This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134302e302e302f31342d3234203d3e203131333135.roa
File:                     3138362e3134302e302e302f31342d3234203d3e203131333135.roa (raw, json)
Hash identifier:          ZTjotSI902xn1+QMFwfQjw5mTqtXCFbM5C9wrLUTuXY=
Subject key identifier:   5F:8C:AF:D6:BC:F1:27:11:EA:10:0A:32:EB:5A:2D:92:2B:83:94:94
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       71B051EF8C9BDDDF0A2511C3486A16F1D2E6E05F
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134302e302e302f31342d3234203d3e203131333135.roa
Signing time:             Tue 06 Jan 2026 20:54:49 +0000
ROA not before:           Tue 06 Jan 2026 20:49:49 +0000
ROA not after:            Tue 05 Jan 2027 20:54:49 +0000
asID:                     11315
IP address blocks:        186.140.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b0:51:ef:8c:9b:dd:df:0a:25:11:c3:48:6a:16:f1:d2:e6:e0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Jan  6 20:49:49 2026 GMT
            Not After : Jan  5 20:54:49 2027 GMT
        Subject: CN=5F8CAFD6BCF12711EA100A32EB5A2D922B839494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:0c:ec:29:1c:0c:ff:1f:e8:7e:dc:6d:c1:
                    c3:bc:84:23:c7:ef:67:c2:a0:1b:dc:b8:81:05:e3:
                    b7:d3:76:10:ea:1a:e8:b3:1c:98:eb:78:68:5a:ad:
                    a1:54:4a:8b:38:01:e1:35:f3:6c:1d:90:b9:d2:16:
                    bc:8c:44:5e:91:ce:be:0f:a8:e2:c1:fd:22:b4:97:
                    01:03:9a:5f:b2:e6:23:2e:65:9e:19:2d:24:41:0d:
                    ab:99:52:86:d4:d5:16:f8:1e:87:e3:a6:1d:d6:a8:
                    9b:1c:b6:d4:ab:4e:ee:2a:77:01:f3:0c:63:b6:2d:
                    89:fe:06:04:ae:d0:f5:b2:e3:e1:7a:e6:37:53:bf:
                    cf:11:57:40:fd:b0:ca:a7:b3:6f:c3:9f:89:b5:45:
                    4b:5c:c7:03:90:0c:8c:78:81:2d:5f:2e:f6:b8:03:
                    1c:1e:02:08:70:62:fe:b5:f1:5a:5c:07:a4:38:2f:
                    f1:38:66:a2:65:81:89:27:3f:be:84:1b:fe:fc:01:
                    18:64:fd:4e:43:b4:b5:8b:b4:b3:e4:d2:ff:4e:a9:
                    21:59:f2:41:1c:3b:02:74:40:f6:e5:1b:65:c5:4a:
                    23:da:a6:87:54:47:30:74:bf:69:e9:f6:c2:83:99:
                    82:3d:45:e5:40:d3:a4:1c:06:1a:18:2f:1c:d4:af:
                    bc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8C:AF:D6:BC:F1:27:11:EA:10:0A:32:EB:5A:2D:92:2B:83:94:94
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134302e302e302f31342d3234203d3e203131333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.140.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         1e:f7:43:ac:80:e9:17:27:a8:28:d2:92:f9:11:46:68:55:93:
         24:e6:72:81:35:c1:df:2e:6a:9e:a8:b3:f7:29:ec:16:d8:d0:
         49:de:60:24:00:e3:d9:de:05:73:3a:29:80:53:a8:54:44:3d:
         3f:0c:2f:8b:9d:e8:0b:cc:0c:8b:ca:0f:54:1d:0a:c0:c7:5b:
         31:40:50:3a:7a:de:51:aa:07:e6:5c:ad:a8:bf:f2:05:dc:60:
         bb:1e:5c:d8:61:17:31:e1:17:4b:bf:c1:3e:8d:05:81:5f:2e:
         0a:91:c7:c2:e9:cd:3a:de:70:fe:4d:69:fe:44:cf:ba:45:1f:
         8d:48:31:be:5a:53:0d:cf:f8:8e:92:c2:c9:12:d1:38:4a:b5:
         e4:53:bd:50:36:f1:36:25:a7:5e:dd:fa:60:03:e8:70:ca:87:
         36:5e:e6:07:e6:8e:ed:e6:88:24:ac:d2:41:be:55:e8:c0:81:
         6a:ca:69:bc:a9:89:3f:f0:85:ca:ff:ac:b8:0d:f2:fc:a1:1f:
         a7:be:d1:0a:35:69:dc:f9:c4:aa:49:26:4b:42:6b:f8:98:b7:
         3d:5b:5d:33:1e:ed:c1:a0:13:08:21:81:a5:81:76:51:60:6c:
         48:d5:66:5b:64:7d:52:4f:17:0d:47:bb:eb:83:11:12:ed:c9:
         88:f9:33:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:30 2026 by rpki-client