This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e3132382e302f31372d3234203d3e203238313138.roa
File:                     3138362e3132302e3132382e302f31372d3234203d3e203238313138.roa (raw, json)
Hash identifier:          a3pGu/k3rl1mNp5EmSiCOY5KRcOcwxMpmMiyTxqIvs4=
Subject key identifier:   CE:75:6A:1D:54:8A:24:B0:8E:21:2D:1F:BE:F7:F1:22:D6:F4:85:AB
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       15040952F852B5CE19661DA8488C51F568BD5F3C
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e3132382e302f31372d3234203d3e203238313138.roa
Signing time:             Tue 06 Jan 2026 19:39:53 +0000
ROA not before:           Tue 06 Jan 2026 19:34:53 +0000
ROA not after:            Tue 05 Jan 2027 19:39:53 +0000
asID:                     28118
IP address blocks:        186.120.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:04:09:52:f8:52:b5:ce:19:66:1d:a8:48:8c:51:f5:68:bd:5f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Jan  6 19:34:53 2026 GMT
            Not After : Jan  5 19:39:53 2027 GMT
        Subject: CN=CE756A1D548A24B08E212D1FBEF7F122D6F485AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5c:12:f4:69:b0:38:c2:c4:98:2b:d8:33:9e:
                    42:61:ed:ab:b2:0a:8a:46:8f:86:68:ac:08:fd:48:
                    5e:13:88:13:fd:c1:db:03:69:3f:9d:3c:90:91:ad:
                    3e:cd:3d:40:92:bc:78:8b:0b:7f:20:9d:f4:ef:df:
                    89:25:e5:2c:fb:3b:11:16:02:d0:1f:e5:71:10:1d:
                    03:8d:68:10:4d:2c:9d:53:ea:62:89:aa:85:78:7c:
                    94:db:77:90:5a:5a:50:98:fa:62:8d:69:76:be:c6:
                    85:7d:1e:a3:f9:0a:5e:9a:d3:12:a2:0a:21:f3:03:
                    93:a1:5d:77:16:2f:97:16:fc:0b:da:26:e2:16:35:
                    b4:1b:84:7c:1e:c7:40:81:d0:70:8c:76:ac:e9:b9:
                    d1:19:12:d0:8c:61:90:47:92:9e:55:ed:37:f8:5a:
                    6a:c3:2c:a7:d1:34:69:b2:20:7c:8f:57:25:a1:d3:
                    92:7d:73:94:a5:67:86:d0:ca:65:72:51:10:ab:d3:
                    0c:14:22:04:cb:64:cb:d9:bc:9c:02:ff:ea:00:10:
                    d9:1a:3b:19:8d:7b:b8:14:48:d7:e1:43:c7:f1:38:
                    16:86:9c:51:7c:31:26:2a:1b:fe:62:6c:a6:91:52:
                    66:19:53:40:ee:42:90:77:c7:4b:7f:da:f9:4c:c7:
                    ff:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:75:6A:1D:54:8A:24:B0:8E:21:2D:1F:BE:F7:F1:22:D6:F4:85:AB
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e3132382e302f31372d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.120.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7d:59:b6:42:83:14:74:1d:c4:c3:f4:05:d2:34:7f:9b:ea:ff:
         91:b1:d7:f9:fc:32:88:6e:10:e3:be:b2:b1:d0:5f:cc:a3:dd:
         89:65:55:e5:d1:bf:fb:1c:c5:b0:54:bb:29:f1:a1:49:0c:c5:
         1f:0c:df:61:35:87:9a:8e:ec:d1:32:10:b2:8e:ea:07:25:e5:
         56:dd:c8:f4:01:fc:69:af:b4:7a:16:42:b0:c4:0e:81:23:50:
         41:fb:09:e6:41:66:0a:31:8a:77:c8:aa:34:d3:65:a5:f3:53:
         88:73:71:9e:7d:8a:b5:7d:75:44:55:cf:a9:37:7d:18:9b:64:
         2f:ae:3e:98:d4:45:ce:ad:0a:8e:d5:1d:c1:d2:44:92:b9:38:
         71:ce:6c:ae:0a:cf:85:2e:5f:a1:06:d4:73:8a:36:f6:69:19:
         dc:22:84:fc:b0:f1:81:88:2e:8f:fd:c6:55:e0:02:f6:e4:ae:
         b2:90:a6:33:b7:c5:67:e3:2c:1b:58:c2:0a:a3:6c:5a:1c:09:
         fb:a7:ba:4a:39:a0:9b:60:bf:2c:6d:5b:e5:2b:38:be:7c:f2:
         15:db:8b:24:f1:7d:ad:34:b5:90:b2:6f:b6:c4:c6:ad:2e:d5:
         b5:89:41:65:a9:ed:e8:0b:3e:f2:9f:14:31:ed:90:2a:4c:5f:
         68:60:d3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:38 2026 by rpki-client