This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139322e302f32342d3234203d3e203532343930.roa
File:                     3138362e39362e3139322e302f32342d3234203d3e203532343930.roa (raw, json)
Hash identifier:          FOQ1ZBLW9rskpQYOd9xDV6Ff5bDbAnzEFYWxzplqRMs=
Subject key identifier:   64:A4:F0:B4:EF:95:4D:D7:6E:61:54:7E:CF:7D:E0:76:B7:6A:71:AB
Certificate issuer:       /CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
Certificate serial:       0657802A6DD05D7760EE9A9CD05F319CEA696819
Authority key identifier: 61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139322e302f32342d3234203d3e203532343930.roa
Signing time:             Tue 06 Jan 2026 19:41:44 +0000
ROA not before:           Tue 06 Jan 2026 19:36:44 +0000
ROA not after:            Tue 05 Jan 2027 19:41:44 +0000
asID:                     52490
IP address blocks:        186.96.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:57:80:2a:6d:d0:5d:77:60:ee:9a:9c:d0:5f:31:9c:ea:69:68:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
        Validity
            Not Before: Jan  6 19:36:44 2026 GMT
            Not After : Jan  5 19:41:44 2027 GMT
        Subject: CN=64A4F0B4EF954DD76E61547ECF7DE076B76A71AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1f:0a:ef:1f:77:4e:89:c5:fd:1f:b2:b6:74:
                    cd:1e:f6:70:c8:20:b3:18:ad:57:eb:4b:b0:0a:f1:
                    f0:a9:4f:22:45:44:93:1a:31:0b:37:b1:9e:4d:d3:
                    11:bf:d3:b5:41:ea:9a:9d:8a:37:69:30:4a:de:f5:
                    ac:ad:50:0c:7a:f5:ed:dd:ff:31:09:82:b2:10:fe:
                    c2:d5:27:7b:0b:6e:65:04:92:9c:e0:78:9f:1e:f3:
                    9e:46:b0:8b:fe:6c:bd:80:b7:15:70:c7:92:a9:5d:
                    d3:68:d0:63:5d:f7:52:bf:e4:47:3a:28:4a:0e:ca:
                    cb:b3:fe:10:b0:23:92:75:88:79:4e:ab:a6:a1:7e:
                    0f:d4:db:33:2c:fc:3e:04:11:a6:77:4e:7d:92:64:
                    44:66:aa:93:a6:23:4a:a7:2b:0c:82:fe:f8:68:cd:
                    4b:6a:7b:2e:d7:b8:ce:5b:f5:f8:2a:22:6b:70:c1:
                    f3:42:42:84:70:bb:e7:f7:b1:a2:43:70:65:93:61:
                    4a:94:d6:8e:94:4f:b4:e5:f3:bb:c2:8e:d7:32:08:
                    02:09:83:67:68:ac:09:c9:bf:2a:12:49:e2:17:95:
                    0a:13:af:ea:24:1f:15:50:45:60:3f:1d:b5:18:94:
                    1f:db:b4:51:fb:58:df:12:8a:7e:3c:60:56:4b:03:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A4:F0:B4:EF:95:4D:D7:6E:61:54:7E:CF:7D:E0:76:B7:6A:71:AB
            X509v3 Authority Key Identifier:
                keyid:61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139322e302f32342d3234203d3e203532343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:00:f2:56:c6:c7:f7:20:6a:68:4b:d7:b3:f9:c7:f6:36:a1:
         22:4d:51:28:a5:e3:1c:e6:58:d5:98:4d:6c:8e:bb:89:f5:f7:
         89:2b:47:83:39:00:2f:0f:31:a2:3f:96:26:6d:6e:e2:93:fb:
         a3:c0:a2:d4:ae:ea:9a:b0:97:ef:3a:50:60:05:e8:5c:00:ab:
         98:37:20:23:22:f2:45:69:c7:1c:1b:03:e5:dc:80:ed:65:1d:
         e8:14:dc:2e:90:19:ed:55:6f:e7:11:e1:04:22:ad:2a:8b:23:
         14:2f:d5:8e:a9:35:23:72:32:54:6e:b0:0d:50:10:b7:94:9e:
         d7:fe:ef:72:08:27:75:60:40:16:1e:77:8e:0a:50:33:e4:25:
         5d:52:36:08:75:5a:da:04:eb:fd:70:1d:b8:bf:6c:25:67:34:
         3c:27:ae:8c:b3:e2:ba:c1:e7:67:b0:32:34:35:39:80:1f:60:
         b6:b5:24:85:89:87:39:12:f2:85:e1:08:31:c5:47:32:49:08:
         f9:2c:f7:fa:93:3b:98:aa:df:19:f7:90:a6:d8:bd:a1:ed:ac:
         d1:ac:57:f4:89:08:cd:4e:41:48:e1:90:39:cc:2c:2b:d1:a2:
         84:ef:4f:18:f1:30:8e:09:7c:e8:39:94:81:9e:ca:4a:ee:37:
         7a:17:98:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:33 2026 by rpki-client