This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2656BDCB2AB10168D929C9F36580D006AAA49F4B8225370FF0EBA7308DC548C8/0/3138362e3134382e3231322e302f32322d3234203d3e203532333432.roa
File:                     3138362e3134382e3231322e302f32322d3234203d3e203532333432.roa (raw, json)
Hash identifier:          o0wT1EbNfmBYU7a5aiDIg6GuUJYTE11hqnj45uQxF/8=
Subject key identifier:   B6:03:65:73:D5:7B:B4:B0:49:3A:42:CF:E4:47:AD:72:AA:B8:A0:42
Certificate issuer:       /CN=0D34B4304BB923E80757FDED7508C224FEF6ED84
Certificate serial:       2946B65ABE03F89A53BD0A874735313ABCBE5BA7
Authority key identifier: 0D:34:B4:30:4B:B9:23:E8:07:57:FD:ED:75:08:C2:24:FE:F6:ED:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D34B4304BB923E80757FDED7508C224FEF6ED84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2656BDCB2AB10168D929C9F36580D006AAA49F4B8225370FF0EBA7308DC548C8/0/3138362e3134382e3231322e302f32322d3234203d3e203532333432.roa
Signing time:             Tue 06 Jan 2026 18:57:36 +0000
ROA not before:           Tue 06 Jan 2026 18:52:36 +0000
ROA not after:            Tue 05 Jan 2027 18:57:36 +0000
asID:                     52342
IP address blocks:        186.148.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2656BDCB2AB10168D929C9F36580D006AAA49F4B8225370FF0EBA7308DC548C8/0/0D34B4304BB923E80757FDED7508C224FEF6ED84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2656BDCB2AB10168D929C9F36580D006AAA49F4B8225370FF0EBA7308DC548C8/0/0D34B4304BB923E80757FDED7508C224FEF6ED84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D34B4304BB923E80757FDED7508C224FEF6ED84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:46:b6:5a:be:03:f8:9a:53:bd:0a:87:47:35:31:3a:bc:be:5b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D34B4304BB923E80757FDED7508C224FEF6ED84
        Validity
            Not Before: Jan  6 18:52:36 2026 GMT
            Not After : Jan  5 18:57:36 2027 GMT
        Subject: CN=B6036573D57BB4B0493A42CFE447AD72AAB8A042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:98:aa:f2:a4:b6:e8:6a:2d:5a:be:64:ec:
                    e1:6b:a1:cf:94:ec:78:4e:7c:57:8d:05:46:ee:68:
                    51:61:a9:a7:b8:fe:f3:e1:38:bf:bc:8d:c7:5f:f7:
                    e9:50:4c:34:53:19:0c:ec:6e:61:ea:8d:e8:a5:fc:
                    00:39:14:82:dd:97:89:65:49:e7:b1:02:d4:f2:a1:
                    92:55:c6:22:26:7c:f3:a9:88:ce:25:3c:c6:80:90:
                    7d:63:44:d3:5c:81:6e:22:aa:19:9f:0b:c0:37:41:
                    35:d5:15:d7:bd:5a:b1:28:d2:c6:8b:d5:61:ad:ea:
                    43:0e:61:5e:11:d8:fd:d6:3c:69:53:5c:67:a7:89:
                    e7:1e:1f:ea:6e:7c:ad:11:a9:3e:1a:92:61:c3:ff:
                    1c:cd:3c:52:fe:df:29:48:13:14:bd:ae:e8:2a:e3:
                    62:3c:f1:77:aa:76:79:d2:a0:bb:34:21:3d:a4:79:
                    86:76:09:cd:d5:5c:3a:17:0c:b8:ff:7d:bd:29:f3:
                    2a:24:12:dd:04:85:cd:2c:53:b8:23:29:07:42:7b:
                    bc:fe:ed:b3:62:5e:4b:d2:a7:78:d8:54:2b:b4:c4:
                    cf:e6:0b:21:aa:b7:77:a4:86:90:21:4a:04:0e:bd:
                    66:e5:47:c6:7c:de:2b:80:f5:76:ea:35:b0:20:8b:
                    f7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:03:65:73:D5:7B:B4:B0:49:3A:42:CF:E4:47:AD:72:AA:B8:A0:42
            X509v3 Authority Key Identifier:
                keyid:0D:34:B4:30:4B:B9:23:E8:07:57:FD:ED:75:08:C2:24:FE:F6:ED:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2656BDCB2AB10168D929C9F36580D006AAA49F4B8225370FF0EBA7308DC548C8/0/0D34B4304BB923E80757FDED7508C224FEF6ED84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D34B4304BB923E80757FDED7508C224FEF6ED84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2656BDCB2AB10168D929C9F36580D006AAA49F4B8225370FF0EBA7308DC548C8/0/3138362e3134382e3231322e302f32322d3234203d3e203532333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:f0:f8:78:4b:1a:f9:76:36:f2:06:db:b1:6a:1e:de:f3:39:
         ce:03:6a:b5:38:c3:68:f4:ea:22:2e:ed:4d:8a:d1:8e:dc:8a:
         6c:c9:a7:0c:55:9c:11:56:fc:27:01:c4:c3:a6:d0:bc:7c:5c:
         5b:6b:7d:bd:d2:5c:9a:f7:0b:03:ed:42:84:5c:45:83:43:46:
         bf:8f:00:b9:96:88:fc:29:cc:57:a7:1b:cc:ba:03:14:8b:d7:
         02:5e:52:90:b5:37:3b:0c:84:df:02:48:b1:26:ff:4d:8d:9e:
         3d:48:d5:ef:a3:ea:31:fc:dc:a4:02:76:c0:e6:8a:c2:f2:7b:
         2d:dc:62:a6:77:5c:63:71:e6:44:57:20:bb:d4:22:8e:b6:24:
         07:4d:06:0e:22:fe:cf:5c:c6:d0:0e:eb:07:03:b6:f3:87:20:
         c8:aa:72:00:ac:7a:54:09:13:da:62:ce:09:4c:40:c8:72:39:
         4e:90:74:4b:64:53:7d:74:37:e5:11:c6:8f:d1:37:8a:f7:fd:
         4e:eb:fd:4f:10:61:cc:f0:96:5e:3a:dd:ac:9e:f8:4e:24:8f:
         29:63:bb:ac:ad:1e:90:85:ac:f1:98:50:e8:55:27:63:b5:5f:
         4b:f0:0b:90:36:5f:d7:d4:62:05:8a:3f:c0:a5:4f:ef:42:9d:
         74:aa:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:32 2026 by rpki-client