This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131362e302f32322d3232203d3e20323632323138.roa
File:                     3138362e3135392e3131362e302f32322d3232203d3e20323632323138.roa (raw, json)
Hash identifier:          qJyfK+NzUgQ6Hf0gIYAW5nmOqly0HYGH16+BKtDhNR4=
Subject key identifier:   DC:3F:2E:EA:17:A7:6A:BF:4A:8C:D3:BC:5A:EB:3D:B4:BD:D2:36:94
Certificate issuer:       /CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
Certificate serial:       195FF3834314F0553BDCC9BE59C78A7816377718
Authority key identifier: 37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131362e302f32322d3232203d3e20323632323138.roa
Signing time:             Tue 06 Jan 2026 19:45:34 +0000
ROA not before:           Tue 06 Jan 2026 19:40:34 +0000
ROA not after:            Tue 05 Jan 2027 19:45:34 +0000
asID:                     262218
IP address blocks:        186.159.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5f:f3:83:43:14:f0:55:3b:dc:c9:be:59:c7:8a:78:16:37:77:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
        Validity
            Not Before: Jan  6 19:40:34 2026 GMT
            Not After : Jan  5 19:45:34 2027 GMT
        Subject: CN=DC3F2EEA17A76ABF4A8CD3BC5AEB3DB4BDD23694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c4:36:d8:f6:5f:59:a0:ed:c1:6a:c3:79:a0:
                    54:bc:c0:53:87:7d:d9:f2:6f:ba:cf:7d:7b:41:e1:
                    56:66:e4:e2:5d:a2:ba:66:6e:76:e9:05:18:b7:70:
                    fb:5a:e4:7d:fc:a3:0c:ff:fe:fe:f4:95:31:09:c9:
                    95:64:01:13:57:88:db:00:2c:ca:da:71:46:8a:88:
                    4d:33:6e:03:4d:25:b2:d0:7e:7c:95:a5:64:19:3a:
                    18:40:d6:37:d7:6b:af:e9:22:87:72:b5:3f:4e:f9:
                    2f:2a:9e:a9:9c:c1:2e:db:1f:e4:54:06:f5:a6:21:
                    b2:63:6c:6a:05:5c:96:ca:0c:12:c7:ed:f1:36:c3:
                    67:de:2d:8f:a8:f6:24:79:84:1c:71:03:90:55:5d:
                    72:19:d9:de:5e:1e:e8:42:aa:97:cf:4e:3d:fb:9f:
                    ac:79:a1:fd:fc:cf:0c:44:d5:cd:1b:7b:36:a4:7c:
                    e1:b4:40:b1:9a:89:98:d2:b4:d7:44:55:c1:fd:71:
                    c1:cc:6f:9a:7b:fd:82:ef:c1:4e:b4:af:07:4a:19:
                    bf:45:bf:cc:f6:15:32:0c:64:d5:33:2c:8d:af:81:
                    fa:79:bc:ff:2e:8a:84:2b:ea:da:56:45:f9:f8:70:
                    de:a0:73:f7:14:32:59:16:7a:97:dc:a4:68:d8:9c:
                    9d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3F:2E:EA:17:A7:6A:BF:4A:8C:D3:BC:5A:EB:3D:B4:BD:D2:36:94
            X509v3 Authority Key Identifier:
                keyid:37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131362e302f32322d3232203d3e20323632323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:51:70:e2:80:be:4a:f4:a0:f3:b8:ff:0f:f1:82:35:90:ec:
         a0:44:75:35:22:65:26:9c:1f:82:2e:30:6d:c0:e5:09:0d:14:
         fc:c0:d0:cb:08:43:49:06:1b:91:82:28:2a:d9:77:e3:60:b3:
         08:06:bd:dd:c8:7b:e9:6d:7b:1e:af:63:3b:c8:0f:21:63:2f:
         df:97:82:1b:28:17:a8:7a:8f:19:e0:ab:b9:c0:75:f4:1b:79:
         07:f4:02:fb:82:d6:41:db:cd:bb:7e:c8:80:8d:2d:f9:7b:e6:
         e4:24:b9:e0:86:fc:90:e7:fc:b9:c5:f1:ec:03:12:cc:53:2c:
         8e:ff:bd:c6:45:cc:46:27:dc:14:46:c1:2f:4d:df:f0:f5:65:
         41:13:da:7a:d7:c9:00:78:5a:a6:65:c0:9c:40:3e:26:13:2e:
         57:bc:62:1f:89:4b:1f:c7:1d:87:8d:1b:1f:80:e5:4e:33:ec:
         da:6c:6a:d6:61:04:3b:d8:76:97:99:ea:83:de:9e:4f:92:14:
         5e:09:62:47:bc:54:d1:ab:4e:72:4a:87:53:b9:08:46:31:68:
         e2:0e:e2:23:42:ee:e5:16:23:c3:50:bc:06:42:2e:de:93:c2:
         9b:02:25:6f:10:e5:ec:58:2e:4b:f2:72:0c:6a:23:ca:b2:24:
         27:9c:e4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:50 2026 by rpki-client