:71:9a:43:62:97:6e:ad:88:b3:95:e1:86:69:2e:
         17:a5:d0:ca:ae:c9:b5:40:4c:76:d4:b7:07:67:2f:46:ab:32:
         15:c1:18:6a:dc:be:fc:a8:12:58:1b:fa:6f:ea:6c:f1:ab:d5:
         36:a0:0b:b9:05:3a:b4:cb:a0:45:33:de:bd:89:43:1a:6d:a1:
         26:b1:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:23:38 2026 by rpki-client