This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/3138362e312e302e302f31382d3234203d3e203138383430.roa
File:                     3138362e312e302e302f31382d3234203d3e203138383430.roa (raw, json)
Hash identifier:          A79Y/E3O4B5tMtorKe/R6vIKAxLHemHUCHcPBpL51P0=
Subject key identifier:   A1:F7:26:48:A2:67:71:AF:02:EA:56:CC:4D:65:EA:EE:1A:9E:15:48
Certificate issuer:       /CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0
Certificate serial:       4EDB697C4DB26EAAB3BA0027CD857DC98FD03CF5
Authority key identifier: 0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/3138362e312e302e302f31382d3234203d3e203138383430.roa
Signing time:             Tue 06 Jan 2026 19:26:26 +0000
ROA not before:           Tue 06 Jan 2026 19:21:26 +0000
ROA not after:            Tue 05 Jan 2027 19:26:26 +0000
asID:                     18840
IP address blocks:        186.1.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:db:69:7c:4d:b2:6e:aa:b3:ba:00:27:cd:85:7d:c9:8f:d0:3c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0
        Validity
            Not Before: Jan  6 19:21:26 2026 GMT
            Not After : Jan  5 19:26:26 2027 GMT
        Subject: CN=A1F72648A26771AF02EA56CC4D65EAEE1A9E1548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:42:54:e9:e5:08:45:61:ce:9a:62:c4:f2:
                    4b:b4:44:17:26:0b:00:7f:58:45:21:1d:88:2b:4d:
                    7f:2f:46:31:23:aa:71:fc:9c:0b:5d:d4:48:ba:0a:
                    d6:96:d6:16:24:cc:aa:15:a8:b2:cf:48:f4:04:20:
                    42:24:6d:ae:d9:77:2d:fe:82:05:6a:cd:32:b2:c4:
                    81:78:73:29:2e:ca:d3:e8:e0:e2:a6:97:a2:b0:c7:
                    8c:b0:18:b9:d4:41:57:02:f3:e0:fb:a3:71:61:ad:
                    31:2e:d2:4a:dc:2b:ee:fd:c7:0c:5a:5a:50:84:98:
                    9f:16:30:8a:ab:5b:b2:3b:8f:7a:53:cf:84:9a:95:
                    9c:bb:c9:90:47:79:ca:73:91:ef:96:5b:85:fc:44:
                    c5:1c:58:e1:54:b1:20:8b:49:1f:fe:a2:88:df:e2:
                    f8:18:91:39:58:dd:97:7e:5d:fb:20:cb:67:74:0b:
                    54:f6:e3:26:f0:be:9a:dd:fc:3d:c0:68:78:5d:db:
                    40:73:d8:40:23:46:fe:18:d9:b9:a2:b8:4e:ea:9a:
                    31:2a:66:45:cf:67:6b:90:2a:77:b6:c4:ae:38:38:
                    33:04:f2:ce:79:07:c9:28:39:99:33:ea:f7:eb:73:
                    bf:b8:85:6a:4a:6c:45:4a:8d:1a:32:56:8a:90:59:
                    e8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F7:26:48:A2:67:71:AF:02:EA:56:CC:4D:65:EA:EE:1A:9E:15:48
            X509v3 Authority Key Identifier:
                keyid:0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/3138362e312e302e302f31382d3234203d3e203138383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         10:a2:44:b3:92:fc:c5:5e:05:07:95:26:4a:04:21:9b:82:05:
         69:e2:7a:5c:8a:26:92:f4:84:63:bf:f6:71:95:39:81:eb:34:
         73:60:a1:06:a3:5a:c1:cf:44:2a:07:f9:85:74:c8:57:00:95:
         80:f6:bc:05:07:18:ce:aa:7f:3c:e8:7a:f8:28:63:ac:ab:ba:
         0d:76:b2:86:23:5e:68:86:b4:5a:54:6b:dc:3b:b6:90:b6:61:
         92:a4:79:3d:19:11:78:d4:ee:fc:47:ad:cf:e0:82:c0:16:c1:
         d7:a8:e7:c9:81:24:50:f7:c2:fe:8a:ec:0c:c1:60:a8:b3:9f:
         b2:fb:2f:ad:66:0d:69:a9:22:2c:c9:d2:e0:07:55:f4:8d:ad:
         8f:a7:e5:71:fc:69:8c:6d:a7:a5:a6:66:92:39:1d:28:28:a6:
         d6:fa:e2:e1:b0:27:ff:4c:2d:43:58:0c:61:5f:05:da:6b:3e:
         69:8a:e9:35:d1:74:68:68:38:22:09:9b:63:61:86:2e:ec:bf:
         ed:6b:b5:4b:38:72:54:00:ee:83:b1:b0:5a:58:62:4b:13:7b:
         61:7c:9e:1c:ae:c6:01:02:af:30:4c:c2:30:08:01:f1:73:06:
         d0:9e:ad:0e:61:dd:0d:fc:d7:e9:e8:ea:31:2e:91:c7:a7:38:
         44:fd:1a:e1
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUTttpfE2ybqqzugAnzYV9yY/QPPUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEM4Q0UyQTE3RDgwMUJCNUM3NzBFNkVCNkFCM0REREJG
NzYyNThDMDAeFw0yNjAxMDYxOTIxMjZaFw0yNzAxMDUxOTI2MjZaMDMxMTAvBgNV
BAMTKEExRjcyNjQ4QTI2NzcxQUYwMkVBNTZDQzRENjVFQUVFMUE5RTE1NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCooEJU6eUIRWHOmmLE8ku0RBcm
CwB/WEUhHYgrTX8vRjEjqnH8nAtd1Ei6CtaW1hYkzKoVqLLPSPQEIEIkba7Zdy3+
ggVqzTKyxIF4cykuytPo4OKml6Kwx4ywGLnUQVcC8+D7o3FhrTEu0krcK+79xwxa
WlCEmJ8WMIqrW7I7j3pTz4SalZy7yZBHecpzke+WW4X8RMUcWOFUsSCLSR/+oojf
4vgYkTlY3Zd+Xfsgy2d0C1T24ybwvprd/D3AaHhd20Bz2EAjRv4Y2bmiuE7qmjEq
ZkXPZ2uQKne2xK44ODME8s55B8koOZkz6vfrc7+4hWpKbEVKjRoyVoqQWegJAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUofcmSKJnca8C6lbMTWXq7hqeFUgwHwYDVR0j
BBgwFoAUDIzioX2AG7XHcObrarPd2/diWMAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QkRENzJGMDAyOTNDNkQ3M0IxQTRFMzk4OTlEMjVEQ0Ez
QzMyOTVERkIyMDA0Qjc5NzlFNDYyM0U0MDQ2OUFGLzAvMEM4Q0UyQTE3RDgwMUJC
NUM3NzBFNkVCNkFCM0REREJGNzYyNThDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQzhDRTJBMTdEODAxQkI1Qzc3
MEU2RUI2QUIzREREQkY3NjI1OEMwLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUJERDcyRjAwMjkzQzZENzNCMUE0RTM5ODk5RDI1RENBM0MzMjk1REZC
MjAwNEI3OTc5RTQ2MjNFNDA0NjlBRi8wLzMxMzgzNjJlMzEyZTMwMmUzMDJmMzEz
ODJkMzIzNDIwM2QzZTIwMzEzODM4MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBroBADANBgkqhkiG
9w0BAQsFAAOCAQEAEKJEs5L8xV4FB5UmSgQhm4IFaeJ6XIomkvSEY7/2cZU5ges0
c2ChBqNawc9EKgf5hXTIVwCVgPa8BQcYzqp/POh6+ChjrKu6DXayhiNeaIa0WlRr
3Du2kLZhkqR5PRkReNTu/Eetz+CCwBbB16jnyYEkUPfC/orsDMFgqLOfsvsvrWYN
aakiLMnS4AdV9I2tj6flcfxpjG2npaZmkjkdKCim1vri4bAn/0wtQ1gMYV8F2ms+
aYrpNdF0aGg4IgmbY2GGLuy/7Wu1SzhyVADug7GwWlhiSxN7YXyeHK7GAQKvMEzC
MAgB8XMG0J6tDmHdDfzX6ejqMS6Rx6c4RP0a4Q==
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:25 2026 by rpki-client