This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3138362e36372e302e302f31362d3234203d3e203237363531.roa
File:                     3138362e36372e302e302f31362d3234203d3e203237363531.roa (raw, json)
Hash identifier:          ohKJ8ld10tqml4vlYADCLsDZhMGROF9T0UW5iKZbco0=
Subject key identifier:   03:E8:3E:31:8B:34:86:BA:3A:E7:00:B2:5F:FD:98:D1:8E:13:6B:2C
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       68A240DF8801ED813301395D76E6B0F4766F8C76
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3138362e36372e302e302f31362d3234203d3e203237363531.roa
Signing time:             Tue 06 Jan 2026 20:48:16 +0000
ROA not before:           Tue 06 Jan 2026 20:43:16 +0000
ROA not after:            Tue 05 Jan 2027 20:48:16 +0000
asID:                     27651
IP address blocks:        186.67.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a2:40:df:88:01:ed:81:33:01:39:5d:76:e6:b0:f4:76:6f:8c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Jan  6 20:43:16 2026 GMT
            Not After : Jan  5 20:48:16 2027 GMT
        Subject: CN=03E83E318B3486BA3AE700B25FFD98D18E136B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:aa:19:a3:fd:70:fb:d3:d9:cd:3d:d1:f7:16:
                    b0:3a:b8:a9:70:3b:43:94:ba:cf:b5:29:a1:eb:bf:
                    55:c4:c4:56:3f:76:e8:f0:f9:dd:87:bb:6d:34:6a:
                    56:35:69:a1:17:4d:9f:93:eb:07:f1:36:bb:41:7c:
                    0d:13:ba:89:10:a3:dc:bb:f7:82:71:24:dd:59:8b:
                    b8:1e:f2:74:2e:27:c3:15:23:23:76:49:7a:22:04:
                    19:8a:e8:5d:32:98:cf:17:c0:4d:09:ae:65:77:a6:
                    69:70:1c:fb:73:2d:be:87:04:57:89:3c:62:8d:49:
                    eb:03:93:a7:a6:31:4e:8c:7d:9b:8e:6a:40:e9:ed:
                    9b:41:94:0c:01:79:50:48:6f:ab:cc:a1:84:7c:9a:
                    f6:56:ec:93:1b:1c:81:45:cc:2c:7b:df:f8:6f:a7:
                    a4:0e:07:31:17:50:ad:37:33:8a:69:16:63:b8:a1:
                    14:4c:5b:d7:90:85:46:ef:57:18:eb:e9:1a:05:9d:
                    99:13:e4:f9:cc:54:30:cb:b0:a3:a7:bb:0a:ed:56:
                    f5:cd:a3:ad:c2:93:65:3a:c1:31:9a:04:c5:cf:89:
                    45:ec:f3:8d:f9:cb:dd:e7:7b:c8:62:5b:e7:fa:dd:
                    7c:ed:2f:a5:bc:97:97:93:23:04:5d:3c:3b:76:79:
                    4b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E8:3E:31:8B:34:86:BA:3A:E7:00:B2:5F:FD:98:D1:8E:13:6B:2C
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3138362e36372e302e302f31362d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.67.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:1e:c9:1b:7d:d4:38:42:c9:3b:3b:0b:8a:43:25:5a:d1:1c:
         cb:fd:f3:97:ab:1f:8d:2c:e7:0d:92:75:7a:3a:f0:d6:e7:e5:
         be:1b:6e:d5:39:23:ca:ee:83:63:76:8c:7a:60:d1:6e:d7:16:
         36:11:56:14:1c:06:58:d8:f9:cd:1d:b8:e1:7f:9d:06:d7:56:
         a8:a4:c3:98:50:0e:34:15:39:ca:4c:d2:3a:73:a2:c9:21:34:
         27:74:15:24:55:e7:bd:3e:be:4a:f5:1c:68:f2:01:dd:64:f5:
         43:53:aa:c9:aa:83:d5:57:e2:c5:ad:4c:fa:92:7f:3f:2a:49:
         93:ec:64:c2:a6:7a:e1:6d:d6:ff:63:5d:92:ab:4a:ef:5b:fe:
         b7:6a:33:53:96:54:3d:09:80:39:27:c5:a9:a9:7b:64:89:dd:
         f2:09:fc:1a:27:7f:f7:84:ce:90:df:19:a5:62:72:3f:5f:1d:
         4f:89:58:ce:16:36:97:1b:2a:92:6c:60:45:d5:3f:ad:aa:1f:
         35:b4:4f:f6:46:a2:30:cc:c0:aa:8c:27:61:cf:d6:57:de:07:
         51:a3:9b:ac:06:b8:57:41:fe:40:1e:f2:a0:bf:13:09:64:77:
         a0:bb:00:76:28:9c:03:35:24:10:7b:e2:00:e8:5f:72:dd:a4:
         51:6d:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:24:49 2026 by rpki-client