This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131392e302f32342d3234203d3e20323632323138.roa
File:                     3138362e3135392e3131392e302f32342d3234203d3e20323632323138.roa (raw, json)
Hash identifier:          SqytS86Oy96tAAH2Nst/N/7z857SX8alBbaQbmmhVsY=
Subject key identifier:   50:99:39:FA:21:77:1F:A8:48:59:36:10:80:78:F1:51:30:31:36:11
Certificate issuer:       /CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
Certificate serial:       2129F4AD03C948E273FE45F196BD29D836EE9281
Authority key identifier: 37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131392e302f32342d3234203d3e20323632323138.roa
Signing time:             Tue 06 Jan 2026 19:45:35 +0000
ROA not before:           Tue 06 Jan 2026 19:40:35 +0000
ROA not after:            Tue 05 Jan 2027 19:45:35 +0000
asID:                     262218
IP address blocks:        186.159.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:29:f4:ad:03:c9:48:e2:73:fe:45:f1:96:bd:29:d8:36:ee:92:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
        Validity
            Not Before: Jan  6 19:40:35 2026 GMT
            Not After : Jan  5 19:45:35 2027 GMT
        Subject: CN=509939FA21771FA8485936108078F15130313611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:18:49:34:d4:75:df:d6:91:ba:18:8a:14:
                    d1:ad:23:38:6b:52:db:3e:b3:35:3a:00:c0:5a:48:
                    2b:af:c8:97:a9:a5:54:51:d1:11:11:c8:eb:4e:56:
                    77:cb:f6:ef:01:b3:1d:94:8f:0c:c4:ac:2c:5e:5a:
                    91:07:fe:1f:8d:b7:93:0a:1c:ad:61:89:2c:87:52:
                    d8:b8:82:d1:52:05:2f:c3:1f:f3:23:c5:2b:93:d3:
                    f4:bc:5a:05:e6:4d:dd:c6:87:45:46:c3:60:ed:ff:
                    c4:5b:8a:02:b2:7e:70:4b:9c:0f:91:03:02:25:a5:
                    39:fd:46:be:c1:3d:37:ea:09:9a:7b:b7:55:a3:2a:
                    c4:5b:00:dd:5e:35:43:dd:ad:d1:16:9c:2d:a3:45:
                    1f:12:8e:c7:f8:7f:57:43:c9:6f:07:68:b6:80:94:
                    04:db:fb:35:c0:db:d5:5f:7e:44:8e:8c:6e:9b:b0:
                    d1:19:a9:bc:76:c1:a6:aa:f0:e9:07:57:bf:ac:32:
                    74:54:e4:1a:42:16:59:7c:db:84:eb:cd:80:a4:6e:
                    53:5b:46:6f:9f:11:08:77:99:23:bf:8a:0a:2d:e0:
                    ae:66:37:3d:77:97:a0:46:c8:80:3f:bd:a0:0f:76:
                    90:af:7e:a8:5e:09:71:ad:ac:8b:5b:c5:1f:b1:6e:
                    b1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:99:39:FA:21:77:1F:A8:48:59:36:10:80:78:F1:51:30:31:36:11
            X509v3 Authority Key Identifier:
                keyid:37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3138362e3135392e3131392e302f32342d3234203d3e20323632323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:ff:01:a4:e2:a7:81:bc:e4:d1:c6:dc:72:30:21:bb:22:8e:
