This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3138362e33362e302e302f31362d3232203d3e2036353335.roa
File:                     3138362e33362e302e302f31362d3232203d3e2036353335.roa (raw, json)
Hash identifier:          GsK5QBrMlcD0witry6Elvjlwm3EjueQLtVifq2I+7AE=
Subject key identifier:   73:24:41:2A:DA:A1:AA:DE:BC:F5:2D:AC:11:1D:71:50:2C:05:7F:30
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       39FAB68137B108AE586D58F7273ED1CF551A511F
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3138362e33362e302e302f31362d3232203d3e2036353335.roa
Signing time:             Tue 06 Jan 2026 20:54:19 +0000
ROA not before:           Tue 06 Jan 2026 20:49:19 +0000
ROA not after:            Tue 05 Jan 2027 20:54:19 +0000
asID:                     6535
IP address blocks:        186.36.0.0/16 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fa:b6:81:37:b1:08:ae:58:6d:58:f7:27:3e:d1:cf:55:1a:51:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Jan  6 20:49:19 2026 GMT
            Not After : Jan  5 20:54:19 2027 GMT
        Subject: CN=7324412ADAA1AADEBCF52DAC111D71502C057F30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2d:aa:76:58:2f:06:42:78:5d:b9:e2:f2:c5:
                    6f:81:ce:85:6f:c4:98:fd:31:4b:a4:f3:1f:a1:68:
                    98:f7:8f:41:8e:a2:91:6b:1e:35:0a:fb:6e:59:a4:
                    88:2e:d5:f1:86:82:c0:bc:f0:85:e9:a1:76:a8:e2:
                    2d:f1:93:2b:04:d6:06:bd:5c:f6:4f:7b:69:ed:37:
                    56:42:53:97:c7:fa:e9:38:77:78:ad:35:6f:b7:7b:
                    1d:92:65:13:6e:64:30:9b:02:ff:d5:8c:6b:a9:90:
                    0f:17:ed:61:e8:53:0e:7e:10:f5:40:60:2a:26:63:
                    11:17:d9:d5:3c:30:0e:c0:ad:33:70:71:04:85:4c:
                    d6:4b:3d:5f:61:2c:86:14:db:89:3c:da:b5:55:3b:
                    2a:bc:39:24:6d:8a:ea:5f:14:d4:1b:46:03:18:06:
                    60:c5:7c:6b:8f:9e:66:30:31:0e:6c:9e:21:b7:68:
                    7a:de:c1:93:c0:5c:0f:5d:66:38:4c:90:23:65:99:
                    1f:0b:69:bb:1e:a8:2e:d7:61:81:1f:b3:51:17:b4:
                    f5:0c:76:aa:ff:80:53:e4:83:b4:1f:63:16:23:c5:
                    d6:5f:79:d9:c3:e4:67:69:cb:c1:f3:dd:09:77:23:
                    3e:ef:15:93:c0:0c:b0:5d:f7:05:2c:84:fe:b0:6d:
                    e2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:24:41:2A:DA:A1:AA:DE:BC:F5:2D:AC:11:1D:71:50:2C:05:7F:30
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3138362e33362e302e302f31362d3232203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.36.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:76:ac:26:ac:5a:fb:d3:03:d3:00:82:72:d9:63:b5:7b:9c:
         14:1c:54:4a:59:65:33:ab:4d:db:79:d2:56:ab:22:ff:cd:77:
         3b:50:76:85:9c:79:c1:4a:8e:d8:34:30:1d:d9:04:a2:b5:4b:
         d1:b5:b6:7f:42:99:6b:fa:77:7e:77:e7:30:6f:f1:fc:3e:e4:
         8a:a0:05:5b:40:58:2b:5b:09:9b:f1:1f:fb:cd:7a:e4:ce:be:
         81:99:ba:26:0d:af:fd:2f:d3:09:8d:64:18:16:a0:5c:fe:7c:
         04:0e:74:6a:ad:73:79:c6:1f:37:23:bc:4c:8d:dc:4b:d8:99:
         1d:8b:17:9a:f3:4e:45:a3:3e:40:ba:fd:2f:f0:d9:ce:09:ba:
         c5:5b:40:e1:0a:ae:bf:84:ab:72:46:94:b8:50:86:37:e9:fa:
         ea:bd:ec:c8:97:31:29:b6:8d:52:8b:dc:7d:ff:d4:e7:49:96:
         13:2c:03:f8:f3:72:26:36:e5:4b:50:66:07:86:7e:50:8d:f2:
         85:30:26:80:ab:92:f9:52:17:ae:67:c0:21:ac:a1:6f:96:91:
         34:9e:d5:04:ef:e9:29:93:34:56:bb:33:26:77:48:e3:e2:c9:
         f2:ef:4b:b0:3b:72:44:41:60:c7:53:a9:d9:75:8f:3e:9b:96:
         b2:00:8d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:30 2026 by rpki-client