This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138362e32362e302e302f31382d3230203d3e203237383839.roa
File:                     3138362e32362e302e302f31382d3230203d3e203237383839.roa (raw, json)
Hash identifier:          /n9hj3ipIg+PRACQyfumN6QCJlo5Oy1ccxp44kS0eAw=
Subject key identifier:   13:94:15:94:2B:92:9A:15:86:AE:21:88:DF:AE:C9:8A:27:A8:82:EF
Certificate issuer:       /CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
Certificate serial:       44BF755079DC32F5E3A4841AB4F1B4539DF28BBE
Authority key identifier: 3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138362e32362e302e302f31382d3230203d3e203237383839.roa
Signing time:             Tue 06 Jan 2026 19:28:57 +0000
ROA not before:           Tue 06 Jan 2026 19:23:57 +0000
ROA not after:            Tue 05 Jan 2027 19:28:57 +0000
asID:                     27889
IP address blocks:        186.26.0.0/18 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:bf:75:50:79:dc:32:f5:e3:a4:84:1a:b4:f1:b4:53:9d:f2:8b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
        Validity
            Not Before: Jan  6 19:23:57 2026 GMT
            Not After : Jan  5 19:28:57 2027 GMT
        Subject: CN=139415942B929A1586AE2188DFAEC98A27A882EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:58:91:ff:ae:50:15:5c:9d:28:67:c8:94:54:
                    0c:19:22:67:72:3d:87:24:d3:d6:a1:f2:a3:4e:62:
                    33:c1:c1:c7:34:d3:1a:fe:39:96:a9:6f:fe:c0:c6:
                    86:84:e4:0e:44:07:77:18:0d:44:39:a8:2d:2d:e0:
                    57:ef:92:66:c0:8e:bb:47:0e:0d:3a:4d:32:df:d4:
                    fe:0b:e7:40:2b:1c:01:d4:26:f0:a1:d0:19:33:20:
                    84:cc:ae:53:a6:3c:1c:4d:00:95:08:42:00:2f:07:
                    e0:15:0c:f8:92:27:b6:82:b6:c4:5b:91:1c:2a:a0:
                    a1:39:55:59:b3:b7:15:21:1c:3d:db:f3:9f:65:5a:
                    5c:fe:89:10:31:22:0c:d9:c5:99:bd:c2:9a:00:52:
                    77:06:72:fe:73:97:21:dc:2e:38:a7:87:2e:90:fd:
                    4c:72:03:a1:5b:43:48:c9:6e:ca:99:1c:a5:5c:cf:
                    80:7f:d7:f3:c9:c9:c4:24:e1:4a:f6:bd:d5:aa:df:
                    a9:51:2b:03:b4:07:73:2a:9a:46:21:b3:83:3f:68:
                    a9:a8:ea:67:56:97:b5:4c:a4:6a:4f:77:ea:0d:5c:
                    c6:a0:a1:03:3c:3e:25:3d:a4:1b:61:b4:12:c8:7b:
                    08:51:18:d9:27:17:2f:71:a7:2d:de:20:e9:f8:55:
                    1f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:94:15:94:2B:92:9A:15:86:AE:21:88:DF:AE:C9:8A:27:A8:82:EF
            X509v3 Authority Key Identifier:
                keyid:3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138362e32362e302e302f31382d3230203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         37:da:3a:86:d6:85:f0:21:7f:2d:dc:77:43:f1:da:c1:78:c0:
