This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3138362e34332e3132382e302f31372d3234203d3e203237363638.roa
File:                     3138362e34332e3132382e302f31372d3234203d3e203237363638.roa (raw, json)
Hash identifier:          nSFCNLw34daC8MHpfEbtpjZYGSxJUh+uHHzdbORvq0o=
Subject key identifier:   73:ED:6F:96:2B:41:D5:4B:CA:70:0E:C3:F1:BF:69:4A:B1:DB:F4:91
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       566A8DD501346F231994199E7B00FC973FE558D7
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3138362e34332e3132382e302f31372d3234203d3e203237363638.roa
Signing time:             Tue 06 Jan 2026 20:49:25 +0000
ROA not before:           Tue 06 Jan 2026 20:44:25 +0000
ROA not after:            Tue 05 Jan 2027 20:49:25 +0000
asID:                     27668
IP address blocks:        186.43.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6a:8d:d5:01:34:6f:23:19:94:19:9e:7b:00:fc:97:3f:e5:58:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Jan  6 20:44:25 2026 GMT
            Not After : Jan  5 20:49:25 2027 GMT
        Subject: CN=73ED6F962B41D54BCA700EC3F1BF694AB1DBF491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8e:b5:4a:74:80:54:b8:00:ef:10:16:1a:12:
                    30:26:f9:7b:2a:d3:e4:e9:ab:b1:b9:45:ff:30:82:
                    36:cb:cf:75:5a:7e:e8:23:b9:96:e1:84:54:1f:51:
                    f6:e9:5d:e7:c2:fd:e2:8a:ee:32:5c:4f:6a:3e:2b:
                    7c:16:e4:2f:b6:9e:73:83:ca:d0:6b:94:ff:c2:82:
                    ae:48:0a:ba:64:70:ac:e2:1a:b8:64:5c:48:a7:33:
                    fb:ea:49:12:46:ab:9a:39:e3:ab:e0:c6:7a:04:05:
                    d1:26:01:2b:16:c4:79:7b:39:02:af:a7:35:9a:41:
                    9b:4a:df:6d:6e:32:c0:46:5c:10:39:d7:da:7a:f3:
                    5d:89:4c:43:3e:c3:a2:6e:fc:12:9b:64:53:e8:b7:
                    d2:bc:42:f0:1c:58:29:4a:98:6a:fd:12:05:43:97:
                    03:d1:a9:96:f5:e1:cc:f9:e7:ff:66:cb:6f:fb:f3:
                    65:84:c9:37:f1:65:5d:d5:d6:b0:63:5b:2b:a0:1c:
                    f8:96:a2:eb:6e:66:03:c3:51:24:f3:09:ea:14:98:
                    ec:85:2d:c1:e9:74:81:bc:f0:f9:63:0b:7b:e7:d1:
                    99:b9:ae:29:cf:ec:f6:11:f0:2f:09:ab:87:33:9f:
                    04:aa:07:25:2e:cc:51:f8:67:f8:c8:ae:4a:31:d0:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:ED:6F:96:2B:41:D5:4B:CA:70:0E:C3:F1:BF:69:4A:B1:DB:F4:91
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3138362e34332e3132382e302f31372d3234203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.43.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2b:9b:a6:bb:30:4a:98:1b:e8:c1:ef:f3:fa:c8:9d:39:eb:1d:
         eb:94:f7:6c:34:3b:39:54:f9:a3:e7:24:0e:ec:75:f4:6f:7c:
         0f:d7:57:dd:15:d8:a4:c4:f6:f9:ee:d6:1a:f2:c8:b9:20:ba:
         43:ce:af:61:0f:9d:50:f0:ef:77:c1:eb:9d:29:32:53:b2:d5:
         7c:99:95:2d:dc:53:c9:cf:40:50:63:21:62:9d:e0:8a:68:3b:
         86:43:2c:94:ce:e1:a5:16:d7:3b:cb:db:4b:1b:34:ee:5c:bd:
         ed:dd:b0:70:e7:87:59:d7:72:80:33:81:8f:37:b6:54:2a:87:
         65:33:07:78:d3:43:e7:30:73:ad:4a:8e:64:c7:b5:fe:dd:72:
         34:7c:17:32:9e:a2:05:1b:53:3a:30:67:08:fb:b5:00:1e:ff:
         95:1f:9f:93:be:b4:ec:5b:6c:8b:84:a0:c7:bf:13:90:14:d8:
         ca:c0:60:3f:69:10:d4:04:be:3d:78:b9:f7:fb:b0:34:eb:32:
         3e:3a:2e:2a:c7:45:3e:8e:72:75:84:de:5e:75:15:30:ff:12:
         1a:13:cf:88:1f:b9:2c:f8:90:a0:d8:b9:90:89:0c:2b:c0:46:
         4a:cb:32:25:b8:4d:57:c4:d5:26:c8:93:9a:41:a2:9e:fa:66:
         98:be:c8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:25:48 2026 by rpki-client