This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e203139393035.roa
File:                     3138362e302e3135322e302f32322d3234203d3e203139393035.roa (raw, json)
Hash identifier:          CtgsHUFyC1eFB3d1nc6CqY085j8tLJDSCgEJSbxzdCY=
Subject key identifier:   92:31:D8:4A:32:C4:4E:BE:50:74:CF:F5:0A:19:C1:E9:8E:C9:5A:F4
Certificate issuer:       /CN=86A5D10A30ED805BDE337515CB0F580086111558
Certificate serial:       54129A5257677E3772C182096CD2A9C95749B5EA
Authority key identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e203139393035.roa
Signing time:             Tue 06 Jan 2026 19:06:25 +0000
ROA not before:           Tue 06 Jan 2026 19:01:25 +0000
ROA not after:            Tue 05 Jan 2027 19:06:25 +0000
asID:                     19905
IP address blocks:        186.0.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 15:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:12:9a:52:57:67:7e:37:72:c1:82:09:6c:d2:a9:c9:57:49:b5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A5D10A30ED805BDE337515CB0F580086111558
        Validity
            Not Before: Jan  6 19:01:25 2026 GMT
            Not After : Jan  5 19:06:25 2027 GMT
        Subject: CN=9231D84A32C44EBE5074CFF50A19C1E98EC95AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:11:c2:7e:d0:26:42:e8:54:43:2c:60:d1:30:
                    fd:09:54:64:e0:c5:b0:26:2a:a9:f8:25:c6:72:8b:
                    94:bf:5a:cb:45:56:93:cf:83:7f:5c:c1:d0:e3:5c:
                    4b:e4:3c:3e:fd:b4:ff:76:6c:15:08:92:6e:ef:77:
                    c1:d8:9f:ad:cb:4e:3e:d2:ae:ff:b9:f9:47:de:e9:
                    4b:3c:8c:d7:63:59:2e:f6:ad:2d:97:1c:f6:32:6c:
                    f1:46:d5:84:b9:6e:74:17:1d:05:91:3b:5e:a5:e8:
                    53:44:24:dd:f6:ab:20:8e:5a:d6:c2:3b:2a:9c:b2:
                    5c:86:1c:19:c5:e0:cf:46:88:ea:fa:74:c7:97:44:
                    b9:36:58:67:71:cb:47:47:13:c4:70:62:06:87:d4:
                    99:bf:54:8e:0a:f8:3a:92:7a:c5:ff:cf:d8:0d:e4:
                    c7:d3:56:be:fe:ad:a2:1f:53:ce:1c:5e:87:f3:c8:
                    fa:ae:ce:30:1f:ab:5c:32:fa:41:f4:53:48:04:c8:
                    e6:7e:7d:80:b5:c2:65:d2:77:1e:a6:da:d7:42:12:
                    a4:8f:0c:09:a3:97:cd:61:99:03:9c:45:ec:48:1a:
                    2d:a8:26:eb:00:76:ec:8d:fc:ce:ba:29:1b:09:d0:
                    fc:0e:1d:3b:4a:0e:92:7b:16:1c:f1:ea:2c:ed:7c:
                    60:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:31:D8:4A:32:C4:4E:BE:50:74:CF:F5:0A:19:C1:E9:8E:C9:5A:F4
            X509v3 Authority Key Identifier:
                keyid:86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:b4:15:7d:fb:b9:d4:15:75:51:6f:b4:4b:f8:47:ca:a3:2a:
