This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS11311.roa
File:                     AS11311.roa (raw, json)
Hash identifier:          DG+9gVuIKRsrfZD8BsSTaE9bacInMclKZ58AOp6Jgcc=
Subject key identifier:   BE:8E:86:9A:39:8D:7C:23:1B:5A:05:0E:9C:9C:23:9E:88:1C:C6:C1
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       46CC3FAEFF00673702F69C8E52F60B83F0F43E9C
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS11311.roa
Signing time:             Tue 06 Jan 2026 19:10:32 +0000
ROA not before:           Tue 06 Jan 2026 19:05:32 +0000
ROA not after:            Tue 05 Jan 2027 19:10:32 +0000
asID:                     11311
IP address blocks:        168.226.64.0/20 maxlen: 20
                          186.61.176.0/20 maxlen: 20
                          190.50.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:cc:3f:ae:ff:00:67:37:02:f6:9c:8e:52:f6:0b:83:f0:f4:3e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Jan  6 19:05:32 2026 GMT
            Not After : Jan  5 19:10:32 2027 GMT
        Subject: CN=BE8E869A398D7C231B5A050E9C9C239E881CC6C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:a4:5f:23:08:d7:74:00:c1:25:b1:0d:3a:
                    cc:bf:16:96:e2:17:21:56:ce:38:39:97:6e:78:e5:
                    19:52:e6:81:06:f8:48:6a:d4:19:23:ba:14:e7:8b:
                    c9:d4:68:40:0d:50:96:e8:40:46:d6:a8:75:fa:22:
                    5a:c7:58:a9:7b:20:e7:58:99:b0:a8:ea:97:48:34:
                    e4:a4:ab:b0:67:64:95:1e:cc:f3:42:68:c4:93:c2:
                    ec:ec:6a:84:47:7f:08:6d:cd:b2:fe:a1:62:81:0e:
                    3d:bd:3a:92:ad:46:a3:3c:d4:30:10:6c:e2:df:e4:
                    d3:8c:1f:92:1c:a3:0d:26:3e:36:d3:52:be:26:aa:
                    f5:d1:08:f0:4c:e7:a2:95:2d:9d:0f:7e:ac:fe:27:
                    b7:dc:57:5e:13:3d:8d:94:8c:fc:f9:fe:a5:dc:82:
                    2f:60:1c:d0:68:db:0f:41:6b:40:fa:af:1c:e6:a0:
                    71:70:24:e9:6e:1d:6b:b1:74:09:81:7d:00:e1:94:
                    05:8b:6e:4c:3b:41:3d:f1:f9:67:db:97:2a:cb:33:
                    4b:1d:32:db:dc:da:41:5b:ba:bc:68:ac:f2:e8:35:
                    ff:e0:0c:c3:76:47:0b:60:54:84:24:ed:f2:9a:37:
                    6f:ff:5d:ce:a0:61:c3:f3:cb:d9:d3:44:b1:a1:92:
                    1e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8E:86:9A:39:8D:7C:23:1B:5A:05:0E:9C:9C:23:9E:88:1C:C6:C1
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS11311.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.226.64.0/20
                  186.61.176.0/20
                  190.50.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:5b:5d:89:87:2c:b5:9f:6d:32:ff:89:0e:12:62:d1:9f:
         bd:fd:4b:30:49:3b:e9:48:4f:5d:a1:77:98:3f:10:18:24:7d:
         05:bb:63:5d:df:80:00:c5:41:bb:c0:6b:fc:79:d6:0d:d6:2d:
         4e:f1:17:de:82:9d:02:03:c9:e7:6c:cb:8f:c6:35:56:70:24:
         eb:e9:48:4e:5f:be:d4:c1:ae:bc:ad:47:2f:80:4b:40:f8:7a:
         98:bd:12:6d:d8:c8:15:6b:13:7f:77:33:5e:85:e3:57:73:95:
         a4:5e:30:a8:c5:60:7f:ad:61:9d:5c:7f:65:30:8b:f6:ea:50:
         a4:64:b8:32:d6:17:a5:c5:ad:40:b2:55:c7:45:41:3e:25:7f:
         62:2c:c5:70:f1:72:37:b9:0c:ec:1e:8c:09:00:be:91:4b:e7:
         bc:cb:41:f5:41:d6:20:af:aa:2c:74:4e:5c:60:44:5e:65:9d:
         65:30:5e:c2:08:d6:2a:80:6e:75:d2:a7:e5:d2:b7:42:a5:d5:
         93:b5:7d:4b:f6:32:00:5a:5f:05:9f:d8:77:e4:05:c9:bf:a1:
         e6:85:dd:28:6b:f9:cd:98:60:e3:23:7a:0d:63:94:6f:8e:44:
         0d:c7:f0:5c:0d:32:46:4e:56:a2:dd:e3:03:b6:6c:46:7e:d8:
         8f:b9:6a:17
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:21:33 2026 by rpki-client