This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34302e302e302f31362d3234203d3e203237363830.roa
File:                     3138362e34302e302e302f31362d3234203d3e203237363830.roa (raw, json)
Hash identifier:          /LOV0UH+/D2x8tUOqZvK0zeLh6v1tjmnYhFm5ENBh8g=
Subject key identifier:   EA:CA:E8:CE:E7:9F:DB:0E:B2:41:91:73:8E:81:62:75:62:01:8A:F0
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       20FC7671B83CA114F4670C7712856F2473F3E27A
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34302e302e302f31362d3234203d3e203237363830.roa
Signing time:             Tue 06 Jan 2026 19:09:56 +0000
ROA not before:           Tue 06 Jan 2026 19:04:56 +0000
ROA not after:            Tue 05 Jan 2027 19:09:56 +0000
asID:                     27680
IP address blocks:        186.40.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fc:76:71:b8:3c:a1:14:f4:67:0c:77:12:85:6f:24:73:f3:e2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Jan  6 19:04:56 2026 GMT
            Not After : Jan  5 19:09:56 2027 GMT
        Subject: CN=EACAE8CEE79FDB0EB24191738E81627562018AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:50:d0:89:2e:da:1f:b3:f5:9b:24:95:e4:
                    43:7e:a9:79:5b:85:1f:f9:3d:d9:e7:02:6d:52:f3:
                    a5:fb:73:68:a9:27:98:d0:6a:e5:5b:b4:49:c7:00:
                    ab:17:c0:b7:cc:4a:48:5c:58:1a:78:ea:3a:dd:0b:
                    0e:8d:12:0a:2f:69:16:9e:0d:05:3e:4f:41:7b:f6:
                    42:01:72:3a:b9:ad:a2:30:58:c4:a5:bc:3f:f4:15:
                    7d:6f:13:e1:79:36:e3:d2:23:5e:c1:15:4d:1d:5d:
                    e4:90:a5:f8:23:28:2e:ba:0f:f2:96:66:49:cd:da:
                    1c:a0:3e:aa:8d:c3:9f:4d:48:2f:29:e1:93:ed:59:
                    4b:ba:44:5e:25:7f:95:33:fb:ec:ae:e2:4f:e6:de:
                    95:ae:a5:7b:6d:82:d8:d6:56:77:df:11:6e:e6:c8:
                    2c:cf:4a:ce:03:a1:57:67:34:7b:08:13:98:a4:94:
                    7d:fa:b2:26:f7:f1:f4:41:a4:9a:e8:d0:d0:6c:59:
                    35:c8:a3:91:91:ad:6a:dc:b9:a0:0c:2f:7a:7a:a9:
                    ab:78:a8:73:bd:83:02:b7:64:4b:f8:13:b2:ef:70:
                    76:9e:42:ad:2b:d5:57:c5:20:a0:fe:f9:d8:28:a6:
                    5c:c0:4e:2e:55:b9:c1:6a:81:9e:ff:2e:9c:c3:3a:
                    8a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CA:E8:CE:E7:9F:DB:0E:B2:41:91:73:8E:81:62:75:62:01:8A:F0
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34302e302e302f31362d3234203d3e203237363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.40.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:67:2f:01:7e:e7:4c:30:9c:fb:f2:2f:8c:a7:7f:80:68:11:
         04:f6:af:ab:dc:1a:7a:d2:8f:22:0f:3b:c0:63:35:3f:f6:3a:
         4b:54:90:b4:2b:f2:66:7b:f6:c1:db:8a:c2:4c:b7:83:7e:93:
         fb:82:b7:fc:3d:8d:c6:dd:f6:1c:57:58:31:0b:57:f1:04:96:
         70:28:78:1a:5e:ff:5f:c3:b7:7b:8a:a5:95:49:91:64:c2:13:
         dc:06:a2:9e:9b:aa:9e:fd:da:c2:43:f4:da:0b:21:7b:df:6e:
         81:61:58:fc:89:0f:2b:45:e2:b5:2e:3b:6f:f2:bc:04:69:95:
         66:0c:71:5b:35:5f:c9:b8:1e:11:94:90:b3:2c:dd:06:28:3e:
         3f:bc:4d:74:70:2e:2b:f2:6a:29:95:09:ec:6b:87:de:12:e7:
         26:f3:0c:02:9e:a1:ca:19:ba:0c:8d:31:61:06:11:24:c6:31:
         a8:01:25:55:e1:9e:4a:e3:2c:04:5c:d6:fa:11:05:72:18:a5:
         c6:d2:e4:90:60:3a:26:a8:cb:13:a1:2e:60:b2:fb:2c:f2:a4:
         87:73:e1:3a:6b:06:56:00:49:bc:e2:15:9e:ef:60:bb:95:87:
         c9:a5:a5:f2:7f:f7:d9:dc:f8:53:b6:b1:2f:51:73:c1:0d:23:
         a1:20:66:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:51:26 2026 by rpki-client