This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3134392e302e302f31362d3234203d3e203132303636.roa
File:                     3138362e3134392e302e302f31362d3234203d3e203132303636.roa (raw, json)
Hash identifier:          6+wxk+rc/vf7Sa8Q9eP+TcikAs8rUmWVdoK5DB/tu1o=
Subject key identifier:   90:BE:64:0F:80:15:FA:4E:C2:AA:57:34:A1:E9:CA:56:F4:69:36:1B
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       6F9292E5D6C4FDF89B20D2A79291454A788F640D
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3134392e302e302f31362d3234203d3e203132303636.roa
Signing time:             Tue 06 Jan 2026 19:39:52 +0000
ROA not before:           Tue 06 Jan 2026 19:34:52 +0000
ROA not after:            Tue 05 Jan 2027 19:39:52 +0000
asID:                     12066
IP address blocks:        186.149.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:92:92:e5:d6:c4:fd:f8:9b:20:d2:a7:92:91:45:4a:78:8f:64:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Jan  6 19:34:52 2026 GMT
            Not After : Jan  5 19:39:52 2027 GMT
        Subject: CN=90BE640F8015FA4EC2AA5734A1E9CA56F469361B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:03:bc:8f:90:0b:e0:bd:75:a6:a9:6c:8c:
                    fb:9a:ac:1e:6c:9b:9e:a1:91:75:f8:bb:58:3d:cd:
                    94:9d:7e:12:0c:24:4f:ff:d8:3d:04:f0:63:3a:27:
                    4c:5d:6c:bc:07:3d:01:a9:e2:7c:f5:3b:6a:28:b0:
                    35:05:49:10:a4:cd:e8:0d:8c:e1:04:b7:d9:49:28:
                    75:87:d6:09:fb:27:5c:7b:c9:a1:81:49:46:41:1b:
                    9d:44:8e:47:44:d0:2b:97:20:9c:be:72:61:54:53:
                    a6:1f:1d:f5:b7:5a:6a:cb:ce:ab:49:ae:12:d9:99:
                    36:0a:c7:bb:28:2a:c5:b1:34:fd:1c:30:3d:56:a8:
                    b1:aa:9c:63:7f:79:79:2c:93:d4:08:73:24:df:b5:
                    a8:71:a5:89:bf:bc:78:c7:5c:4d:8b:07:a9:ab:31:
                    14:1b:67:54:02:f3:48:d0:9f:0c:65:43:e4:9d:dd:
                    cf:c3:b4:4e:fb:de:d2:25:ff:e9:f6:e2:ae:05:f0:
                    b6:07:c1:aa:89:09:e6:8a:3f:1c:99:d6:90:e8:da:
                    bb:b1:8b:45:29:a4:2c:0b:77:f3:9b:15:cf:03:09:
                    50:c0:3e:d8:05:68:a2:46:9c:a5:f5:16:34:14:54:
                    f6:7e:1e:33:cc:82:45:6d:1e:3f:c0:4f:37:11:4c:
                    19:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BE:64:0F:80:15:FA:4E:C2:AA:57:34:A1:E9:CA:56:F4:69:36:1B
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3134392e302e302f31362d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.149.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         43:85:5f:5f:4c:10:15:78:be:60:40:46:3e:5f:6b:46:28:c5:
         09:0f:26:2b:cf:45:47:3a:db:56:e6:d0:d7:eb:e0:c5:63:32:
         99:94:6d:4d:11:b6:8a:0e:cf:11:25:69:46:fc:52:2a:cd:53:
         48:d0:03:79:55:9d:1e:94:02:46:5b:04:eb:62:0a:13:47:44:
         22:6e:ee:08:11:d9:97:bb:40:e9:e4:1f:84:ea:62:3a:e7:e0:
         ad:32:d3:98:eb:bc:29:ae:c8:8c:20:ad:2a:4f:9e:e8:39:65:
         21:48:a5:ab:90:a9:59:ed:22:95:91:50:20:be:62:33:b4:f5:
         d2:32:40:52:98:5b:6c:ef:ec:e6:0a:00:94:0b:bd:c8:a5:5b:
         52:8a:fb:58:28:34:7b:3b:63:f5:a0:f8:4b:97:0c:7d:74:cb:
         fa:f3:51:ec:e8:40:1a:70:32:aa:cd:2d:74:d0:59:82:10:49:
         a8:77:2c:ea:4f:32:ac:cf:ce:12:4e:f9:b2:e5:e8:6c:0b:ee:
         91:48:6e:4e:44:c9:df:c6:80:a3:78:bb:ec:f3:56:7e:13:ad:
         49:88:95:14:64:dc:80:ba:de:a2:81:34:fd:09:0b:33:ce:a5:
         c7:c2:93:be:1a:74:c9:24:19:32:40:d8:ec:1f:94:4c:31:69:
         59:ae:7d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:39 2026 by rpki-client