This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3232342e302f31392d3234203d3e203532323238.roa
File:                     3138362e3135392e3232342e302f31392d3234203d3e203532323238.roa (raw, json)
Hash identifier:          bkYfmyAnAWfbvLtrSAILgYaf5pO4A/cw331ettfrbyg=
Subject key identifier:   BE:FD:D8:04:02:6F:83:F6:E8:C4:24:07:87:0C:41:39:5A:78:BE:65
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       45F5B90DB7B8C79B4F0FFFD6AA9A2F7E7228DC3D
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3232342e302f31392d3234203d3e203532323238.roa
Signing time:             Tue 06 Jan 2026 19:00:10 +0000
ROA not before:           Tue 06 Jan 2026 18:55:10 +0000
ROA not after:            Tue 05 Jan 2027 19:00:10 +0000
asID:                     52228
IP address blocks:        186.159.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f5:b9:0d:b7:b8:c7:9b:4f:0f:ff:d6:aa:9a:2f:7e:72:28:dc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Jan  6 18:55:10 2026 GMT
            Not After : Jan  5 19:00:10 2027 GMT
        Subject: CN=BEFDD804026F83F6E8C42407870C41395A78BE65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:95:b3:eb:f6:74:74:49:02:21:f5:54:0e:53:
                    80:95:64:e2:f0:36:c9:d6:30:2d:a2:c6:11:7e:96:
                    ea:9a:69:8c:ce:96:36:c8:f5:3d:73:ac:bc:f9:7d:
                    7f:be:df:f0:ab:74:42:fb:c4:8e:ad:b4:93:91:77:
                    b9:20:07:bb:fc:75:ee:06:fc:8a:aa:8c:7e:5a:0c:
                    9b:d3:38:af:43:0b:fe:ce:f0:6e:30:83:e3:ad:d9:
                    97:31:d0:09:98:9e:8b:5c:db:a8:57:5c:f5:da:98:
                    34:67:dc:d1:6e:8e:91:73:cd:74:a4:9e:3d:9e:16:
                    6e:8e:bc:36:64:49:a5:55:09:37:26:4f:a0:56:97:
                    30:df:fc:32:ce:2c:15:c9:a7:b6:1b:f2:bd:37:73:
                    7f:a3:59:9d:03:e2:e8:35:ec:71:20:f0:89:4f:09:
                    ee:d8:86:30:ed:da:9b:ee:cb:2c:69:0c:bf:03:d5:
                    39:84:c2:ff:33:a7:20:ac:c4:d8:7a:48:7b:10:1d:
                    8a:b1:72:66:2d:8a:03:48:2f:5e:ed:a4:5a:43:01:
                    59:1e:54:df:ec:78:07:bc:e8:b6:9a:91:a5:b1:53:
                    e4:1e:a6:13:1d:de:6c:1b:ec:f3:44:4d:44:42:85:
                    6d:1a:9f:9a:c1:bb:ed:78:3f:33:4e:7b:9f:00:1f:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FD:D8:04:02:6F:83:F6:E8:C4:24:07:87:0C:41:39:5A:78:BE:65
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e3135392e3232342e302f31392d3234203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:d6:d9:3f:c0:5e:ea:06:a5:54:51:ee:b0:cb:b4:51:e3:
         02:8f:90:9d:08:e8:1e:ea:f6:2a:44:c5:1b:1d:ec:0e:93:31:
         66:0f:2c:34:b7:56:78:23:4e:a7:b7:e9:56:3c:24:60:2c:4f:
         ad:96:af:e7:1f:eb:5a:3e:35:af:91:74:56:9e:69:59:15:13:
         04:7e:63:68:17:5d:1a:e6:d7:44:b5:ef:e8:b0:cf:28:33:d0:
         e2:fa:6e:6e:84:20:f0:4d:14:61:ff:67:86:7f:52:61:65:a8:
         34:9e:cd:7c:9c:c0:7e:8f:eb:36:e8:57:bc:16:57:7d:95:10:
         c0:d9:23:9b:0c:f7:6e:1d:1a:ea:0e:c8:85:89:31:bb:f7:e1:
         5c:45:43:14:c3:b6:c7:3d:b7:9b:7f:e2:1f:e8:5a:fc:0a:d6:
         57:d1:d6:bb:7c:8c:9c:12:ed:ad:58:8d:81:d0:f6:04:01:69:
         61:29:8a:d8:3f:97:df:e6:6d:2c:6a:7b:5e:88:ca:46:77:00:
         51:5e:bd:1c:ed:71:0a:66:9d:57:6a:11:30:aa:82:a4:35:9d:
         28:b5:19:19:5f:85:33:2f:cd:40:41:a1:ed:07:3f:2b:e9:d5:
         0d:40:bb:31:83:7e:7a:72:06:84:63:c0:f7:65:a1:16:c0:59:
         c8:fb:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:44 2026 by rpki-client