This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231332e302f32342d3234203d3e203233323433.roa
File:                     3138362e3138392e3231332e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          45/4pd7I8IsfbKtq5hLrPUD+aSibIBzW2TyO8UOVEOA=
Subject key identifier:   AC:C3:E6:14:5E:09:34:F7:26:6A:BB:38:95:BC:CE:A3:99:3E:7B:D5
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       048B6269574016978C7D91BD962CCC5F93F97DA6
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231332e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 06 Jan 2026 19:20:54 +0000
ROA not before:           Tue 06 Jan 2026 19:15:54 +0000
ROA not after:            Tue 05 Jan 2027 19:20:54 +0000
asID:                     23243
IP address blocks:        186.189.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8b:62:69:57:40:16:97:8c:7d:91:bd:96:2c:cc:5f:93:f9:7d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Jan  6 19:15:54 2026 GMT
            Not After : Jan  5 19:20:54 2027 GMT
        Subject: CN=ACC3E6145E0934F7266ABB3895BCCEA3993E7BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:47:12:1c:ff:a1:d1:45:5b:04:78:66:62:30:
                    69:11:02:7e:b1:e9:10:11:45:38:2a:04:e1:00:5f:
                    ef:8d:f6:09:11:94:37:40:79:15:68:26:b0:3d:1d:
                    a6:63:f1:b3:af:d1:e1:ba:65:e9:a5:27:ed:be:ef:
                    d9:c7:cd:be:b5:64:e3:65:f0:99:77:72:14:4c:75:
                    79:0b:69:9f:41:ec:cf:b9:7d:7b:a5:aa:97:b9:43:
                    5c:a8:c3:8b:52:bd:36:d1:02:37:2a:85:26:0e:98:
                    12:8f:ed:22:8a:c8:8f:f8:c0:99:05:75:8a:ed:99:
                    2b:1c:b9:33:a1:80:de:d7:3f:ff:c4:5d:a3:ae:eb:
                    24:e8:11:09:9e:c4:22:4a:e3:f4:cc:e5:e1:cd:d4:
                    6d:41:f1:52:9d:5c:43:ac:28:46:0a:4e:42:7b:75:
                    06:a3:42:a4:0b:93:26:3f:80:4a:86:1c:fb:5f:14:
                    70:0e:ce:77:8d:48:eb:29:ce:86:5c:66:92:07:a2:
                    41:0d:a7:79:0b:b1:65:eb:5c:b6:07:53:13:6e:06:
                    d3:dd:af:e9:55:cf:33:ac:21:ae:bb:a8:7a:02:07:
                    f9:3e:99:c0:09:de:0e:ff:4b:4a:f6:c0:ff:15:fb:
                    e9:29:c4:37:11:38:ff:86:ef:8c:30:e2:b5:bb:98:
                    ca:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C3:E6:14:5E:09:34:F7:26:6A:BB:38:95:BC:CE:A3:99:3E:7B:D5
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231332e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:74:72:f4:e1:d6:ae:e3:dd:51:55:67:a9:fe:71:6d:a9:e1:
         38:29:61:58:ba:90:bf:c5:23:3c:08:49:7a:f3:02:dd:6d:30:
         01:19:06:c1:be:7b:21:50:e6:8a:b0:3e:c2:25:1d:9e:5c:ee:
         09:ad:02:4a:a3:de:e7:9e:4e:9d:71:29:4f:3d:cd:d3:16:24:
         f5:eb:ec:c8:4d:23:2a:16:dc:31:1f:4b:b0:3f:99:d9:22:4d:
         7b:d1:de:86:66:88:1c:63:fb:9a:a3:c7:44:58:4d:b6:26:c0:
         1e:5a:a1:f9:b5:52:2d:84:d4:14:c6:b8:c0:d5:3a:57:35:17:
         91:9a:f5:d1:3a:2f:cb:7f:13:44:a1:ba:bd:b2:f0:2d:9e:01:
         61:7d:d3:bf:81:71:6f:38:a4:9b:79:ac:4c:eb:1a:b3:63:4d:
         a9:be:8f:32:2b:d3:22:67:d4:1f:db:f3:85:99:02:70:e8:c0:
         5f:84:1a:62:8b:2f:f5:fb:92:88:cd:06:be:cf:b8:99:58:28:
         69:69:23:9b:31:e2:16:ed:29:a8:6d:36:75:8f:cc:99:1a:65:
         a5:63:3d:5a:70:b4:d6:27:65:2d:7b:c9:c5:46:ac:93:ae:93:
         50:53:6e:4b:af:72:cf:0b:14:9b:8c:16:f5:51:68:6e:98:79:
         94:a4:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:55:40 2026 by rpki-client