This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138362e3138302e302e302f31352d3136203d3e203237383331.roa
File:                     3138362e3138302e302e302f31352d3136203d3e203237383331.roa (raw, json)
Hash identifier:          qwChwaDpDwk9DzkF2tjp//90sA1O1XNvtrPE6jF8Vtk=
Subject key identifier:   06:05:22:FC:BD:B0:8A:EC:2A:BC:57:28:A8:85:D0:B3:E7:BA:1D:FA
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       5F31F9BCCD8A4DC76FDFDA001F2B11402062A084
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138362e3138302e302e302f31352d3136203d3e203237383331.roa
Signing time:             Tue 06 Jan 2026 19:18:14 +0000
ROA not before:           Tue 06 Jan 2026 19:13:14 +0000
ROA not after:            Tue 05 Jan 2027 19:18:14 +0000
asID:                     27831
IP address blocks:        186.180.0.0/15 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 11:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:31:f9:bc:cd:8a:4d:c7:6f:df:da:00:1f:2b:11:40:20:62:a0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Jan  6 19:13:14 2026 GMT
            Not After : Jan  5 19:18:14 2027 GMT
        Subject: CN=060522FCBDB08AEC2ABC5728A885D0B3E7BA1DFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5a:61:6f:cd:97:83:72:10:88:8d:22:d2:cf:
                    d6:a0:81:cf:e0:1f:47:d5:83:a0:c4:5a:b5:bf:fc:
                    e7:6d:e9:3b:94:e4:6f:bb:0c:68:2e:38:79:e2:3d:
                    51:00:8d:12:0f:67:8f:00:d9:13:74:34:ae:39:92:
                    9f:a0:60:32:8a:7e:02:b7:3a:ea:b3:a2:d0:86:93:
                    f1:d6:64:9d:bc:11:0d:35:26:bf:5d:8d:e0:07:10:
                    62:eb:43:5a:ba:ee:83:88:89:e8:57:3f:dc:59:2c:
                    66:f7:1c:29:7d:60:f2:a3:84:24:30:01:7b:ac:13:
                    76:5f:be:d9:bf:f7:38:26:73:37:1d:03:1b:84:b6:
                    d9:b6:a3:6d:a2:90:b6:32:c6:ed:99:11:76:ad:0f:
                    09:b3:c1:61:66:09:bd:ea:4f:df:98:dd:27:33:ae:
                    2f:0b:01:72:ea:f6:7b:42:1c:89:81:5c:99:12:f1:
                    99:0c:ae:49:d3:59:e4:55:be:ac:1e:69:26:fa:c6:
                    bb:1e:9e:1b:c4:8d:62:74:97:c2:62:13:e1:66:c0:
                    d7:22:1e:b6:b3:af:f9:d8:18:e1:d4:8a:55:0c:ee:
                    2b:ca:24:c2:ac:23:4f:74:ce:1b:66:06:fe:df:32:
                    c3:2a:78:4b:cc:be:dd:42:f7:96:db:99:e7:4f:d7:
                    00:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:05:22:FC:BD:B0:8A:EC:2A:BC:57:28:A8:85:D0:B3:E7:BA:1D:FA
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138362e3138302e302e302f31352d3136203d3e203237383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.180.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         03:a1:06:bd:5d:c0:65:9c:8f:ca:7c:d4:7c:6b:8d:ea:6f:87:
         47:e0:e6:82:b5:79:29:77:2e:b3:b6:5e:07:50:c9:1b:8d:4f:
         e9:fb:e6:cf:39:a7:c7:ba:af:bc:55:b7:23:c6:9c:2d:27:a9:
         9f:1d:ae:bf:f2:05:d9:e4:00:83:eb:c1:d7:16:95:41:8d:e1:
         e5:d1:d6:91:0a:25:0e:a1:78:06:3d:50:89:b6:5b:97:77:14:
         72:88:69:fa:5a:44:42:e6:37:a5:ba:d1:38:07:6e:d8:c5:12:
         9e:3c:33:de:13:a2:1d:5e:52:19:63:0b:d7:fd:79:7a:f8:5d:
         fd:ae:f7:97:c5:0c:ff:45:b2:b8:a3:64:c5:78:cb:8a:99:5b:
         8f:5d:c7:57:93:23:d6:23:fc:76:a3:4e:2d:8e:9c:b9:7b:ee:
         ce:c1:5a:ec:c6:e1:40:50:7b:38:f4:25:e1:24:59:a7:16:3a:
         42:32:35:cf:c5:da:95:a7:31:66:60:3a:0f:c2:d0:63:f0:b0:
         92:be:82:43:1d:8e:07:19:91:f5:03:78:33:01:3a:bb:2a:ca:
         ab:60:0c:91:da:c1:35:d4:0d:23:ff:f3:6d:27:f9:f4:8a:12:
         47:84:4d:50:68:77:45:72:f2:33:60:6b:8a:29:68:22:0b:9e:
         14:f7:48:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:11:22 2026 by rpki-client