This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/3138362e3139342e3136302e302f32322d3232203d3e20323730303331.roa
File:                     3138362e3139342e3136302e302f32322d3232203d3e20323730303331.roa (raw, json)
Hash identifier:          P03UipfUD38lGL7qkHrBLhTA85sNUuIg/RTNOLEutuo=
Subject key identifier:   EB:13:BA:0B:24:BC:F5:97:83:3F:FD:D7:B4:6C:29:5C:18:DC:C3:C1
Certificate issuer:       /CN=0E87CA1A33782833150C7C0561C3E8EC5CBEAB37
Certificate serial:       5A08F8FB62405B47C6D39C54C8070D6A9564C449
Authority key identifier: 0E:87:CA:1A:33:78:28:33:15:0C:7C:05:61:C3:E8:EC:5C:BE:AB:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/3138362e3139342e3136302e302f32322d3232203d3e20323730303331.roa
Signing time:             Tue 06 Jan 2026 20:50:20 +0000
ROA not before:           Tue 06 Jan 2026 20:45:20 +0000
ROA not after:            Tue 05 Jan 2027 20:50:20 +0000
asID:                     270031
IP address blocks:        186.194.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:08:f8:fb:62:40:5b:47:c6:d3:9c:54:c8:07:0d:6a:95:64:c4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E87CA1A33782833150C7C0561C3E8EC5CBEAB37
        Validity
            Not Before: Jan  6 20:45:20 2026 GMT
            Not After : Jan  5 20:50:20 2027 GMT
        Subject: CN=EB13BA0B24BCF597833FFDD7B46C295C18DCC3C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:4f:90:6d:94:cd:78:06:8f:ab:2c:e1:6f:
                    ab:88:31:8e:bb:af:a3:4b:7a:53:89:ae:ae:e0:42:
                    35:82:28:1f:54:64:13:47:64:0e:0b:fa:2f:4e:be:
                    b0:5d:b1:89:bd:a6:c6:f0:ac:94:0c:03:6b:5f:d2:
                    4b:39:59:41:21:92:e7:70:f8:b5:3c:17:23:2d:b5:
                    9c:1f:26:f7:a6:9d:70:70:a2:3f:99:c3:e0:0e:75:
                    34:9d:fc:b0:8e:cb:0d:7c:3b:e0:38:61:69:c9:69:
                    cd:1c:56:69:30:c2:37:0f:a2:5b:1f:9f:70:a4:fb:
                    4a:17:61:9b:6b:5b:1d:62:32:bc:72:ee:44:28:bd:
                    ed:76:0e:92:17:93:40:21:b4:2d:2e:24:ea:40:ec:
                    f6:09:5d:00:70:88:1d:c7:5a:07:18:4e:88:a8:23:
                    ac:11:61:b7:8f:0b:0c:c7:05:ca:90:53:d9:b4:64:
                    82:0d:1c:ce:f9:59:f1:a3:42:63:29:f0:91:e4:92:
                    d0:67:e0:c1:f3:1c:ee:3d:d1:fb:45:a4:da:90:02:
                    37:5a:32:96:7e:d8:5f:04:0f:37:da:96:bb:7a:8b:
                    18:96:ac:63:de:16:01:00:53:10:43:a1:01:16:86:
                    52:08:64:22:a1:ff:9f:fd:e7:0e:a3:f6:7f:d1:2a:
                    b0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:13:BA:0B:24:BC:F5:97:83:3F:FD:D7:B4:6C:29:5C:18:DC:C3:C1
            X509v3 Authority Key Identifier:
                keyid:0E:87:CA:1A:33:78:28:33:15:0C:7C:05:61:C3:E8:EC:5C:BE:AB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E87CA1A33782833150C7C0561C3E8EC5CBEAB37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CC65ACCB3911D0891FE3FEC2EE819AB6E5AF0F371B268BE3C7755CB61153196/0/3138362e3139342e3136302e302f32322d3232203d3e20323730303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:18:95:35:4e:70:a0:eb:bd:db:59:38:59:5e:40:5f:f6:ed:
         03:13:99:04:49:b5:09:fc:f4:0f:6e:d3:ae:b6:6c:b2:25:e4:
         7f:47:5f:7d:02:cd:4d:df:2a:19:a0:e3:79:a1:4c:ae:9c:d4:
         d1:08:30:f6:d4:d0:47:b5:71:ec:90:9e:28:ca:03:dd:f6:85:
         ee:68:5c:b5:cb:b0:2f:d7:b9:1b:31:43:d1:cf:a7:20:12:60:
         0f:be:d2:6b:a6:5a:6b:62:7e:f8:bf:17:83:c1:dd:48:3d:02:
         11:d6:57:68:64:82:6b:41:ae:c3:dc:83:2d:76:6d:43:f0:16:
         37:c8:d9:f3:c1:27:69:54:5f:f5:22:16:8f:87:12:ce:45:32:
         41:e1:7c:a1:df:48:7d:d6:f5:2c:3d:a1:5e:b7:2c:36:d4:f2:
         98:b5:c7:af:ff:8f:0c:24:a7:6d:f8:88:a9:f7:53:a8:3c:f1:
         17:4c:f9:c1:5b:b3:0c:c0:4f:be:e3:55:ac:0d:47:5e:d8:1c:
         10:6b:0a:18:ff:b2:d9:45:26:b4:c4:ac:27:35:53:f3:ed:40:
         c2:68:3d:7f:54:34:fb:3f:f6:97:fd:57:55:cf:0e:a6:a3:fd:
         22:e7:0e:bf:eb:c1:42:7d:82:46:a5:91:05:0d:11:7c:fe:2b:
         92:dc:52:89
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUWgj4+2JAW0fG05xUyAcNapVkxEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU4N0NBMUEzMzc4MjgzMzE1MEM3QzA1NjFDM0U4RUM1
Q0JFQUIzNzAeFw0yNjAxMDYyMDQ1MjBaFw0yNzAxMDUyMDUwMjBaMDMxMTAvBgNV
BAMTKEVCMTNCQTBCMjRCQ0Y1OTc4MzNGRkREN0I0NkMyOTVDMThEQ0MzQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClJk+QbZTNeAaPqyzhb6uIMY67
r6NLelOJrq7gQjWCKB9UZBNHZA4L+i9OvrBdsYm9psbwrJQMA2tf0ks5WUEhkudw
+LU8FyMttZwfJvemnXBwoj+Zw+AOdTSd/LCOyw18O+A4YWnJac0cVmkwwjcPolsf
n3Ck+0oXYZtrWx1iMrxy7kQove12DpIXk0AhtC0uJOpA7PYJXQBwiB3HWgcYToio
I6wRYbePCwzHBcqQU9m0ZIINHM75WfGjQmMp8JHkktBn4MHzHO490ftFpNqQAjda
MpZ+2F8EDzfalrt6ixiWrGPeFgEAUxBDoQEWhlIIZCKh/5/95w6j9n/RKrBTAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU6xO6CyS89ZeDP/3XtGwpXBjcw8EwHwYDVR0j
BBgwFoAUDofKGjN4KDMVDHwFYcPo7Fy+qzcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82Q0M2NUFDQ0IzOTExRDA4OTFGRTNGRUMyRUU4MTlBQjZF
NUFGMEYzNzFCMjY4QkUzQzc3NTVDQjYxMTUzMTk2LzAvMEU4N0NBMUEzMzc4Mjgz
MzE1MEM3QzA1NjFDM0U4RUM1Q0JFQUIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRTg3Q0ExQTMzNzgyODMzMTUw
QzdDMDU2MUMzRThFQzVDQkVBQjM3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkNDNjVBQ0NCMzkxMUQwODkxRkUzRkVDMkVFODE5QUI2RTVBRjBGMzcx
QjI2OEJFM0M3NzU1Q0I2MTE1MzE5Ni8wLzMxMzgzNjJlMzEzOTM0MmUzMTM2MzAy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3MzAzMDMzMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK6
wqAwDQYJKoZIhvcNAQELBQADggEBAHQYlTVOcKDrvdtZOFleQF/27QMTmQRJtQn8
9A9u0662bLIl5H9HX30CzU3fKhmg43mhTK6c1NEIMPbU0Ee1ceyQnijKA932he5o
XLXLsC/XuRsxQ9HPpyASYA++0mumWmtifvi/F4PB3Ug9AhHWV2hkgmtBrsPcgy12
bUPwFjfI2fPBJ2lUX/UiFo+HEs5FMkHhfKHfSH3W9Sw9oV63LDbU8pi1x6//jwwk
p234iKn3U6g88RdM+cFbswzAT77jVawNR17YHBBrChj/stlFJrTErCc1U/PtQMJo
PX9UNPs/9pf9V1XPDqaj/SLnDr/rwUJ9gkalkQUNEXz+K5LcUok=
-----END CERTIFICATE-----
Generated at Mon Jan 26 10:58:24 2026 by rpki-client