This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3134392e302e302f31362d3234203d3e203238313138.roa
File:                     3138362e3134392e302e302f31362d3234203d3e203238313138.roa (raw, json)
Hash identifier:          /r5klBTWIan2FRHx8TbC1gKF8Z50Bv6VU3+/V0nwwpg=
Subject key identifier:   A5:09:0D:80:AD:BE:87:4A:D6:CA:01:31:0D:13:9A:50:AD:B5:08:0F
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       305E83D329CA23AE9AB9A18F88078C61DF2F71F3
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3134392e302e302f31362d3234203d3e203238313138.roa
Signing time:             Tue 06 Jan 2026 19:39:54 +0000
ROA not before:           Tue 06 Jan 2026 19:34:54 +0000
ROA not after:            Tue 05 Jan 2027 19:39:54 +0000
asID:                     28118
IP address blocks:        186.149.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5e:83:d3:29:ca:23:ae:9a:b9:a1:8f:88:07:8c:61:df:2f:71:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Jan  6 19:34:54 2026 GMT
            Not After : Jan  5 19:39:54 2027 GMT
        Subject: CN=A5090D80ADBE874AD6CA01310D139A50ADB5080F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d7:7a:e9:b0:7d:72:b9:09:a2:ef:6a:c6:c5:
                    8e:6b:04:41:df:bd:d5:b2:76:06:10:a2:7a:e4:43:
                    76:21:51:3d:96:2e:7e:e7:fa:09:49:cd:d8:28:9d:
                    7d:ac:ad:5b:1c:98:56:46:0e:8f:05:2f:01:25:cd:
                    46:64:79:62:56:8f:47:4f:d1:8c:f1:2f:0d:f7:d5:
                    8c:68:65:21:b1:06:02:43:10:75:b0:4f:36:01:5b:
                    67:d1:f0:54:44:84:a2:84:e7:1a:cf:c8:fb:b8:8d:
                    d7:60:4b:b9:66:c9:73:a9:41:ac:ac:e1:27:fc:73:
                    57:27:d7:b9:c9:97:77:53:9a:41:e1:6f:49:07:7c:
                    9a:c3:cb:20:7c:57:87:d0:36:5d:63:18:4b:e5:59:
                    00:ae:7e:56:bb:3e:56:b1:86:b0:4e:74:07:f6:ef:
                    3d:fa:64:93:b7:01:33:03:88:b8:12:c9:72:f1:7c:
                    70:1c:66:ea:c1:18:e4:c4:50:6c:1b:64:58:d9:6e:
                    42:98:8f:5a:c5:41:f2:ba:92:c0:3e:86:74:23:ac:
                    14:32:26:bb:10:34:bf:b7:12:74:3b:4e:81:f9:2e:
                    a7:96:93:ec:0d:fd:4b:ac:f9:c6:d7:64:6c:0d:4d:
                    33:17:34:b3:85:f0:31:5f:17:f4:3e:a9:9b:07:39:
                    42:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:09:0D:80:AD:BE:87:4A:D6:CA:01:31:0D:13:9A:50:AD:B5:08:0F
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3134392e302e302f31362d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.149.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         14:52:db:df:3b:2a:c6:25:15:ff:d6:f0:2d:24:fc:14:3f:3a:
         7e:d1:02:f0:c8:59:82:7e:31:24:71:36:ec:b3:54:81:c8:2f:
         21:39:63:b0:fb:23:98:64:a2:4d:ab:e9:ec:46:78:c8:b5:12:
         0f:23:c7:64:20:bd:d8:04:d1:60:6b:1c:6e:ea:49:5c:02:ae:
         06:e4:a6:92:8a:56:df:3e:c3:36:61:86:cb:9f:f0:03:36:b9:
         d4:bc:f4:2e:8f:cd:f3:49:bc:f7:c0:6a:f8:41:42:b0:82:44:
         0d:c0:3e:c2:73:82:53:91:d4:fe:4b:c5:51:12:27:68:60:db:
         33:09:60:20:a6:62:cb:40:bf:61:44:94:4f:a2:91:bb:19:a7:
         2c:22:e6:62:18:3e:bc:63:55:b9:5d:b4:9e:9a:f8:2b:91:08:
         d6:77:59:37:bc:3e:39:3e:ab:da:43:b7:93:51:34:01:04:56:
         48:d8:08:da:94:26:f8:86:75:4a:f2:7a:ba:88:79:ad:df:df:
         fe:fb:55:48:52:a3:0a:b7:eb:e2:a9:be:24:bf:d6:b7:cd:e5:
         d0:85:36:90:fc:e8:38:cc:0d:62:f3:4d:84:ca:9d:f2:f2:fb:
         f9:6a:ca:b7:e8:a0:ba:97:a2:de:a0:8c:c6:1a:56:c5:f3:45:
         be:8a:02:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:26:37 2026 by rpki-client