This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138362e3139302e3138382e302f32332d3234203d3e20323634383330.roa
File:                     3138362e3139302e3138382e302f32332d3234203d3e20323634383330.roa (raw, json)
Hash identifier:          zlm/8KohefsePFba4CpQx4RPiZzVb35xcxfqP2TFK58=
Subject key identifier:   86:B4:CD:C1:13:67:33:04:4D:B4:FC:F5:47:D2:7E:7F:4E:53:BA:1A
Certificate issuer:       /CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
Certificate serial:       20581188A48F4E8D51D523C05A1CC397F7C47D8C
Authority key identifier: 13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138362e3139302e3138382e302f32332d3234203d3e20323634383330.roa
Signing time:             Tue 06 Jan 2026 18:59:29 +0000
ROA not before:           Tue 06 Jan 2026 18:54:29 +0000
ROA not after:            Tue 05 Jan 2027 18:59:29 +0000
asID:                     264830
IP address blocks:        186.190.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:58:11:88:a4:8f:4e:8d:51:d5:23:c0:5a:1c:c3:97:f7:c4:7d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
        Validity
            Not Before: Jan  6 18:54:29 2026 GMT
            Not After : Jan  5 18:59:29 2027 GMT
        Subject: CN=86B4CDC1136733044DB4FCF547D27E7F4E53BA1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:3c:50:6f:88:7a:67:f3:ae:ef:70:8f:25:
                    90:c3:84:ca:18:68:60:d1:2c:07:9c:26:f7:6a:40:
                    2c:7b:ad:9d:a5:04:2b:cd:61:80:8d:08:f5:e6:52:
                    ce:80:d7:22:95:51:6e:dd:56:db:b5:14:d7:ab:bf:
                    01:bb:3b:e4:ed:97:bc:00:9d:04:9b:e7:7a:f1:cc:
                    3c:03:b0:03:5b:66:ae:20:f7:bc:e1:5e:10:18:3f:
                    52:50:a5:4b:1a:d7:34:fb:36:e8:51:25:c9:f0:8c:
                    f1:9e:5d:22:eb:ec:3a:fc:75:67:eb:49:07:17:29:
                    79:00:23:4d:10:95:3a:3c:d0:3a:72:47:13:ad:21:
                    5c:ee:d9:ca:7f:bc:9b:59:95:66:96:62:a7:ff:45:
                    e4:ba:27:35:ec:ee:36:cb:68:27:f8:8d:3f:61:78:
                    b9:4e:a4:bb:e7:5c:10:36:3e:06:99:46:d4:df:77:
                    6c:ca:c7:2f:4e:85:2b:f8:3d:51:2a:3a:ee:2a:c3:
                    a4:17:d8:80:85:65:29:96:08:12:b2:a8:47:ca:a9:
                    d1:68:18:b8:ec:af:3e:ef:25:0a:c7:c8:44:62:04:
                    10:08:03:eb:1c:d0:bb:4e:cf:98:e6:78:be:e1:93:
                    21:b6:03:17:f8:07:2c:00:83:b7:88:58:a8:47:b1:
                    e1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B4:CD:C1:13:67:33:04:4D:B4:FC:F5:47:D2:7E:7F:4E:53:BA:1A
            X509v3 Authority Key Identifier:
                keyid:13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138362e3139302e3138382e302f32332d3234203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:ed:20:f8:a9:51:f3:ee:28:6a:52:c6:e4:7b:f5:f1:95:01:
         c3:82:32:53:7b:2d:51:a7:c6:2e:cb:3d:f6:5f:25:6e:0e:7c:
         4f:a7:84:8d:38:a3:78:1f:ab:65:bf:df:2d:a7:6f:17:bb:e4:
         0b:d6:c7:89:d6:fe:54:64:06:6b:b6:31:e3:43:48:7a:58:a9:
         59:a1:12:cc:c4:47:08:42:2f:56:3f:52:69:14:8d:2a:49:0f:
         66:34:67:63:31:8b:e7:6c:a4:22:0a:64:06:5e:89:48:28:d1:
         8c:8f:30:d6:da:bd:53:a3:1f:23:17:dd:60:29:0c:25:5d:98:
         61:6b:33:a1:7a:4f:0b:cb:91:81:b6:82:8f:10:4b:58:84:c6:
         45:42:9a:fb:cc:4b:36:42:53:c6:7a:fc:4b:34:6f:01:34:f5:
         c5:9b:23:1e:5f:9d:85:88:06:eb:03:6e:01:67:32:bb:3e:3c:
         54:3e:56:63:cc:2d:12:a8:df:a9:05:4b:18:cf:21:76:37:e5:
         aa:55:63:b5:d6:5e:11:43:71:4d:e8:cb:47:24:4b:46:74:d0:
         21:27:2f:7e:e0:65:d2:86:14:87:9d:35:79:6a:26:9e:ce:82:
         97:bb:48:2b:12:77:34:16:e8:cd:65:92:be:ba:20:b5:20:fa:
         a0:7b:ef:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:02 2026 by rpki-client