This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e20323032.roa
File:                     3138362e302e3135322e302f32322d3234203d3e20323032.roa (raw, json)
Hash identifier:          rhoWhe1WLZTDwYbAavmdDncKC2zcF133mfZj7hrY10U=
Subject key identifier:   72:0F:E6:AB:3B:04:FE:4D:45:64:98:1A:EF:FD:F6:4D:83:B4:9A:96
Certificate issuer:       /CN=86A5D10A30ED805BDE337515CB0F580086111558
Certificate serial:       7EF457B3943AC8028EB863A5FB02534E3F59C6AB
Authority key identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e20323032.roa
Signing time:             Wed 14 Jan 2026 15:00:30 +0000
ROA not before:           Wed 14 Jan 2026 14:55:30 +0000
ROA not after:            Wed 13 Jan 2027 15:00:30 +0000
asID:                     202
IP address blocks:        186.0.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 15:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f4:57:b3:94:3a:c8:02:8e:b8:63:a5:fb:02:53:4e:3f:59:c6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A5D10A30ED805BDE337515CB0F580086111558
        Validity
            Not Before: Jan 14 14:55:30 2026 GMT
            Not After : Jan 13 15:00:30 2027 GMT
        Subject: CN=720FE6AB3B04FE4D4564981AEFFDF64D83B49A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:f8:03:8b:45:a6:b6:c5:3f:46:34:a3:d5:
                    04:38:4a:82:94:8f:33:44:ae:10:bf:64:c4:25:6a:
                    93:3e:f1:02:28:26:ed:28:e6:f1:94:12:89:15:ae:
                    2e:59:d1:d8:b6:49:b7:8d:de:81:62:fd:b2:84:c0:
                    2b:ff:e9:5b:3d:6d:1b:f0:6f:4e:84:32:58:bb:8a:
                    a9:0d:ef:a5:6f:c7:4c:87:cc:07:f4:aa:ce:52:bf:
                    0f:01:fd:1e:17:c9:fd:ce:2b:25:96:e2:20:c7:90:
                    f3:dd:95:22:08:f3:e3:35:e5:6b:9c:97:20:de:1e:
                    4b:82:b3:79:f2:39:07:95:56:7e:b6:dc:f9:3b:1f:
                    33:89:ba:85:a6:f2:8a:da:0d:78:51:2b:ac:17:a0:
                    eb:44:ce:dd:32:f8:6d:36:11:53:8c:bb:8e:75:5d:
                    ee:f8:83:0f:c5:f2:e5:80:f7:44:0a:0b:49:74:ca:
                    ad:c5:50:d4:da:00:06:79:d3:a3:15:7b:09:f6:e7:
                    d0:da:71:85:97:05:39:7e:d9:eb:15:6f:d6:e0:a9:
                    f3:d1:79:00:52:3f:71:ce:49:97:22:ba:e3:ae:51:
                    b2:2f:0b:24:d6:09:54:8b:43:5d:7d:8b:a8:7b:45:
                    56:13:d4:81:c7:b2:73:b7:e4:5c:38:63:48:42:6e:
                    d1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0F:E6:AB:3B:04:FE:4D:45:64:98:1A:EF:FD:F6:4D:83:B4:9A:96
            X509v3 Authority Key Identifier:
                keyid:86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:33:f9:8d:96:de:2a:e6:21:e3:ba:b0:f5:04:4e:03:c0:5b:
         f9:17:cc:b1:a6:94:f0:b4:e0:cc:c1:30:84:4f:87:37:98:54:
         c3:4f:13:23:30:4f:ef:dc:1a:2a:f8:cd:97:f0:63:ea:00:0d:
         e6:65:07:02:6a:e4:dd:fd:45:6b:77:c9:5c:eb:1e:ec:44:7e:
         ec:2b:67:89:18:db:10:96:1b:28:6d:4a:c0:f2:e0:2d:79:77:
         8c:8f:25:e9:26:c8:f1:a2:5e:44:1c:0e:df:ec:37:9d:31:58:
         8b:97:ca:3f:7f:7d:fa:b9:b9:10:b4:8d:ab:e4:6c:b1:5a:dc:
         20:18:6c:e5:d7:3b:79:b3:7d:02:c3:22:b5:db:3d:3d:32:51:
         26:b1:d3:8b:66:8c:61:9a:03:6c:0e:cf:51:e4:30:38:79:38:
         cf:6d:f5:b6:26:8d:9a:c6:fd:c2:4e:67:bd:20:f4:46:24:b1:
         ac:62:c8:74:ee:6a:0e:ee:d8:33:4b:b6:0b:6b:02:1d:72:56:
         2a:43:b3:82:17:64:2e:4b:00:f1:98:24:03:29:58:fc:12:ec:
         4e:62:67:05:54:3e:d3:e4:56:e1:13:bb:07:da:0e:21:88:3b:
         cd:6c:9b:40:7a:36:95:42:ef:13:13:9a:ee:d3:f7:77:d5:f3:
         c0:a6:53:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:16 2026 by rpki-client