This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e3132382e302f31372d3234203d3e203132303636.roa
File:                     3138362e3132302e3132382e302f31372d3234203d3e203132303636.roa (raw, json)
Hash identifier:          Z1Mg9+kRyUOmOHrIz+v3Ho2Qc3xwcjYycnJ7QbvK+iM=
Subject key identifier:   82:6B:44:61:19:DA:D2:DE:F8:E9:ED:89:44:A0:D6:8B:7C:CA:4D:AE
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       5377DA8998863289460142E7F541EF885CF503DF
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e3132382e302f31372d3234203d3e203132303636.roa
Signing time:             Tue 06 Jan 2026 19:39:46 +0000
ROA not before:           Tue 06 Jan 2026 19:34:46 +0000
ROA not after:            Tue 05 Jan 2027 19:39:46 +0000
asID:                     12066
IP address blocks:        186.120.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:77:da:89:98:86:32:89:46:01:42:e7:f5:41:ef:88:5c:f5:03:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Jan  6 19:34:46 2026 GMT
            Not After : Jan  5 19:39:46 2027 GMT
        Subject: CN=826B446119DAD2DEF8E9ED8944A0D68B7CCA4DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ff:78:65:3b:ec:9b:20:13:1c:83:71:be:95:
                    4a:5f:8a:fd:08:77:18:2a:11:8a:da:5e:1a:0e:8f:
                    75:22:ab:bd:fc:cf:37:c2:16:a1:a4:53:5b:2e:2c:
                    21:0d:1a:35:60:34:6c:fc:4e:d3:ef:f4:3e:57:83:
                    b5:c1:0f:c3:7a:2a:b8:cb:a6:3c:9e:c8:2a:2f:60:
                    28:a4:61:e4:70:b1:eb:c8:fc:51:9e:c9:65:9b:69:
                    1d:66:e0:66:37:eb:bb:a1:fd:1c:a2:f3:fa:a8:a6:
                    43:1e:61:5d:52:6f:ed:e7:f2:38:39:6e:9e:73:69:
                    10:c3:18:9f:3f:85:73:b8:5a:8b:5b:f2:9b:06:59:
                    c5:b6:75:b4:76:47:5c:85:21:41:fd:87:c0:ce:d4:
                    a9:b5:75:aa:ed:04:0a:d8:86:73:c1:88:13:51:06:
                    77:90:77:61:ad:8d:14:3d:fe:ff:74:22:32:20:69:
                    b4:3d:66:51:ea:51:05:92:04:d0:b0:b4:89:91:e5:
                    8e:fd:06:a1:c5:59:ec:f2:05:ce:cd:00:34:05:c7:
                    55:ac:f1:a0:de:15:4c:ad:06:e2:58:d4:f9:c4:33:
                    9e:83:b5:3d:2c:0e:a7:bd:1a:7b:ca:f4:75:64:93:
                    6a:33:5c:a4:49:d7:c6:2f:a1:c8:a1:c2:70:a0:86:
                    d4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6B:44:61:19:DA:D2:DE:F8:E9:ED:89:44:A0:D6:8B:7C:CA:4D:AE
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e3132382e302f31372d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.120.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6c:ca:c3:56:3d:b6:3c:20:92:60:d9:3e:c7:cf:43:b0:1f:75:
         63:24:1d:f5:64:dd:e6:d4:04:e5:e4:0f:8c:ca:e6:f6:b3:66:
         2b:80:bc:4d:72:10:7e:72:99:ac:63:db:4e:05:79:af:1f:bf:
         5f:a3:48:dd:3e:f3:ea:25:5c:89:cc:f3:cb:c1:f7:21:ed:ca:
         06:89:79:bc:ca:7c:48:fe:b2:7c:29:fc:a2:5e:16:ce:15:59:
         fa:fe:11:f6:af:8e:c9:84:c4:8f:3e:9a:10:36:16:17:ea:26:
         fc:85:92:10:ba:1b:62:e4:0e:f9:49:9e:11:2f:ce:cb:de:25:
         8b:6e:de:a9:7d:13:89:44:66:a0:d8:5d:af:d2:90:d7:b2:f9:
         e1:bb:a1:2e:d3:7f:2c:cf:a3:1c:f1:3d:4e:dd:85:c8:0e:45:
         39:22:89:89:f8:f0:a8:df:bf:ed:39:77:8b:ec:ea:d8:36:c3:
         44:f5:30:83:cf:99:a4:22:42:06:6a:1e:eb:57:a7:dd:65:7e:
         6b:44:40:ba:d7:9f:53:cb:ed:f9:5d:63:14:29:4a:5f:04:11:
         18:ff:ad:53:f4:c4:06:63:b0:98:14:67:4b:3b:b0:0a:d5:95:
         68:68:e5:d5:15:82:b9:18:04:20:e2:08:2a:90:fb:c9:24:5c:
         5b:70:3a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:41 2026 by rpki-client