This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3138362e3134382e36342e302f32302d3234203d3e203232303830.roa
File:                     3138362e3134382e36342e302f32302d3234203d3e203232303830.roa (raw, json)
Hash identifier:          YykRucSgJaiY9xPWLYbLJRSv4pP5dZEwZnO620+7PCY=
Subject key identifier:   16:56:51:5B:CA:61:55:16:A7:DB:A8:2F:7C:C1:8B:C1:F5:ED:C8:13
Certificate issuer:       /CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
Certificate serial:       48217C3D26642CC7B637A31C9F52D69A60C29622
Authority key identifier: FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3138362e3134382e36342e302f32302d3234203d3e203232303830.roa
Signing time:             Tue 06 Jan 2026 19:19:14 +0000
ROA not before:           Tue 06 Jan 2026 19:14:14 +0000
ROA not after:            Tue 05 Jan 2027 19:19:14 +0000
asID:                     22080
IP address blocks:        186.148.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:21:7c:3d:26:64:2c:c7:b6:37:a3:1c:9f:52:d6:9a:60:c2:96:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC879FA78A3F6C19F0D1DD21F181B99326A05CEE
        Validity
            Not Before: Jan  6 19:14:14 2026 GMT
            Not After : Jan  5 19:19:14 2027 GMT
        Subject: CN=1656515BCA615516A7DBA82F7CC18BC1F5EDC813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b0:58:ca:d8:83:8e:ed:1b:33:24:03:b8:e8:
                    58:d5:23:96:16:ec:1b:48:7a:51:8e:49:b3:92:28:
                    e2:6d:13:94:00:f7:2b:c4:12:f3:36:cc:59:a5:e6:
                    b8:b4:da:7f:33:07:30:5d:2d:98:90:26:d1:bd:ec:
                    9a:6c:e6:79:87:03:52:38:3a:8d:1f:1c:40:53:80:
                    98:07:4a:1c:5e:de:df:b9:d6:d8:f8:14:98:f8:0a:
                    b9:71:f8:10:e8:06:be:5d:a6:94:ac:2c:2a:82:03:
                    6c:1f:d3:61:b6:88:2b:52:b2:05:58:7b:2d:18:55:
                    49:03:bc:ce:48:e9:f2:00:6f:74:56:7f:41:2b:1b:
                    1e:d6:79:09:b0:00:8f:17:87:67:e8:96:56:88:6f:
                    f2:d1:29:31:e7:10:e9:b5:d5:6d:b8:02:67:a4:1a:
                    fb:0b:53:00:5b:6a:57:13:92:cc:05:93:e5:89:b2:
                    de:69:48:45:02:05:dd:2c:cb:d5:a7:3a:d3:76:41:
                    bf:14:ed:08:db:39:a3:49:57:07:ea:02:78:bc:8b:
                    ab:d5:00:b4:8b:bf:00:8e:c1:ca:c6:6d:61:ad:58:
                    63:26:52:69:e1:f9:fb:64:e9:46:76:d1:ad:fb:9a:
                    2f:21:c6:9d:f4:a1:62:5c:15:ac:bb:2a:f0:c2:a2:
                    9a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:56:51:5B:CA:61:55:16:A7:DB:A8:2F:7C:C1:8B:C1:F5:ED:C8:13
            X509v3 Authority Key Identifier:
                keyid:FC:87:9F:A7:8A:3F:6C:19:F0:D1:DD:21:F1:81:B9:93:26:A0:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC879FA78A3F6C19F0D1DD21F181B99326A05CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D46CB7DFA160B96467F7BDBE2767D874345C7AC0553EC0855F4F6AE474FB34D/0/3138362e3134382e36342e302f32302d3234203d3e203232303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:21:3d:57:f1:d5:68:5e:f2:4b:b9:c6:97:bd:4a:32:95:9e:
         86:2d:76:c3:69:92:b8:71:03:a8:c7:b6:94:dc:32:14:fb:b7:
         15:26:9e:27:01:54:73:9c:12:7f:b7:55:c0:89:c4:2e:a4:a6:
         ec:ec:2e:81:64:f6:c6:8b:27:c9:55:a3:a0:b6:aa:1e:ef:b9:
         9a:29:64:53:60:7e:d7:79:22:0d:1d:57:e2:04:16:4e:ef:b1:
         5f:7e:16:9d:0c:be:96:fe:67:5b:f2:ee:8e:ec:b7:00:6e:81:
         fd:42:1a:af:d9:4e:b4:a5:ef:5f:38:43:cd:26:18:4b:e6:67:
         8a:9c:3a:a3:45:d4:1c:1a:ee:9f:31:04:d3:45:2d:3c:bd:52:
         bb:61:8d:97:95:14:0b:db:42:e2:46:25:9c:0a:28:6e:6b:d7:
         a4:1f:26:6f:66:c7:43:16:45:a8:0b:6a:2b:fc:4a:d1:4e:4b:
         64:93:da:0a:b4:8a:c5:b4:ca:46:76:4f:97:ab:46:51:96:f2:
         87:05:04:de:61:9c:20:6f:bf:f5:39:7f:a0:42:89:69:07:2c:
         14:f1:5e:52:dd:0f:a0:30:9f:05:a0:9c:85:bd:34:fe:e5:8a:
         d3:85:34:53:ac:c1:86:21:51:e9:d9:a3:e2:95:5d:d6:74:4b:
         d7:eb:9b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:59:04 2026 by rpki-client