This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231312e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3231312e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          rXH6DjRaeqNFyVB43T/Xl5pdNGMFF7Mlq3Xn9yrxeB4=
Subject key identifier:   D4:FD:06:B8:25:8A:92:F8:4D:E9:E0:7A:23:1C:05:F5:46:3C:11:83
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       710885BA5F8C83F18F342AA7A7EDEA51B331581D
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231312e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 06 Jan 2026 19:28:23 +0000
ROA not before:           Tue 06 Jan 2026 19:23:23 +0000
ROA not after:            Tue 05 Jan 2027 19:28:23 +0000
asID:                     262189
IP address blocks:        186.1.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:08:85:ba:5f:8c:83:f1:8f:34:2a:a7:a7:ed:ea:51:b3:31:58:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Jan  6 19:23:23 2026 GMT
            Not After : Jan  5 19:28:23 2027 GMT
        Subject: CN=D4FD06B8258A92F84DE9E07A231C05F5463C1183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:6b:01:db:0e:12:2a:3e:b3:f3:0f:0f:ad:
                    b4:c7:49:4e:1b:78:5d:dc:32:28:6f:95:2f:0b:3a:
                    1a:aa:64:7d:0b:40:5f:70:14:7f:f5:c9:b1:65:6d:
                    49:a4:5b:76:0c:6a:90:b7:d9:c0:dd:e9:45:c6:46:
                    7b:35:61:bf:8d:7c:60:f1:8e:bc:04:43:56:bc:19:
                    30:ba:83:13:a5:a5:d7:60:07:c9:06:78:82:3c:24:
                    00:e5:c1:d1:39:cb:5d:d9:d8:9e:49:33:0d:06:5d:
                    4a:bd:a9:af:f8:7e:24:9d:da:39:be:e0:8d:d9:65:
                    23:8d:8a:06:2f:67:20:58:c5:2e:7c:22:dc:c9:f6:
                    0e:4b:b0:43:6e:a0:bd:17:bc:76:ef:43:6f:99:7c:
                    e3:19:02:0f:8b:f2:b7:f4:b6:3e:ca:78:cb:9c:c7:
                    58:4e:c5:83:99:40:8b:b3:8b:bb:7c:76:a3:3b:25:
                    38:f1:25:ef:3d:38:ac:74:ef:6b:1f:c8:e0:aa:52:
                    58:fb:8c:21:ec:0f:2a:3a:dd:d3:e0:94:75:64:d9:
                    b1:60:1f:b5:cd:48:8e:36:82:f7:6b:01:49:39:66:
                    44:18:16:b1:87:e6:cf:10:a9:08:f4:6e:59:a8:3c:
                    47:b7:71:93:7b:da:02:7a:2c:6a:84:cc:9d:bb:d3:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FD:06:B8:25:8A:92:F8:4D:E9:E0:7A:23:1C:05:F5:46:3C:11:83
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3231312e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:fb:3d:07:82:4e:e9:aa:fe:70:a2:ba:bd:c4:89:05:14:bd:
         a7:a0:48:64:01:d9:fc:d7:a2:d5:a3:51:df:3e:cd:52:b2:a8:
         48:b7:bc:4a:6e:d5:f8:84:b9:6d:82:4d:8b:d0:0d:17:73:d2:
         20:c3:ae:2d:bd:da:a3:8d:cf:55:ae:6a:84:4d:45:95:7f:34:
         f5:37:8f:7c:05:2b:76:d8:d7:ff:16:bb:08:01:76:ae:e2:32:
         f1:46:e4:a5:7a:70:d9:36:2b:aa:39:fd:97:5a:4f:92:93:34:
         d8:3f:b8:26:67:67:8c:21:7a:e9:87:a9:93:d8:1b:ae:ed:10:
         b2:45:80:e5:c1:8b:4a:a4:6b:00:c6:de:b1:54:a1:33:07:bd:
         37:dd:1b:f2:d3:7e:73:7a:be:cd:df:59:0e:66:6d:d6:cb:2c:
         f6:f3:63:a7:0f:8f:b7:8b:bb:22:8b:56:a2:9b:01:0b:fa:c7:
         e3:4f:87:5a:a5:72:5c:30:e4:26:39:7f:78:03:ff:2a:72:3c:
         0d:56:47:06:20:27:f8:c6:c3:25:ff:42:ea:36:1a:40:e2:9f:
         22:5c:42:a0:9d:3f:7b:1c:0f:d9:4a:5e:fc:90:05:06:94:1b:
         3a:0a:8f:ee:79:b6:08:16:83:0c:7e:c3:0a:69:0d:52:87:a4:
         5b:15:f4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:38 2026 by rpki-client