This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138362e3139302e3139302e302f32332d3234203d3e203237393837.roa
File:                     3138362e3139302e3139302e302f32332d3234203d3e203237393837.roa (raw, json)
Hash identifier:          zkdLjqUrGFrPPiSuU2iqewGmaj1SItXhL2x/9uDFALw=
Subject key identifier:   A2:38:28:CD:A8:39:10:5A:77:80:9D:53:8B:80:E7:0E:00:7B:11:60
Certificate issuer:       /CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
Certificate serial:       17161D0925B2C8CEC0E1E2E7F3BBDD9398B7D4F7
Authority key identifier: 13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138362e3139302e3139302e302f32332d3234203d3e203237393837.roa
Signing time:             Mon 05 Jan 2026 18:40:00 +0000
ROA not before:           Mon 05 Jan 2026 18:35:00 +0000
ROA not after:            Mon 04 Jan 2027 18:40:00 +0000
asID:                     27987
IP address blocks:        186.190.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:16:1d:09:25:b2:c8:ce:c0:e1:e2:e7:f3:bb:dd:93:98:b7:d4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
        Validity
            Not Before: Jan  5 18:35:00 2026 GMT
            Not After : Jan  4 18:40:00 2027 GMT
        Subject: CN=A23828CDA839105A77809D538B80E70E007B1160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:b9:ed:50:7b:1e:77:fd:3d:1d:26:48:bc:
                    25:13:b8:cd:24:5e:28:3b:a2:b5:2a:bc:fb:4d:e2:
                    e3:ca:b8:68:ba:52:be:d5:e9:71:72:0e:28:9c:4a:
                    91:af:f8:fe:0b:5a:d2:77:c3:a3:0b:46:f7:cc:28:
                    99:46:1c:4d:62:d8:2b:22:45:e4:2d:e1:be:a7:34:
                    ec:3b:ee:e3:f4:b6:25:34:32:c8:64:0e:41:c6:c6:
                    24:19:99:7b:2d:f6:c8:35:13:3c:7a:1e:da:d1:7d:
                    38:aa:8e:eb:e9:d0:83:e3:e7:f5:1f:8c:87:e6:28:
                    c0:b6:41:4c:37:12:0b:43:e1:79:1e:8d:16:7b:09:
                    b2:17:09:5f:60:f9:57:97:28:f3:24:b3:bf:30:ea:
                    48:57:06:88:4a:a8:c1:e5:56:ff:78:96:9c:71:fb:
                    27:ab:b3:51:6e:b4:8c:df:db:4a:96:54:2a:61:62:
                    14:b3:33:6b:43:c5:b7:fc:2c:4f:4f:ae:06:ff:1c:
                    65:44:56:85:b9:16:ce:31:8b:0b:8c:b6:60:9d:b2:
                    41:bb:4c:e1:b8:af:88:fc:8a:a5:33:f1:79:5d:ee:
                    ba:93:88:72:4a:93:7b:61:b4:3d:64:70:ad:f6:d4:
                    16:63:c7:f8:d8:47:f5:ac:be:fd:4d:e4:99:f7:12:
                    04:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:38:28:CD:A8:39:10:5A:77:80:9D:53:8B:80:E7:0E:00:7B:11:60
            X509v3 Authority Key Identifier:
                keyid:13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138362e3139302e3139302e302f32332d3234203d3e203237393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:56:2e:90:a8:f9:2a:12:d5:ba:73:44:da:cf:89:fc:fa:fb:
         5d:5e:98:d8:c9:44:e5:cc:97:bf:2d:29:5e:e4:1c:f3:05:e0:
         34:6a:68:dc:83:53:72:c2:ab:91:2b:21:6e:a3:80:36:67:56:
         cd:3d:eb:c0:39:89:72:82:6c:8f:07:ca:77:df:79:7c:e0:7a:
         d0:b5:db:23:d1:ba:13:6b:98:73:9d:e4:cd:bc:66:f9:27:04:
         21:e1:06:69:f9:87:10:45:ae:3c:d1:09:1a:10:df:5d:b7:af:
         4a:a3:72:38:ea:63:e6:1c:49:5e:6f:a4:26:03:d5:88:da:3b:
         71:fe:e1:c0:fc:c2:6b:cc:83:d1:6c:4f:01:b6:61:11:d6:57:
         64:29:27:77:80:f4:e1:51:9e:00:de:79:a6:3f:04:24:8d:57:
         db:c3:84:86:eb:ed:33:a5:ba:12:a4:ac:f7:67:bf:42:50:8c:
         78:f3:58:be:71:c5:c0:40:c9:24:2d:86:fe:73:fc:01:6d:97:
         a5:19:19:c1:a0:d4:03:a3:e6:34:97:b1:70:a8:47:0c:69:b4:
         95:86:88:ca:4f:27:95:c5:a8:35:d8:01:6c:db:db:bd:d2:12:
         9d:2a:97:a9:18:2f:bd:f2:66:24:ff:29:60:84:fe:03:0d:d3:
         ee:fc:79:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:52:43 2026 by rpki-client