This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139372e302f32342d3234203d3e203532343930.roa
File:                     3138362e39362e3139372e302f32342d3234203d3e203532343930.roa (raw, json)
Hash identifier:          bfM6bzxaSpnKnsKFSbN2HZuKDCmioXPjVuCk5jn/n94=
Subject key identifier:   43:C3:12:BB:AC:FA:9B:1F:25:C9:B9:70:B4:11:81:B2:70:C0:03:EC
Certificate issuer:       /CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
Certificate serial:       2DADB5ABA1912C8E32C39ADF7D72CD666DFB4092
Authority key identifier: 61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139372e302f32342d3234203d3e203532343930.roa
Signing time:             Tue 06 Jan 2026 19:41:43 +0000
ROA not before:           Tue 06 Jan 2026 19:36:43 +0000
ROA not after:            Tue 05 Jan 2027 19:41:43 +0000
asID:                     52490
IP address blocks:        186.96.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ad:b5:ab:a1:91:2c:8e:32:c3:9a:df:7d:72:cd:66:6d:fb:40:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
        Validity
            Not Before: Jan  6 19:36:43 2026 GMT
            Not After : Jan  5 19:41:43 2027 GMT
        Subject: CN=43C312BBACFA9B1F25C9B970B41181B270C003EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e7:d7:f9:e4:dd:4b:d5:c9:92:b9:1b:21:92:
                    18:50:4d:9a:18:ea:c0:3a:1f:bc:31:ea:d8:3c:9c:
                    ba:8f:ca:ac:b3:42:dd:3c:2c:65:f1:e0:db:3c:64:
                    e2:c4:7a:f5:41:1a:03:63:82:95:c3:1c:9e:72:a9:
                    64:23:b8:6b:fb:74:04:11:1e:8f:63:8a:3c:ff:7b:
                    f8:20:e4:e7:41:b2:7f:f5:67:2e:03:cf:71:fb:f6:
                    63:37:dc:6c:a1:1b:2c:5e:f2:be:76:b2:bd:3a:57:
                    6e:c7:30:bb:20:99:13:e3:13:a1:82:d6:fb:d1:9a:
                    d7:c7:20:44:ee:9e:45:fb:15:9f:99:84:18:cc:82:
                    28:c3:46:1a:db:59:25:74:ca:0f:a4:29:54:be:08:
                    e7:03:e6:e7:8c:35:2c:86:0d:13:a9:ec:fa:3c:4e:
                    e6:f8:f5:74:0b:bd:74:53:dd:ae:28:18:7a:5b:0e:
                    1f:24:30:88:8b:b7:fc:6e:fd:8c:e8:06:87:ef:7a:
                    89:b3:89:b5:b9:98:25:74:33:ec:75:f4:6b:55:cb:
                    96:76:88:93:97:b3:91:14:c8:53:01:77:5d:13:1a:
                    78:13:7c:42:de:56:40:a9:02:22:5a:f2:38:77:ff:
                    64:07:c5:87:e6:72:56:c9:57:a6:45:fa:80:4c:f4:
                    ce:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C3:12:BB:AC:FA:9B:1F:25:C9:B9:70:B4:11:81:B2:70:C0:03:EC
            X509v3 Authority Key Identifier:
                keyid:61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139372e302f32342d3234203d3e203532343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:9a:7f:72:3c:08:ae:74:b2:0f:52:92:fc:80:85:70:6a:fa:
         c7:49:a7:ec:43:84:9e:13:4d:12:75:1d:44:19:df:64:cd:7f:
         48:f8:7b:d5:a7:b2:6e:95:dc:15:ca:66:5c:fe:35:7a:76:6a:
         49:3c:39:13:19:81:3b:97:e3:ca:f3:46:cb:85:c3:04:12:f9:
         40:df:77:3b:c8:3e:74:8c:2d:42:b1:6f:ac:b7:a1:8e:52:f4:
         52:96:d6:02:1f:df:a4:b1:20:78:e1:8a:c4:67:47:cb:ad:4d:
         ca:c2:11:84:de:01:1c:77:b1:be:94:45:3b:b2:63:53:c1:55:
         25:b8:18:bd:df:db:ee:ac:db:94:ff:ff:49:1f:b5:b5:f1:07:
         c2:67:2d:aa:87:96:4c:67:18:13:8c:3a:3f:57:b3:62:b4:37:
         f3:ae:03:68:33:ea:63:ae:04:91:b7:14:d3:f1:cb:45:e2:51:
         5a:4b:f3:39:7e:c3:7b:2f:d7:c4:fb:b7:cf:7b:e9:c3:0e:fa:
         0c:b5:aa:c6:f9:60:15:2e:b0:4f:bd:2a:98:22:38:a9:09:aa:
         28:b0:da:d6:28:e6:f8:dc:59:ad:5b:a1:cc:48:83:03:68:c2:
         e9:7e:d6:39:18:27:7b:42:cd:11:04:fe:76:a7:eb:a6:5c:f1:
         d6:a3:0f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:26 2026 by rpki-client