This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34312e302e302f31362d3234203d3e203237363830.roa
File:                     3138362e34312e302e302f31362d3234203d3e203237363830.roa (raw, json)
Hash identifier:          mLo2+FPftEO83Z3vsXSAFfdBtuHfzZ84m/j58heuKUc=
Subject key identifier:   BD:D1:97:65:86:6F:DF:1F:74:C2:22:9D:DD:F8:B2:24:72:33:34:1E
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       117A73D488B9633EC58EC63289322C73EBFDCED5
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34312e302e302f31362d3234203d3e203237363830.roa
Signing time:             Tue 06 Jan 2026 19:10:00 +0000
ROA not before:           Tue 06 Jan 2026 19:05:00 +0000
ROA not after:            Tue 05 Jan 2027 19:10:00 +0000
asID:                     27680
IP address blocks:        186.41.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7a:73:d4:88:b9:63:3e:c5:8e:c6:32:89:32:2c:73:eb:fd:ce:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Jan  6 19:05:00 2026 GMT
            Not After : Jan  5 19:10:00 2027 GMT
        Subject: CN=BDD19765866FDF1F74C2229DDDF8B2247233341E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:6e:09:1d:cd:66:3a:33:53:28:c6:77:12:
                    10:dc:bf:2f:12:31:c2:27:d7:c4:3e:97:59:a8:d2:
                    d5:e0:2b:17:1c:ef:60:2b:5f:f3:9a:b5:27:3c:d0:
                    7f:50:a9:31:34:9b:51:39:8a:96:26:c7:78:93:21:
                    91:20:bd:5c:45:5d:0f:20:5c:34:07:e2:3e:56:89:
                    d1:f0:58:38:d8:ff:0c:f0:e2:7d:5f:c6:e7:14:10:
                    4c:a2:29:e8:71:f7:c1:a3:8f:6d:84:4d:c1:56:41:
                    d2:c1:aa:a9:9b:c6:d9:70:92:25:75:f0:2b:50:c5:
                    7d:6d:0e:d8:fb:e8:59:f0:de:86:9f:d8:85:61:37:
                    a1:e6:9e:67:a1:37:bb:09:65:9b:dc:fa:97:09:5f:
                    aa:e4:42:4d:82:1c:7d:db:cc:de:26:1e:16:35:77:
                    f9:c0:d6:13:9e:44:8a:47:a4:96:e3:04:52:ba:13:
                    9e:59:bb:a8:f3:d8:6a:07:66:69:4f:c7:e8:6d:43:
                    80:be:2a:6f:2a:2c:68:57:4f:8b:15:86:50:7b:05:
                    ee:2a:ad:ce:6f:49:1f:d3:94:cc:46:92:54:73:04:
                    25:4d:71:28:28:14:06:0d:a6:6c:7b:e2:2d:95:a5:
                    35:16:72:ed:92:33:d2:ba:35:7c:bf:7b:bb:bb:4c:
                    e9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D1:97:65:86:6F:DF:1F:74:C2:22:9D:DD:F8:B2:24:72:33:34:1E
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138362e34312e302e302f31362d3234203d3e203237363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.41.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:11:4b:ec:23:19:b2:0c:e5:a0:e1:f5:80:26:7f:de:b0:d3:
         1c:ab:52:81:e3:40:92:a2:b2:95:77:46:a4:b7:11:b6:7a:82:
         5f:30:9b:9c:44:99:d0:da:18:eb:0a:d1:a1:cd:0b:5f:46:9d:
         a1:d6:9a:b2:04:53:0d:9f:49:dc:68:a6:82:b6:e8:49:72:17:
         e2:48:b1:49:8b:e2:8d:b3:8e:ad:98:23:ce:79:30:5f:57:b5:
         83:40:c1:25:1d:83:41:d3:5f:7c:ed:82:77:c6:6d:12:7e:0d:
         1d:65:7f:6e:29:ee:34:ec:96:45:25:8c:10:e4:73:fa:83:72:
         fb:33:09:00:d2:6a:1b:bd:a0:5f:74:0b:f5:5d:ab:6e:f8:31:
         98:9c:24:0d:03:0b:57:78:55:cb:d5:ed:0f:66:25:20:7b:cb:
         5a:18:50:1d:ef:2c:e8:8e:d2:e4:93:a9:d5:c4:07:5d:ea:13:
         9d:2a:c3:0d:13:7f:8c:fb:0f:1c:60:4d:71:9b:9f:81:01:d5:
         13:f6:b8:35:bb:64:52:5c:bd:6f:1f:f0:af:5c:61:7b:40:ec:
         90:6f:f5:08:70:33:34:0c:cd:4d:5f:bd:41:8d:9c:a3:e6:36:
         6a:ce:3f:97:1f:27:8c:43:0e:85:d4:1a:e0:11:7e:cf:bb:c3:
         c1:e6:d6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:15 2026 by rpki-client