This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3234342e302f32332d3233203d3e20323634373331.roa
File:                     3138362e3136372e3234342e302f32332d3233203d3e20323634373331.roa (raw, json)
Hash identifier:          ivBJBZ7f0GQy3hvN87WfYmWI1fIeWT4Mt3+qkSzVV/8=
Subject key identifier:   F5:B6:22:25:51:B3:FB:99:CA:5D:EA:E3:DB:34:03:6E:24:E7:3E:80
Certificate issuer:       /CN=4952A16D3AC597268E782F4930101E90D668A012
Certificate serial:       24B9B2D86256C0FF75CF183E80BE7EBFBFD63186
Authority key identifier: 49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3234342e302f32332d3233203d3e20323634373331.roa
Signing time:             Tue 06 Jan 2026 19:16:12 +0000
ROA not before:           Tue 06 Jan 2026 19:11:12 +0000
ROA not after:            Tue 05 Jan 2027 19:16:12 +0000
asID:                     264731
IP address blocks:        186.167.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b9:b2:d8:62:56:c0:ff:75:cf:18:3e:80:be:7e:bf:bf:d6:31:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4952A16D3AC597268E782F4930101E90D668A012
        Validity
            Not Before: Jan  6 19:11:12 2026 GMT
            Not After : Jan  5 19:16:12 2027 GMT
        Subject: CN=F5B6222551B3FB99CA5DEAE3DB34036E24E73E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:64:41:21:1c:0b:ba:35:87:90:47:21:ca:
                    7d:cb:b7:7e:13:03:cb:c7:ae:e1:a3:41:cb:30:b7:
                    b0:f7:66:8e:47:9e:f6:5b:97:ea:ec:13:b1:e6:5d:
                    47:ab:26:17:54:2a:84:b4:cb:b3:d5:00:7d:dd:43:
                    49:29:c4:67:03:af:9d:ba:de:6a:5f:fc:49:43:42:
                    0a:6a:54:d2:e0:e3:a0:24:65:5c:a5:2c:c4:17:34:
                    cc:01:23:a6:1e:9a:2c:11:c9:52:f3:c9:61:65:ea:
                    23:52:60:f3:1d:76:b3:f1:88:7c:8f:33:70:65:58:
                    4a:a9:63:da:54:bf:d8:ca:0e:84:fa:fd:7c:78:1a:
                    bf:76:e0:38:b9:bd:f1:0b:91:14:99:73:9b:a5:18:
                    9c:e6:a3:d5:c7:fa:fb:cd:e2:37:a7:86:72:14:d8:
                    c5:32:02:7b:02:6f:b5:df:9e:25:e4:fe:0a:79:f6:
                    42:65:58:c3:7a:d6:1f:93:dc:d7:d7:39:7d:56:a2:
                    97:dc:6e:7c:44:cd:b8:cc:ba:79:18:83:36:a4:f9:
                    70:79:e1:de:38:89:78:ec:ad:3e:bc:c4:6b:ee:47:
                    6e:1a:47:27:70:5b:10:14:20:2f:46:3d:fa:51:f8:
                    8b:b6:53:f4:f5:88:4c:cc:fa:c2:4f:eb:bf:2b:dd:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B6:22:25:51:B3:FB:99:CA:5D:EA:E3:DB:34:03:6E:24:E7:3E:80
            X509v3 Authority Key Identifier:
                keyid:49:52:A1:6D:3A:C5:97:26:8E:78:2F:49:30:10:1E:90:D6:68:A0:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/4952A16D3AC597268E782F4930101E90D668A012.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4952A16D3AC597268E782F4930101E90D668A012.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB615110AA04E343F5C8B5E2E23DF150DD29FF526661005BA3A84936B195DF4A/0/3138362e3136372e3234342e302f32332d3233203d3e20323634373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:47:46:c9:17:38:58:a2:09:e9:a4:82:c7:5b:ea:3b:86:d3:
         4b:84:15:3f:0f:e6:12:3b:9b:a0:dc:82:4d:99:0c:31:4d:e2:
         35:a9:24:99:d6:e2:46:bc:c3:28:9a:d7:61:88:32:52:f4:50:
         ae:ab:0c:55:ed:68:19:2b:59:1c:01:e6:83:20:13:b9:ea:8c:
         bc:90:63:a1:8d:b3:67:94:b2:04:ff:9e:d0:d9:94:b2:bf:ef:
         f1:f9:d2:8d:c3:e4:fc:e9:02:ae:a7:f1:74:54:2b:b7:e7:5d:
         ea:44:43:12:71:4a:a0:b6:cc:93:64:a1:1b:a2:d6:68:89:30:
         92:42:d4:2d:9a:66:65:b7:7f:c4:db:8e:64:d6:76:4f:5b:23:
         6e:ad:3a:fe:53:d6:ae:a7:42:0a:a8:f5:2f:a1:15:5e:82:6b:
         18:c2:73:ea:48:1a:b0:df:66:c1:9e:33:bc:58:98:06:4a:7e:
         01:00:cd:4d:31:a0:25:89:df:e0:f0:60:a0:f7:d9:6c:07:45:
         bb:90:8a:b4:54:3d:6a:28:ac:d4:17:36:d9:e1:d5:96:91:fb:
         5d:27:68:67:6f:fa:4e:e4:c5:8f:80:1c:85:12:2c:35:1a:d6:
         94:13:03:5b:fe:3a:17:25:ad:76:b5:de:15:88:05:73:62:31:
         91:ea:d5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:06:49 2026 by rpki-client