This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232312e302f32342d3234203d3e20323632313839.roa
File:                     3138362e312e3232312e302f32342d3234203d3e20323632313839.roa (raw, json)
Hash identifier:          TdEkPLOp0b2LILwQXuA2aFSwaNiYc5lO3qlIViLGUww=
Subject key identifier:   FD:60:C4:C0:E8:DD:8C:1D:2B:57:93:76:FC:3C:C2:C3:BF:34:FA:24
Certificate issuer:       /CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
Certificate serial:       6DCB639D40449B59C19008EDC7548BF8833D7D45
Authority key identifier: 29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232312e302f32342d3234203d3e20323632313839.roa
Signing time:             Tue 06 Jan 2026 19:28:26 +0000
ROA not before:           Tue 06 Jan 2026 19:23:26 +0000
ROA not after:            Tue 05 Jan 2027 19:28:26 +0000
asID:                     262189
IP address blocks:        186.1.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cb:63:9d:40:44:9b:59:c1:90:08:ed:c7:54:8b:f8:83:3d:7d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29854E725D87BC72DA5E62BC1267087F3DE7AC2C
        Validity
            Not Before: Jan  6 19:23:26 2026 GMT
            Not After : Jan  5 19:28:26 2027 GMT
        Subject: CN=FD60C4C0E8DD8C1D2B579376FC3CC2C3BF34FA24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:3b:0c:6c:13:d4:3d:a1:9a:a6:cc:25:60:
                    d4:9a:01:99:18:18:cb:e5:9f:74:e5:67:23:15:f0:
                    5f:24:39:a7:f1:d4:e8:6a:12:79:34:fd:be:80:f7:
                    c4:59:3d:3d:ac:92:5c:da:73:c1:8e:80:9e:ed:9c:
                    57:bc:31:60:b9:7e:8c:9f:ea:82:68:83:fe:9d:1e:
                    e3:02:37:ee:d1:33:cb:4f:ae:da:b2:41:ce:9d:e3:
                    ac:50:14:99:20:1a:69:98:c8:50:2a:da:46:12:c4:
                    7b:2e:d2:b3:2f:f1:6b:ef:d5:88:ce:34:4d:39:e5:
                    75:9b:62:96:61:d6:a3:fc:5b:04:34:ca:71:78:9d:
                    60:6b:ad:91:9c:ad:6d:4a:d3:a5:88:43:b5:58:5b:
                    83:19:3d:75:42:00:cd:b5:7a:a3:3c:08:f3:47:b0:
                    d2:0b:44:a0:d8:bd:51:21:01:9f:d9:68:bc:5d:60:
                    89:ad:c4:bb:08:52:c9:97:43:85:82:e3:46:7c:be:
                    ae:a6:17:0b:bd:f1:a8:6c:ce:32:eb:52:a5:d7:6d:
                    a6:8a:60:78:e2:ef:95:52:3f:7e:b1:19:c3:7f:2a:
                    7e:af:ee:99:fd:94:66:34:18:e0:b9:ad:24:f8:9e:
                    82:18:f0:6c:88:ed:ab:11:20:85:c6:9c:34:5d:f3:
                    04:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:60:C4:C0:E8:DD:8C:1D:2B:57:93:76:FC:3C:C2:C3:BF:34:FA:24
            X509v3 Authority Key Identifier:
                keyid:29:85:4E:72:5D:87:BC:72:DA:5E:62:BC:12:67:08:7F:3D:E7:AC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29854E725D87BC72DA5E62BC1267087F3DE7AC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9287DB06F18D5A79CA0FCA78DAA620BC43C14907F7C1DC4F1EC379B977ACBF30/0/3138362e312e3232312e302f32342d3234203d3e20323632313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:c8:bc:71:ea:0a:03:6f:9e:e5:8d:49:a7:d8:cd:5c:09:04:
         f2:0b:c9:45:c9:98:28:39:c9:e5:3e:ce:d6:9c:86:78:21:44:
         1d:bb:52:73:c1:9c:f4:b1:8f:de:be:59:a9:df:eb:aa:20:60:
         8b:33:be:21:6f:3e:ef:03:24:ff:4a:81:ce:cc:76:8f:18:7a:
         8b:82:14:03:3d:03:bb:87:06:a0:d0:f3:3c:4e:39:66:92:6f:
         0c:31:3b:fb:36:4c:cd:fc:d6:c9:74:8d:10:76:90:74:92:72:
         2b:05:06:07:8d:51:51:9a:df:ed:08:9d:98:a0:b0:9a:72:32:
         d2:f1:cc:cb:b9:31:9f:b0:0d:b0:eb:c1:51:83:cf:cc:e5:8f:
         8b:d8:61:a3:12:6e:1f:be:44:36:e1:ec:e0:91:95:21:0b:42:
         24:ee:b7:59:e2:a3:c0:1c:44:1b:93:dd:46:a2:ec:ba:ae:ca:
         70:e3:71:a1:e1:80:c4:33:ec:4b:59:7f:69:78:ac:d8:57:b2:
         33:8b:18:67:13:22:f0:11:d1:cf:12:2e:61:7b:56:43:55:a8:
         61:5f:2b:8a:d3:a6:2b:89:3b:3f:85:6c:bd:dc:0a:a0:e0:7e:
         cd:62:04:7c:cb:c8:c0:cf:36:1a:b7:76:25:53:77:9f:82:fc:
         79:1c:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:36 2026 by rpki-client