This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e302e302f31342d3234203d3e203231353735.roa
File:                     3138362e3136302e302e302f31342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          ZzWImPZGPcO3kAmRCUC+DU1FvBbcQXi7RrnHeQukeU0=
Subject key identifier:   FF:21:33:64:D1:68:94:BE:ED:2D:46:81:EF:FA:C4:48:41:81:4E:BE
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       30853B5A022830C528307E3448ED5FC8018054B1
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e302e302f31342d3234203d3e203231353735.roa
Signing time:             Tue 06 Jan 2026 19:14:19 +0000
ROA not before:           Tue 06 Jan 2026 19:09:19 +0000
ROA not after:            Tue 05 Jan 2027 19:14:19 +0000
asID:                     21575
IP address blocks:        186.160.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:85:3b:5a:02:28:30:c5:28:30:7e:34:48:ed:5f:c8:01:80:54:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Jan  6 19:09:19 2026 GMT
            Not After : Jan  5 19:14:19 2027 GMT
        Subject: CN=FF213364D16894BEED2D4681EFFAC44841814EBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:83:29:bd:72:2f:79:53:ec:8a:5d:5a:c6:
                    ad:6f:ba:a1:96:e6:47:da:5a:a4:3d:49:fc:86:2b:
                    f6:21:e8:cb:8f:03:d8:ef:81:54:44:fb:0c:b2:82:
                    cc:d6:2b:67:eb:60:79:e1:d8:96:50:41:77:0f:a7:
                    a6:6d:8f:28:81:b5:e9:99:bd:a0:be:95:34:e8:60:
                    20:1e:8d:58:2c:be:f5:5f:66:71:5e:0b:b0:0e:14:
                    19:78:ef:fe:96:63:bf:2e:3a:97:a9:e2:29:86:20:
                    45:5c:35:15:01:cf:08:b5:28:95:b0:2f:4f:dc:6d:
                    c8:43:3d:ee:c4:c3:77:b8:f5:f8:09:89:19:62:30:
                    02:e0:d8:23:20:35:43:9f:12:aa:c7:65:d5:24:2d:
                    b3:e9:24:ca:b3:34:a1:2c:7d:a7:15:99:25:45:29:
                    27:8f:f1:31:7e:36:49:ff:31:3f:bf:c7:8b:25:30:
                    a6:12:f8:68:02:07:9a:5c:5a:53:d7:4c:cf:70:44:
                    ea:a5:58:80:44:ac:52:2f:59:f6:77:ed:85:a9:66:
                    3c:28:56:e8:57:80:e5:c6:17:6d:1c:cc:6d:24:d2:
                    06:0d:f9:93:99:00:3c:62:b4:09:ef:87:15:00:3e:
                    83:4d:7a:5c:a8:9f:b7:aa:89:8e:d8:c3:75:44:9f:
                    9a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:21:33:64:D1:68:94:BE:ED:2D:46:81:EF:FA:C4:48:41:81:4E:BE
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3138362e3136302e302e302f31342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.160.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         56:1f:2b:87:9b:56:1e:fe:97:4d:46:73:e1:fe:bd:eb:08:36:
         42:2d:06:9f:85:3c:94:59:b3:96:6d:6f:12:79:1e:09:e0:53:
