This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132302e302f32322d3234203d3e203532333731.roa
File:                     3138362e3135392e3132302e302f32322d3234203d3e203532333731.roa (raw, json)
Hash identifier:          NUdz4gbcT5LHKEevirDOxHI3aG86rzyIgDzbT8buVfQ=
Subject key identifier:   7B:B5:87:ED:06:07:2B:6B:2F:57:CF:CE:5F:52:60:DE:DB:7F:CB:7B
Certificate issuer:       /CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
Certificate serial:       3DB1B42DFE404DBF20E0C992604AC2D254B16249
Authority key identifier: 20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132302e302f32322d3234203d3e203532333731.roa
Signing time:             Tue 06 Jan 2026 20:57:13 +0000
ROA not before:           Tue 06 Jan 2026 20:52:13 +0000
ROA not after:            Tue 05 Jan 2027 20:57:13 +0000
asID:                     52371
IP address blocks:        186.159.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b1:b4:2d:fe:40:4d:bf:20:e0:c9:92:60:4a:c2:d2:54:b1:62:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
        Validity
            Not Before: Jan  6 20:52:13 2026 GMT
            Not After : Jan  5 20:57:13 2027 GMT
        Subject: CN=7BB587ED06072B6B2F57CFCE5F5260DEDB7FCB7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:cd:20:f5:52:ab:4d:c7:24:c5:39:d0:d0:
                    47:d2:56:c1:0c:c0:d7:83:eb:6f:f1:d7:d5:b2:8c:
                    65:70:e7:c7:3a:c0:cf:2e:b9:09:2d:91:50:0e:99:
                    82:a3:d7:33:9d:3d:e3:d4:71:a0:b5:82:ee:51:7b:
                    21:9e:f3:b0:57:e8:3e:50:ad:eb:1b:1f:ea:a1:17:
                    83:cd:3f:38:ac:96:cb:ea:a6:b3:45:a8:95:fd:a6:
                    af:41:3a:56:50:99:aa:48:4a:81:6c:d3:43:38:3a:
                    4f:fa:79:12:54:bf:da:07:5e:d6:54:bd:f4:14:ef:
                    0d:f9:43:f9:a7:4a:2e:fb:0a:4e:e6:b4:a1:57:bd:
                    83:6b:83:6a:6d:19:87:f9:e5:d8:0a:60:ec:dc:27:
                    6e:f1:ea:3a:ec:ec:ca:82:32:48:1a:b4:2b:ad:86:
                    b1:0f:e2:0a:e5:11:25:20:bf:8f:f1:2a:d2:f5:6b:
                    e8:03:b5:4f:8a:7d:2c:c4:5c:b7:13:02:80:8f:31:
                    5c:28:a4:cd:72:37:69:2a:34:c8:0d:fd:80:9b:6d:
                    fe:26:f6:c9:78:a8:87:d8:a2:d9:31:ea:e8:f3:54:
                    ea:a9:07:1f:f5:52:88:82:cc:b8:32:7a:aa:f5:0f:
                    83:2d:d8:54:d2:94:10:4d:7d:47:ab:9d:f9:08:57:
                    15:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B5:87:ED:06:07:2B:6B:2F:57:CF:CE:5F:52:60:DE:DB:7F:CB:7B
            X509v3 Authority Key Identifier:
                keyid:20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132302e302f32322d3234203d3e203532333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:f3:91:8c:ff:dc:97:62:1d:e6:0a:31:05:b9:85:97:9c:d3:
         fd:45:b6:50:2f:e2:e6:f9:41:1d:f9:4d:a4:a3:51:a7:8d:5a:
         ce:da:8a:e8:fe:9b:7d:87:e7:2a:8d:9d:d7:98:f3:12:8a:da:
         20:7f:29:c4:de:6e:4b:92:f6:d1:55:07:84:de:58:97:66:86:
         4b:c9:c3:13:09:f8:77:d4:e3:32:08:f3:43:89:99:91:69:47:
         59:3f:84:c8:9b:0e:4e:11:ca:fb:19:f4:0a:e8:cb:44:dc:bc:
         e4:54:81:80:d3:19:99:cf:f0:a5:25:0a:65:dc:24:4f:54:11:
         d8:6e:75:e7:d1:e9:2e:1c:43:8c:46:be:0f:3e:4a:c5:85:c6:
         c7:fe:f4:c8:cf:42:aa:24:fa:55:a7:58:6d:fa:36:ec:47:96:
         de:e8:fc:28:37:ae:23:02:b5:5d:e3:84:d1:b7:f2:f6:d0:6c:
         e5:4c:dd:ec:5d:da:3b:71:1f:01:a4:07:c5:03:27:bc:75:01:
         9e:0a:5b:b7:5d:2d:03:78:6d:2c:2d:a1:df:55:fd:12:41:a6:
         ce:70:91:ff:82:db:0c:45:55:b3:c3:20:6f:b2:69:d7:77:96:
         14:d0:22:bc:d5:40:64:d2:9d:9c:88:0c:24:5f:6a:ba:df:fe:
         ca:f4:db:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:06 2026 by rpki-client