         5f:cc:a4:71:71:05:6c:c8:bb:cb:5d:68:31:48:e0:f8:41:42:
         e2:43:24:f5:58:af:9b:12:48:ba:f3:99:23:aa:6d:ef:e1:ce:
         a0:3e:a9:1c:e9:df:8a:c9:97:c5:a1:a1:b4:39:2a:93:54:3a:
         af:36:b5:35:b9:2d:a8:6e:90:33:b4:00:20:e9:9e:fd:bb:d9:
         4c:cc:6a:3e:29:61:f9:f8:ec:b1:e2:4f:cb:8b:8b:a8:c9:c2:
         41:ce:c1:27:b3:8e:41:7e:58:8b:9e:44:92:3a:ce:00:f6:1c:
         71:e9:15:7f:b2:74:2d:11:30:50:90:b5:ef:86:88:6b:bc:02:
         70:1a:1a:a5:de:c5:a7:a2:45:69:6c:95:ec:ff:73:53:59:49:
         55:17:f4:57:84:b0:40:00:fa:9b:63:9f:9e:29:bd:58:9e:98:
         22:44:48:4e:0a:61:38:4d:a7:95:74:90:42:0a:ba:0d:ef:e4:
         c9:0a:89:9d:35:12:29:3a:c3:00:6f:d6:31:82:4c:53:c3:e3:
         5c:25:07:4a:fd:de:d2:56:f1:14:91:d7:f0:f9:42:22:a7:6f:
         2a:71:55:9f:92:fc:a6:5c:d8:57:d2:c9:e6:7d:86:16:7b:6c:
         2b:a9:52:a6
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUISn0rQPJSOJz/kXxlr0p2DbukoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzczMDlFQkQxMzk1NENBMzVFQzU4OTg2QUVGRUY1NzlE
QTUyQTlCRDAeFw0yNjAxMDYxOTQwMzVaFw0yNzAxMDUxOTQ1MzVaMDMxMTAvBgNV
BAMTKDUwOTkzOUZBMjE3NzFGQTg0ODU5MzYxMDgwNzhGMTUxMzAzMTM2MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNOxhJNNR139aRuhiKFNGtIzhr
Uts+szU6AMBaSCuvyJeppVRR0RERyOtOVnfL9u8Bsx2UjwzErCxeWpEH/h+Nt5MK
HK1hiSyHUti4gtFSBS/DH/MjxSuT0/S8WgXmTd3Gh0VGw2Dt/8RbigKyfnBLnA+R
AwIlpTn9Rr7BPTfqCZp7t1WjKsRbAN1eNUPdrdEWnC2jRR8Sjsf4f1dDyW8HaLaA
lATb+zXA29VffkSOjG6bsNEZqbx2waaq8OkHV7+sMnRU5BpCFll824TrzYCkblNb
Rm+fEQh3mSO/igot4K5mNz13l6BGyIA/vaAPdpCvfqheCXGtrItbxR+xbrHPAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUUJk5+iF3H6hIWTYQgHjxUTAxNhEwHwYDVR0j
BBgwFoAUNzCevROVTKNexYmGrv71edpSqb0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NUM3NTJFMUFENDg4OUJCN0VCNTQ1QTZCN0VGODFGOEFF
QzU4RDhCMjFFODFDM0M5OTYxMDNGQUVEN0MxNzk4LzAvMzczMDlFQkQxMzk1NENB
MzVFQzU4OTg2QUVGRUY1NzlEQTUyQTlCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNzMwOUVCRDEzOTU0Q0EzNUVD
NTg5ODZBRUZFRjU3OURBNTJBOUJELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTVDNzUyRTFBRDQ4ODlCQjdFQjU0NUE2QjdFRjgxRjhBRUM1OEQ4QjIx
RTgxQzNDOTk2MTAzRkFFRDdDMTc5OC8wLzMxMzgzNjJlMzEzNTM5MmUzMTMxMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjMxMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC6
n3cwDQYJKoZIhvcNAQELBQADggEBAFT/AaTip4G85NHG3HIwIbsijl/MpHFxBWzI
u8tdaDFI4PhBQuJDJPVYr5sSSLrzmSOqbe/hzqA+qRzp34rJl8WhobQ5KpNUOq82
tTW5LahukDO0ACDpnv272UzMaj4pYfn47LHiT8uLi6jJwkHOwSezjkF+WIueRJI6
zgD2HHHpFX+ydC0RMFCQte+GiGu8AnAaGqXexaeiRWlslez/c1NZSVUX9FeEsEAA
+ptjn54pvViemCJESE4KYThNp5V0kEIKug3v5MkKiZ01Eik6wwBv1jGCTFPD41wl
B0r93tJW8RSR1/D5QiKnbypxVZ+S/KZc2FfSyeZ9hhZ7bCupUqY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:41 2026 by rpki-client