This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3138362e33342e302e302f31352d3232203d3e2036353335.roa
File:                     3138362e33342e302e302f31352d3232203d3e2036353335.roa (raw, json)
Hash identifier:          L+xwi2PlKlVgg3RRmjAphjSpSc819W09E8sb7p2wEPU=
Subject key identifier:   43:A4:CD:95:9C:59:4B:D2:44:FA:78:1D:A8:A6:39:8F:A7:F2:29:A0
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       25E3A09103C4B061113109BED2618E3E152E931B
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3138362e33342e302e302f31352d3232203d3e2036353335.roa
Signing time:             Tue 06 Jan 2026 20:54:23 +0000
ROA not before:           Tue 06 Jan 2026 20:49:23 +0000
ROA not after:            Tue 05 Jan 2027 20:54:23 +0000
asID:                     6535
IP address blocks:        186.34.0.0/15 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e3:a0:91:03:c4:b0:61:11:31:09:be:d2:61:8e:3e:15:2e:93:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Jan  6 20:49:23 2026 GMT
            Not After : Jan  5 20:54:23 2027 GMT
        Subject: CN=43A4CD959C594BD244FA781DA8A6398FA7F229A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:60:37:b2:82:6b:04:7e:65:1e:52:b9:a7:
                    93:24:58:78:45:30:58:db:a8:5e:7a:de:c3:b1:00:
                    41:b3:05:e9:d9:37:15:de:9c:5b:f5:29:e6:c8:1d:
                    6b:62:c4:45:9e:6e:a2:8c:b6:e2:ce:de:ca:2e:03:
                    96:cb:3c:c4:bf:82:a8:a5:36:5e:78:a2:da:ec:0f:
                    df:ea:72:ef:20:15:52:f4:13:2a:00:d7:a4:a1:df:
                    0d:1b:58:fb:7f:35:22:b1:7a:98:8a:64:0e:ce:9e:
                    c6:42:64:4f:19:d2:32:60:19:43:39:da:58:af:14:
                    26:ef:ad:f6:08:71:3d:6b:83:82:f6:10:c8:ed:57:
                    d4:13:29:1c:04:9a:57:2e:f5:c9:e7:40:1a:bf:52:
                    5d:0e:d5:90:41:92:f6:a2:69:ae:44:4e:25:2d:81:
                    f5:d6:9f:69:ca:0e:39:ad:c2:dd:37:fa:12:6e:a4:
                    b5:4d:53:c6:c6:b3:48:f8:1c:dc:c7:68:31:bd:8e:
                    6e:4b:e4:a2:af:3d:cc:d8:2d:2b:4c:5f:82:12:37:
                    19:23:3a:ba:24:3a:69:46:f2:01:e1:5b:17:80:ce:
                    f3:40:3d:f7:28:ef:2c:8e:41:e5:2f:56:52:f8:2f:
                    5a:5d:83:80:86:81:30:c6:b1:e1:87:4c:da:0a:39:
                    98:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A4:CD:95:9C:59:4B:D2:44:FA:78:1D:A8:A6:39:8F:A7:F2:29:A0
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3138362e33342e302e302f31352d3232203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.34.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         6b:d7:93:8f:de:3f:ec:88:56:f0:57:b7:d6:71:db:1e:f4:63:
         75:cc:34:09:68:e6:68:94:66:1b:a5:51:2b:ab:ab:a2:94:67:
         ee:c0:e9:90:05:ee:d5:4d:ef:ae:5d:ca:22:77:f7:9a:ca:f5:
         f6:45:b1:9d:d2:dd:ad:80:24:3f:af:7a:12:0c:c4:ab:d5:6a:
         86:a7:f7:e1:4f:be:18:53:c1:0a:b8:be:9e:f7:ba:bd:9d:a5:
         f2:b3:f1:53:f7:0c:e6:ef:83:42:96:a0:94:f8:1d:fd:91:f4:
         af:ce:40:c2:ee:f6:69:94:b7:87:04:47:bc:07:ed:6c:86:5b:
         88:3f:f9:30:da:e0:dc:32:4f:94:11:02:ab:65:a7:22:b6:f7:
         28:8e:4c:ad:78:63:b9:80:76:f6:d7:dd:0f:f8:42:ad:af:e3:
         5a:8e:fd:29:56:01:ee:0b:6f:02:09:b9:88:16:09:5e:a0:40:
         4d:23:66:78:e7:05:fd:88:e4:ec:b9:63:30:bb:0a:70:e7:f6:
         50:d4:d9:32:58:f0:af:3b:af:8c:25:30:13:ed:12:81:6b:0b:
         06:49:86:d5:16:f9:4f:1b:60:cb:17:0f:64:38:a0:14:f1:fc:
         a2:47:d9:ae:08:7b:71:5c:cb:af:ff:d6:f8:02:95:4e:ee:eb:
         bc:eb:2c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:39 2026 by rpki-client