         52:40:96:51:87:66:27:28:a7:d3:1b:2c:26:d4:f2:e1:74:5e:
         11:2f:ed:82:dd:2e:42:82:a4:34:1c:60:e4:d0:a3:2c:e4:30:
         09:c2:ba:f0:97:21:e6:1e:1f:67:01:bb:92:c3:58:37:73:46:
         60:7c:7a:87:e9:f4:95:3c:ab:2e:cd:61:02:bd:d5:c0:e7:f7:
         d2:df:6c:85:13:3b:5f:03:2c:83:8e:33:39:e5:d0:96:a7:64:
         2b:67:92:f0:c3:38:6f:e0:a4:92:59:ad:f5:df:36:8f:44:4b:
         bd:63:a4:81:03:cc:c3:38:5c:b8:4f:95:03:fc:e1:6b:13:45:
         54:05:46:29:c8:57:03:51:d5:89:bb:3c:25:0f:93:bf:e0:39:
         e2:66:b2:66:4c:d1:e9:aa:8f:62:69:b0:ea:b1:06:38:27:fd:
         f5:bc:f6:70:fa:26:50:7a:5c:51:14:7f:61:41:98:d3:b0:0c:
         4c:33:7b:28:14:01:fa:e3:27:45:16:26:57:21:57:77:e8:cf:
         95:8e:24:08:d0:10:e1:6c:62:fb:4b:ab:e8:8a:95:97:ad:71:
         1b:4f:9e:b7
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUMIU7WgIoMMUoMH40SO1fyAGAVLEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRENDIyNjVBQzQ0QzUyQzcyMDM2NEI3QTVDMDA3NERE
MjE3OTA0NjAeFw0yNjAxMDYxOTA5MTlaFw0yNzAxMDUxOTE0MTlaMDMxMTAvBgNV
BAMTKEZGMjEzMzY0RDE2ODk0QkVFRDJENDY4MUVGRkFDNDQ4NDE4MTRFQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNuoMpvXIveVPsil1axq1vuqGW
5kfaWqQ9SfyGK/Yh6MuPA9jvgVRE+wyygszWK2frYHnh2JZQQXcPp6ZtjyiBtemZ
vaC+lTToYCAejVgsvvVfZnFeC7AOFBl47/6WY78uOpep4imGIEVcNRUBzwi1KJWw
L0/cbchDPe7Ew3e49fgJiRliMALg2CMgNUOfEqrHZdUkLbPpJMqzNKEsfacVmSVF
KSeP8TF+Nkn/MT+/x4slMKYS+GgCB5pcWlPXTM9wROqlWIBErFIvWfZ37YWpZjwo
VuhXgOXGF20czG0k0gYN+ZOZADxitAnvhxUAPoNNelyon7eqiY7Yw3VEn5q7AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU/yEzZNFolL7tLUaB7/rESEGBTr4wHwYDVR0j
BBgwFoAUJNQiZaxExSxyA2S3pcAHTdIXkEYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OTcxRTFCOEEyNkRDRDc3NjlDMDI2MEI1QkUzQTNBREQx
Mjg2NTM0OTk3N0FERDJDNjhENTJBNTI3QkI2NjgyLzAvMjRENDIyNjVBQzQ0QzUy
QzcyMDM2NEI3QTVDMDA3NEREMjE3OTA0Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNEQ0MjI2NUFDNDRDNTJDNzIw
MzY0QjdBNUMwMDc0REQyMTc5MDQ2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODk3MUUxQjhBMjZEQ0Q3NzY5QzAyNjBCNUJFM0EzQUREMTI4NjUzNDk5
NzdBREQyQzY4RDUyQTUyN0JCNjY4Mi8wLzMxMzgzNjJlMzEzNjMwMmUzMDJlMzAy
ZjMxMzQyZDMyMzQyMDNkM2UyMDMyMzEzNTM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwK6oDANBgkq
hkiG9w0BAQsFAAOCAQEAVh8rh5tWHv6XTUZz4f696wg2Qi0Gn4U8lFmzlm1vEnke
CeBTUkCWUYdmJyin0xssJtTy4XReES/tgt0uQoKkNBxg5NCjLOQwCcK68Jch5h4f
ZwG7ksNYN3NGYHx6h+n0lTyrLs1hAr3VwOf30t9shRM7XwMsg44zOeXQlqdkK2eS
8MM4b+Ckklmt9d82j0RLvWOkgQPMwzhcuE+VA/zhaxNFVAVGKchXA1HVibs8JQ+T
v+A54mayZkzR6aqPYmmw6rEGOCf99bz2cPomUHpcURR/YUGY07AMTDN7KBQB+uMn
RRYmVyFXd+jPlY4kCNAQ4Wxi+0ur6IqVl61xG0+etw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:53:44 2026 by rpki-client