This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e3234382e302f32312d3234203d3e203237373733.roa
File:                     3138362e33322e3234382e302f32312d3234203d3e203237373733.roa (raw, json)
Hash identifier:          CDoT1U7R4jNTIIyTwD1GOhRlFF+2Ebzfxwl2ucNqN2g=
Subject key identifier:   B3:2A:A6:5D:33:92:E3:FE:0F:74:5B:33:E7:25:5A:CF:DF:19:F0:41
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       297483A97E52E6ADDA7E19F2DC07E0DE6265EA60
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e3234382e302f32312d3234203d3e203237373733.roa
Signing time:             Tue 06 Jan 2026 20:53:23 +0000
ROA not before:           Tue 06 Jan 2026 20:48:23 +0000
ROA not after:            Tue 05 Jan 2027 20:53:23 +0000
asID:                     27773
IP address blocks:        186.32.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:74:83:a9:7e:52:e6:ad:da:7e:19:f2:dc:07:e0:de:62:65:ea:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Jan  6 20:48:23 2026 GMT
            Not After : Jan  5 20:53:23 2027 GMT
        Subject: CN=B32AA65D3392E3FE0F745B33E7255ACFDF19F041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e4:00:68:46:55:73:ac:b7:00:92:40:ec:66:
                    54:e4:69:9b:3f:3c:6e:8f:e8:88:09:92:53:5b:86:
                    83:40:da:bc:1f:64:ad:61:be:49:e1:4a:2b:e3:fd:
                    4e:a5:14:ca:5e:73:7f:89:fe:14:ab:50:54:31:50:
                    ee:a0:a8:2f:e6:25:a1:c0:51:a4:13:52:b3:f4:24:
                    ac:1e:35:ce:e8:e6:51:17:e6:6c:09:96:b7:76:57:
                    dc:01:3f:d8:76:12:dd:dd:8b:9d:39:1e:91:0b:d3:
                    e5:e4:5f:e2:78:10:17:7d:63:37:d5:74:83:7c:23:
                    90:e0:20:12:9c:ee:c6:aa:34:50:0d:0d:4f:ec:a7:
                    e6:4b:e4:34:77:da:c4:83:f9:8d:dd:74:42:60:aa:
                    b8:e5:e6:54:44:7c:60:63:24:12:ac:9a:ec:bd:29:
                    1c:b8:d3:55:4e:24:65:8a:d5:91:17:26:25:94:1c:
                    74:7c:6e:46:48:70:69:8d:4c:d2:c9:b0:09:d8:b5:
                    36:3b:fb:bd:d8:c3:b6:c6:1c:95:07:24:d3:ce:1f:
                    a2:40:ce:32:8e:76:dc:29:e8:4c:95:b7:1b:f4:b8:
                    bd:0d:c0:d9:80:04:01:e2:75:72:47:8f:c6:55:e3:
                    b3:4e:cd:32:cc:7f:65:e0:09:52:e6:f9:c0:3a:0b:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2A:A6:5D:33:92:E3:FE:0F:74:5B:33:E7:25:5A:CF:DF:19:F0:41
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e3234382e302f32312d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:e0:27:1e:d7:31:a1:12:a9:f2:90:8a:19:23:63:f9:49:f9:
         59:26:cc:f9:0d:5b:8d:cc:c1:5b:93:3f:39:e8:00:52:f5:02:
         f4:23:06:ee:1e:d1:6e:f6:04:b0:5d:73:cc:2c:c3:0c:77:21:
         75:d7:8f:73:6f:36:70:8a:1b:ae:64:dc:37:e7:ec:20:fa:44:
         7e:63:63:d1:f3:8e:0a:27:ba:59:e4:a2:0f:d0:72:19:8e:a4:
         08:5c:2a:d5:03:ef:99:35:c0:08:63:e6:02:0d:42:e6:ed:06:
         92:32:61:70:04:de:0c:77:24:bb:70:e9:2f:ab:07:57:52:4d:
         f9:af:18:41:dc:aa:e7:a3:e2:e2:14:ba:64:ee:a5:5f:8e:bc:
         2f:b9:5a:fa:1a:e9:53:69:f9:ae:65:91:b4:8f:c6:7a:89:c9:
         29:a3:ff:31:67:98:ae:5c:6a:5f:38:94:49:3b:c7:4c:f4:06:
         e5:8e:e4:43:85:33:2a:9f:a4:4c:0f:d9:28:f5:5c:2e:43:6e:
         70:3b:b4:f9:f8:42:b0:1f:23:d6:26:22:3e:81:ad:4f:fb:e6:
         25:05:a1:4f:26:9a:46:fe:a1:3f:ab:57:02:13:f9:4f:42:16:
         08:60:2b:67:cb:13:9c:2f:57:f8:af:26:0a:a1:d8:6c:81:56:
         61:70:e8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:53 2026 by rpki-client