         8c:65:8a:57:66:13:3d:9e:52:66:c3:1b:a7:44:5b:54:0f:b9:
         77:03:51:66:6f:c2:0f:45:06:d2:85:5c:b5:58:c6:c4:e1:0b:
         b0:a5:6e:a4:c0:e9:0a:81:e2:2f:c3:35:f6:6c:75:b0:e7:4f:
         76:76:ef:16:cc:db:52:32:30:f9:3e:e5:07:59:5a:42:e8:55:
         f1:66:89:e4:06:b3:c3:04:6a:86:51:99:c9:c2:91:9b:0d:22:
         81:62:86:c9:62:e8:82:8d:0e:39:cf:40:db:54:37:77:6e:57:
         91:3c:ac:02:6b:16:3c:8a:f8:86:f9:a3:7b:15:47:0c:3d:7d:
         03:7b:c8:ab:71:d6:4c:d2:59:d2:84:1e:8a:87:4f:9a:b4:94:
         f1:65:17:33:4a:75:1d:04:b2:17:18:56:7d:45:07:44:d3:a4:
         34:c7:3e:07:29:17:e4:cc:3f:8e:5e:8e:be:2f:08:d1:4e:ad:
         75:42:5a:b3:45:c8:95:e6:a6:9d:cf:cb:fb:df:fc:eb:d3:67:
         fa:ec:ab:8c:fc:9f:ec:32:82:9a:f7:8b:0c:a4:bb:8c:0c:3d:
         c4:f2:d1:9d:0a:cd:18:e9:34:4a:ea:79:fe:5a:01:17:68:98:
         ba:f1:db:57
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIURL91UHncMvXjpIQatPG0U53yi74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QyQzA2NUM5NzRFNzAwQjEzNjlFREY0QURCRTFCRDEx
MjcyQjA5QTAeFw0yNjAxMDYxOTIzNTdaFw0yNzAxMDUxOTI4NTdaMDMxMTAvBgNV
BAMTKDEzOTQxNTk0MkI5MjlBMTU4NkFFMjE4OERGQUVDOThBMjdBODgyRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRWJH/rlAVXJ0oZ8iUVAwZImdy
PYck09ah8qNOYjPBwcc00xr+OZapb/7AxoaE5A5EB3cYDUQ5qC0t4FfvkmbAjrtH
Dg06TTLf1P4L50ArHAHUJvCh0BkzIITMrlOmPBxNAJUIQgAvB+AVDPiSJ7aCtsRb
kRwqoKE5VVmztxUhHD3b859lWlz+iRAxIgzZxZm9wpoAUncGcv5zlyHcLjinhy6Q
/UxyA6FbQ0jJbsqZHKVcz4B/1/PJycQk4Ur2vdWq36lRKwO0B3MqmkYhs4M/aKmo
6mdWl7VMpGpPd+oNXMagoQM8PiU9pBthtBLIewhRGNknFy9xpy3eIOn4VR8lAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUE5QVlCuSmhWGriGI367Jiieogu8wHwYDVR0j
BBgwFoAUPSwGXJdOcAsTae30rb4b0RJysJowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjE3NDg3OEY2NUMzMDk5REVFMjZFQTI5NjUxODVERDJD
MDEwMTUzQzVEQzM0MzcyM0I1MEE0MDYwQThBMEVBLzAvM0QyQzA2NUM5NzRFNzAw
QjEzNjlFREY0QURCRTFCRDExMjcyQjA5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDJDMDY1Qzk3NEU3MDBCMTM2
OUVERjRBREJFMUJEMTEyNzJCMDlBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUYxNzQ4NzhGNjVDMzA5OURFRTI2RUEyOTY1MTg1REQyQzAxMDE1M0M1
REMzNDM3MjNCNTBBNDA2MEE4QTBFQS8wLzMxMzgzNjJlMzIzNjJlMzAyZTMwMmYz
MTM4MmQzMjMwMjAzZDNlMjAzMjM3MzgzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGuhoAMA0GCSqG
SIb3DQEBCwUAA4IBAQA32jqG1oXwIX8t3HdD8drBeMCMZYpXZhM9nlJmwxunRFtU
D7l3A1Fmb8IPRQbShVy1WMbE4QuwpW6kwOkKgeIvwzX2bHWw5092du8WzNtSMjD5
PuUHWVpC6FXxZonkBrPDBGqGUZnJwpGbDSKBYobJYuiCjQ45z0DbVDd3bleRPKwC
axY8iviG+aN7FUcMPX0De8ircdZM0lnShB6Kh0+atJTxZRczSnUdBLIXGFZ9RQdE
06Q0xz4HKRfkzD+OXo6+LwjRTq11QlqzRciV5qadz8v73/zr02f67KuM/J/sMoKa
94sMpLuMDD3E8tGdCs0Y6TRK6nn+WgEXaJi68dtX
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:07:55 2026 by rpki-client