This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3230392e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3230392e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          UAMZfpS6pCDHZOu296x/1cgNw69V5EDDV3R1rTc5Q2w=
Subject key identifier:   79:48:15:B3:4A:53:C0:04:2E:B8:4E:6E:91:4B:61:A2:63:5B:BA:71
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       0278FC3FBC39F96C76B27D344F519E219CBF088D
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3230392e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 06 Jan 2026 19:28:25 +0000
ROA not before:           Tue 06 Jan 2026 19:23:25 +0000
ROA not after:            Tue 05 Jan 2027 19:28:25 +0000
asID:                     262189
IP address blocks:        186.1.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:78:fc:3f:bc:39:f9:6c:76:b2:7d:34:4f:51:9e:21:9c:bf:08:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Jan  6 19:23:25 2026 GMT
            Not After : Jan  5 19:28:25 2027 GMT
        Subject: CN=794815B34A53C0042EB84E6E914B61A2635BBA71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:92:5a:bf:ef:f1:4c:1e:90:a2:d9:0b:e7:f9:
                    4e:6a:be:25:d0:24:5b:a6:e8:de:f0:46:78:be:4b:
                    d1:ec:ec:79:be:aa:b1:32:79:26:d3:8b:6e:d6:9d:
                    f6:55:59:1e:7d:20:72:0b:1b:69:a5:e6:8b:73:82:
                    e9:6c:c8:c1:c7:73:ec:d4:36:9b:2f:c8:9a:1b:08:
                    17:55:aa:25:d4:ac:92:f8:4a:8c:2e:ba:4e:4a:f0:
                    83:12:19:e7:26:6d:e9:3c:c7:c4:e0:09:af:aa:8d:
                    9f:05:c2:f6:7c:04:c5:b1:46:d7:7d:d9:73:a2:ba:
                    5b:ed:87:d0:3e:0f:d2:9c:4d:6e:44:30:d8:72:32:
                    6a:e7:a0:1f:d2:a5:87:ac:c1:8e:37:d3:45:1d:27:
                    54:7a:1c:ff:8d:de:cb:0a:a0:f5:c4:52:bc:82:60:
                    81:dc:08:17:9a:85:4c:33:5f:a0:12:6e:11:59:aa:
                    15:f7:4d:05:39:22:0e:bc:d3:87:62:92:91:4f:b1:
                    5f:20:dc:6f:7b:ab:18:19:3d:82:08:6c:ce:20:cf:
                    b8:33:de:d1:50:75:9e:d3:7f:7d:df:53:02:0b:e5:
                    c2:bd:6a:a7:c6:01:61:0d:47:64:57:ac:17:b2:2f:
                    5c:16:5e:ae:a5:7f:3c:fa:b4:8e:22:5e:9f:e5:f2:
                    f0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:48:15:B3:4A:53:C0:04:2E:B8:4E:6E:91:4B:61:A2:63:5B:BA:71
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3230392e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:29:af:d2:ca:8f:49:8a:4a:c2:e4:11:b7:e6:0d:d5:2c:c5:
         9e:4d:4f:27:62:5e:8c:7c:f2:da:cc:8c:71:7e:06:d4:43:f3:
         d0:ad:c9:8b:40:c4:ea:ab:8e:a2:25:00:d2:63:0a:95:75:2b:
         5b:ce:8e:5e:a2:12:c7:78:cd:2f:fa:16:d7:3a:44:ea:c0:eb:
         11:ac:ab:fe:60:ab:88:d2:db:21:bc:c5:44:99:39:9b:31:f4:
         f8:88:71:bf:69:1c:7a:43:24:f7:ab:fd:fe:71:d5:19:02:12:
         d8:f8:75:71:93:7c:2b:8e:10:d3:62:7b:14:8c:9c:a7:09:0f:
         1c:d5:ea:1b:6a:ab:4e:69:1f:8e:d7:d4:1b:03:ab:4e:e5:0c:
         75:16:20:22:90:c2:fe:3e:ca:e7:0c:95:de:fc:85:57:d7:05:
         9f:bd:59:24:97:97:ed:a0:63:d8:43:d9:4c:38:f5:91:85:b7:
         59:b5:f5:1a:ed:0e:c8:0f:00:34:ad:b8:f7:8f:cc:86:99:44:
         c3:60:8f:37:ff:fc:63:fb:74:aa:21:60:4d:83:36:4a:e9:77:
         ab:7a:a1:f2:85:6a:25:83:00:86:9c:92:10:a2:90:07:2b:98:
         1f:b6:e0:67:ce:eb:fd:a1:e2:9e:3b:2d:a2:c6:69:67:7d:b0:
         b8:4d:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:38 2026 by rpki-client