This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3138362e3134382e3131322e302f32312d3234203d3e203532333634.roa
File:                     3138362e3134382e3131322e302f32312d3234203d3e203532333634.roa (raw, json)
Hash identifier:          Ypvu5FirYLY/Q5TSGOon5QCHoAxQBlXFEJ16M1Y8F08=
Subject key identifier:   56:65:45:1D:3B:29:02:DD:CB:2F:F5:7C:DC:65:FC:F6:46:6C:30:5C
Certificate issuer:       /CN=EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0
Certificate serial:       479B953237BA2D814581646D25C5AD1A39013C12
Authority key identifier: EF:D4:49:AF:84:74:AF:56:3F:E3:79:AD:BD:4F:72:EA:F2:CA:1D:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3138362e3134382e3131322e302f32312d3234203d3e203532333634.roa
Signing time:             Tue 06 Jan 2026 19:46:53 +0000
ROA not before:           Tue 06 Jan 2026 19:41:53 +0000
ROA not after:            Tue 05 Jan 2027 19:46:53 +0000
asID:                     52364
IP address blocks:        186.148.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9b:95:32:37:ba:2d:81:45:81:64:6d:25:c5:ad:1a:39:01:3c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0
        Validity
            Not Before: Jan  6 19:41:53 2026 GMT
            Not After : Jan  5 19:46:53 2027 GMT
        Subject: CN=5665451D3B2902DDCB2FF57CDC65FCF6466C305C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:4f:3f:7e:05:57:2a:cc:b3:f0:32:b4:b2:
                    7d:df:fd:98:16:a0:ff:9c:89:df:5d:72:24:42:c1:
                    46:ad:a2:1b:46:59:60:d8:60:3f:63:ce:fc:3b:81:
                    06:7a:52:77:58:db:25:55:76:f8:e7:71:96:90:a3:
                    db:d2:7e:a4:52:bd:5c:c9:57:8b:b2:e1:00:8f:03:
                    87:1c:59:fe:48:3e:be:08:06:c9:7a:d9:7b:dc:f6:
                    aa:34:b7:79:2e:db:7d:bc:35:f9:24:76:be:b7:d9:
                    54:95:fd:84:27:10:3d:5c:3a:55:c0:04:b4:97:11:
                    f1:13:ff:b1:e3:ba:e8:04:60:c2:07:25:b2:07:08:
                    39:91:dc:b9:95:63:16:30:17:3e:5a:87:19:f9:60:
                    25:9e:95:ef:3c:38:63:d5:a9:19:d5:6d:54:14:3e:
                    cf:80:e9:84:2e:fa:5d:f4:76:a2:ec:e3:8e:f5:8b:
                    4d:d3:79:be:32:ec:6a:39:76:80:c8:c2:9c:0d:2f:
                    3a:4b:55:3f:9a:bb:bf:ba:30:8e:ef:32:a4:38:ec:
                    6a:4d:80:ad:3e:db:a6:53:b4:6c:d2:99:be:f0:56:
                    27:9e:4f:5b:5c:41:e8:c5:00:38:95:21:4e:6f:19:
                    e6:3c:73:f9:70:bf:44:1f:f6:e3:e3:fc:af:d2:30:
                    91:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:65:45:1D:3B:29:02:DD:CB:2F:F5:7C:DC:65:FC:F6:46:6C:30:5C
            X509v3 Authority Key Identifier:
                keyid:EF:D4:49:AF:84:74:AF:56:3F:E3:79:AD:BD:4F:72:EA:F2:CA:1D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3138362e3134382e3131322e302f32312d3234203d3e203532333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:c7:f4:da:a2:11:89:d8:90:2d:0f:95:6f:2a:c1:84:56:3c:
         c3:84:35:c6:1d:f8:70:88:7c:63:59:14:9f:9b:db:9b:3e:08:
         4a:07:14:b4:08:00:54:80:fb:1c:ed:d7:52:a0:ed:80:10:45:
         88:c2:e9:4f:e7:0e:60:19:cd:2a:e9:a1:6f:24:06:ee:9a:33:
         f8:ef:a8:f2:ca:15:9d:23:b5:78:e1:30:53:87:80:7a:e6:f9:
         f1:13:83:93:1b:d9:a9:1b:0c:73:40:4d:03:05:b8:04:0a:e8:
         b2:c4:bc:84:ff:41:f1:29:f7:43:c9:25:3b:50:f2:e0:88:6d:
         50:a7:91:0d:4f:40:86:18:fb:af:1b:14:76:25:f5:40:d0:15:
         7e:db:8d:26:45:04:1f:76:3a:b0:4f:4f:c9:26:3b:79:4e:f3:
         03:51:34:ec:d5:91:90:d3:59:00:f9:fd:5b:68:7e:09:09:c5:
         ad:21:42:93:86:3c:a9:34:9b:2e:12:0e:81:a2:52:1b:eb:7f:
         36:d8:1f:b7:d1:2b:90:98:58:d2:97:3a:74:c0:41:82:f7:73:
         b7:36:57:ae:b7:25:37:35:94:3d:69:fb:5b:89:b7:4c:af:5f:
         24:56:65:85:00:0a:90:93:7b:8c:96:65:87:7a:26:37:ad:86:
         b7:48:1b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:13:40 2026 by rpki-client