         dc:fa:9b:d6:96:44:95:bf:d8:01:71:17:2f:89:60:a7:f3:a1:
         ad:23:09:4f:a6:3d:47:5f:81:e6:b2:0f:5f:34:af:6a:72:9c:
         3f:43:61:ba:24:8a:ae:14:0e:c5:46:b7:58:18:f6:18:11:da:
         81:18:95:2e:20:26:d2:8d:d1:a8:b0:17:db:76:63:18:38:30:
         44:33:42:c5:41:bf:72:01:58:22:2a:6b:e8:b2:a2:62:b6:ef:
         aa:6c:6c:8a:eb:d9:14:68:a2:95:8d:3f:62:cc:52:61:d4:6e:
         92:6c:79:a4:6d:2f:78:22:ba:6e:87:bb:2b:a8:78:5c:6d:6b:
         4e:0d:86:08:40:7f:86:05:98:50:3d:12:00:1b:07:98:24:ef:
         85:e1:2e:71:4f:87:e6:69:33:75:4d:30:aa:a4:69:ee:1c:6e:
         17:95:b8:92:83:8e:40:b6:87:07:e0:3d:d7:00:f4:55:ee:19:
         ab:60:0c:6c:25:0a:93:96:59:51:a9:13:c8:1e:9b:ff:8e:4b:
         9c:ac:6f:8f:f1:d4:58:07:22:26:5f:00:37:5d:6f:8a:80:42:
         11:9f:ca:ce:e7:3a:dc:89:e5:a4:4a:df:c7:9b:76:08:40:94:
         ca:63:73:5b
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUVBKaUldnfjdywYIJbNKpyVdJteowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZBNUQxMEEzMEVEODA1QkRFMzM3NTE1Q0IwRjU4MDA4
NjExMTU1ODAeFw0yNjAxMDYxOTAxMjVaFw0yNzAxMDUxOTA2MjVaMDMxMTAvBgNV
BAMTKDkyMzFEODRBMzJDNDRFQkU1MDc0Q0ZGNTBBMTlDMUU5OEVDOTVBRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcEcJ+0CZC6FRDLGDRMP0JVGTg
xbAmKqn4JcZyi5S/WstFVpPPg39cwdDjXEvkPD79tP92bBUIkm7vd8HYn63LTj7S
rv+5+Ufe6Us8jNdjWS72rS2XHPYybPFG1YS5bnQXHQWRO16l6FNEJN32qyCOWtbC
OyqcslyGHBnF4M9GiOr6dMeXRLk2WGdxy0dHE8RwYgaH1Jm/VI4K+DqSesX/z9gN
5MfTVr7+raIfU84cXofzyPquzjAfq1wy+kH0U0gEyOZ+fYC1wmXSdx6m2tdCEqSP
DAmjl81hmQOcRexIGi2oJusAduyN/M66KRsJ0PwOHTtKDpJ7Fhzx6iztfGC5AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUkjHYSjLETr5QdM/1ChnB6Y7JWvQwHwYDVR0j
BBgwFoAUhqXRCjDtgFveM3UVyw9YAIYRFVgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMDRBNDZENkE4NURGQTYxNDlDNUY5QTdDREExOENGOTMw
RDM4MkYzMzgyRTE5MjNENTAzRjgyOUFDNDUwRDAyLzAvODZBNUQxMEEzMEVEODA1
QkRFMzM3NTE1Q0IwRjU4MDA4NjExMTU1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NkE1RDEwQTMwRUQ4MDVCREUz
Mzc1MTVDQjBGNTgwMDg2MTExNTU4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjA0QTQ2RDZBODVERkE2MTQ5QzVGOUE3Q0RBMThDRjkzMEQzODJGMzM4
MkUxOTIzRDUwM0Y4MjlBQzQ1MEQwMi8wLzMxMzgzNjJlMzAyZTMxMzUzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzkzOTMwMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK6AJgwDQYJ
KoZIhvcNAQELBQADggEBAE60FX37udQVdVFvtEv4R8qjKtz6m9aWRJW/2AFxFy+J
YKfzoa0jCU+mPUdfgeayD180r2pynD9DYbokiq4UDsVGt1gY9hgR2oEYlS4gJtKN
0aiwF9t2Yxg4MEQzQsVBv3IBWCIqa+iyomK276psbIrr2RRoopWNP2LMUmHUbpJs
eaRtL3gium6HuyuoeFxta04NhghAf4YFmFA9EgAbB5gk74XhLnFPh+ZpM3VNMKqk
ae4cbheVuJKDjkC2hwfgPdcA9FXuGatgDGwlCpOWWVGpE8gem/+OS5ysb4/x1FgH
IiZfADddb4qAQhGfys7nOtyJ5aRK38ebdghAlMpjc1s=
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:21 2026 by rpki-client