This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131372e302f32342d3234203d3e20323632323138.roa
File:                     3138362e3135392e3131372e302f32342d3234203d3e20323632323138.roa (raw, json)
Hash identifier:          EfHALTpg7oS6KvPzXqmTyO2HABu6WbZ+fqEWJukQOCs=
Subject key identifier:   58:91:39:66:D7:2F:30:5B:32:F1:99:2D:93:6E:1D:DA:16:10:60:C1
Certificate issuer:       /CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
Certificate serial:       621692F49C91BD82E745EC3BA19C4F8E3A244FBE
Authority key identifier: 37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131372e302f32342d3234203d3e20323632323138.roa
Signing time:             Tue 06 Jan 2026 19:45:34 +0000
ROA not before:           Tue 06 Jan 2026 19:40:34 +0000
ROA not after:            Tue 05 Jan 2027 19:45:34 +0000
asID:                     262218
IP address blocks:        186.159.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:16:92:f4:9c:91:bd:82:e7:45:ec:3b:a1:9c:4f:8e:3a:24:4f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
        Validity
            Not Before: Jan  6 19:40:34 2026 GMT
            Not After : Jan  5 19:45:34 2027 GMT
        Subject: CN=58913966D72F305B32F1992D936E1DDA161060C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c2:78:13:11:05:5e:a8:84:31:6d:61:e3:39:
                    07:f6:18:aa:d4:e5:2e:d6:f8:27:17:db:b8:b7:3c:
                    62:97:99:be:f2:be:77:8f:77:0d:bf:db:0f:d3:7c:
                    0b:69:02:7c:f4:d3:ae:bf:e7:33:48:ee:ba:26:24:
                    20:46:b0:d2:4b:4c:e6:ac:32:d4:c0:12:d7:d2:a6:
                    70:f0:97:a5:9e:a7:a7:cb:6e:eb:85:f7:cd:10:6f:
                    97:3b:8c:f5:aa:a9:24:42:5e:5a:80:fc:0a:df:b7:
                    e9:df:93:3f:84:1e:c9:be:1a:67:4a:09:8b:69:6d:
                    f9:89:9e:1b:49:05:a1:fb:d1:d9:24:a2:31:b5:d1:
                    61:58:ed:79:c1:4b:00:1f:34:1f:e1:cf:cd:3e:8c:
                    36:f8:17:a1:63:ff:90:f8:4b:70:ff:cd:07:1f:17:
                    fa:fc:f2:d2:a4:b5:cf:f9:03:39:f2:97:13:b7:1d:
                    13:56:2c:79:5a:b5:1d:12:8d:65:b3:a8:a1:72:48:
                    34:02:17:f6:32:57:2c:3c:b6:59:74:a5:a2:96:28:
                    73:1a:b5:69:31:26:98:e7:93:cc:b6:2e:80:f5:06:
                    9f:45:c2:43:64:8c:27:0d:7f:14:31:e7:07:4c:57:
                    c6:67:b0:cb:34:40:9d:7a:cf:c6:4f:d6:8d:ab:8a:
                    90:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:91:39:66:D7:2F:30:5B:32:F1:99:2D:93:6E:1D:DA:16:10:60:C1
            X509v3 Authority Key Identifier:
                keyid:37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131372e302f32342d3234203d3e20323632323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:ca:1c:0e:4f:af:e1:14:a3:01:e0:ef:a9:26:09:af:3a:c7:
         79:53:a7:54:4b:5d:93:4a:4b:74:fa:88:33:58:6c:ba:a7:18:
         00:f9:c9:01:9e:e2:0e:b6:1e:1c:3e:b6:6c:05:db:b4:0b:0e:
         5e:00:3f:d3:08:7e:2d:07:bb:7b:40:bc:37:98:74:ff:a0:d1:
         1e:94:56:4e:60:89:51:18:7a:79:cf:a9:3f:fd:18:cc:00:8c:
         46:dd:47:4e:cb:d2:02:fd:be:08:43:10:9f:11:9c:7c:fb:3a:
         85:fa:71:26:ef:30:31:bc:bc:06:84:a2:ed:d8:70:51:d2:3e:
         65:ca:fb:ac:3b:ec:b8:7c:7a:1c:b3:ae:ca:f2:22:03:81:21:
         f5:eb:7d:22:71:93:5a:fe:b6:23:b9:11:92:2e:d4:b5:54:ab:
         fa:32:b8:45:dd:c1:0f:2b:fc:a6:ec:63:bf:67:db:c7:35:58:
         67:ea:e3:35:6e:38:2c:8a:e0:ab:e1:b5:bf:ee:1e:c9:50:b1:
         c8:30:97:a9:9e:de:85:8f:bd:30:40:18:b4:73:83:bb:a7:2d:
         cc:51:19:63:29:e0:5d:5f:2b:a0:32:dd:21:3a:9e:47:d5:f5:
         d1:67:c9:89:4f:8c:29:76:76:6e:4f:bf:7a:e7:32:93:e4:a2:
         f4:b8:e4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:39 2026 by rpki-client