This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBDEE2394E473B4F893DE7E1DBEAB6D2DFF82594D322C165D23F6E5708C21622/0/3138392e3132372e3136362e302f32332d3234203d3e20323730303236.roa
File:                     3138392e3132372e3136362e302f32332d3234203d3e20323730303236.roa (raw, json)
Hash identifier:          q5gS410S9Yvvliw7wquFb681995DWASGpCHXvZj+tIs=
Subject key identifier:   9F:2C:B3:5A:8F:CA:13:50:E5:98:A5:7B:14:38:35:01:F6:19:65:36
Certificate issuer:       /CN=B6B5C6CD57666AE5D4EB365A97288B1AB3F9DF08
Certificate serial:       282288AA9A1D2FC62B9395012D612FE802B569D3
Authority key identifier: B6:B5:C6:CD:57:66:6A:E5:D4:EB:36:5A:97:28:8B:1A:B3:F9:DF:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6B5C6CD57666AE5D4EB365A97288B1AB3F9DF08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBDEE2394E473B4F893DE7E1DBEAB6D2DFF82594D322C165D23F6E5708C21622/0/3138392e3132372e3136362e302f32332d3234203d3e20323730303236.roa
Signing time:             Tue 06 Jan 2026 19:25:06 +0000
ROA not before:           Tue 06 Jan 2026 19:20:06 +0000
ROA not after:            Tue 05 Jan 2027 19:25:06 +0000
asID:                     270026
IP address blocks:        189.127.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBDEE2394E473B4F893DE7E1DBEAB6D2DFF82594D322C165D23F6E5708C21622/0/B6B5C6CD57666AE5D4EB365A97288B1AB3F9DF08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBDEE2394E473B4F893DE7E1DBEAB6D2DFF82594D322C165D23F6E5708C21622/0/B6B5C6CD57666AE5D4EB365A97288B1AB3F9DF08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6B5C6CD57666AE5D4EB365A97288B1AB3F9DF08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:22:88:aa:9a:1d:2f:c6:2b:93:95:01:2d:61:2f:e8:02:b5:69:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6B5C6CD57666AE5D4EB365A97288B1AB3F9DF08
        Validity
            Not Before: Jan  6 19:20:06 2026 GMT
            Not After : Jan  5 19:25:06 2027 GMT
        Subject: CN=9F2CB35A8FCA1350E598A57B14383501F6196536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d9:48:d6:57:69:58:0c:7a:4e:40:60:9a:33:
                    f6:9c:97:43:37:cf:13:60:c4:cb:34:48:d0:9d:7a:
                    92:bc:1e:e1:ac:c2:e4:34:96:eb:ce:44:c9:24:59:
                    e4:b5:80:bd:c3:9f:cb:89:96:2b:5d:99:c4:8a:96:
                    65:1e:cd:5e:8e:3e:fa:44:d5:70:ee:11:32:5f:9b:
                    ef:bc:c0:ae:b8:1d:f7:01:d1:0d:a9:59:d6:1c:a7:
                    0c:fe:7e:15:ac:aa:bc:a7:75:80:d4:e9:c5:25:16:
                    f5:19:3d:8e:b6:73:56:13:db:2d:9e:88:5e:d8:7f:
                    80:23:61:fa:f1:44:fe:51:e0:65:12:c7:59:76:ea:
                    18:f5:8d:7e:9e:4b:03:b5:e5:d1:41:12:51:ea:ff:
                    78:7b:92:94:74:ad:f6:4d:1a:46:6f:82:ab:68:a1:
                    e9:91:29:3f:ad:57:c6:55:69:11:7b:15:21:d6:a2:
                    63:81:1b:2e:c9:b3:12:d5:5e:a5:2b:12:82:c6:eb:
                    fb:0b:42:51:33:94:60:2b:33:a3:b3:e2:8c:65:27:
                    ce:07:c1:94:cd:cb:c9:5d:f8:c4:71:a8:ff:ec:3b:
                    7c:d2:74:c7:b4:85:eb:44:82:f6:a1:e1:93:17:83:
                    0f:8a:e1:46:4e:f0:99:6a:66:3f:fe:9d:c2:6e:3c:
                    90:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2C:B3:5A:8F:CA:13:50:E5:98:A5:7B:14:38:35:01:F6:19:65:36
            X509v3 Authority Key Identifier:
                keyid:B6:B5:C6:CD:57:66:6A:E5:D4:EB:36:5A:97:28:8B:1A:B3:F9:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBDEE2394E473B4F893DE7E1DBEAB6D2DFF82594D322C165D23F6E5708C21622/0/B6B5C6CD57666AE5D4EB365A97288B1AB3F9DF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6B5C6CD57666AE5D4EB365A97288B1AB3F9DF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBDEE2394E473B4F893DE7E1DBEAB6D2DFF82594D322C165D23F6E5708C21622/0/3138392e3132372e3136362e302f32332d3234203d3e20323730303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:4d:a7:cb:8c:54:34:bf:2c:a5:60:21:ef:91:5d:ac:a4:f2:
         e1:fc:bd:a4:cc:26:74:f0:5e:e2:ce:54:34:fe:20:6c:54:23:
         88:c7:bb:ad:15:53:d9:49:a5:f3:b7:d5:aa:82:5f:b1:cb:6c:
         f9:f0:64:e1:0b:a6:01:df:7b:f8:26:d8:c2:42:42:8c:0b:fa:
         d0:65:00:91:9b:f4:d3:03:71:11:fc:ec:d4:a6:c3:51:a1:c5:
         03:19:50:37:52:35:9f:77:c6:cd:40:4e:58:ef:07:31:49:5f:
         b7:f2:71:e9:c7:14:77:d3:00:5e:69:fc:0f:af:73:90:4b:24:
         f2:79:fc:63:eb:bb:b5:18:77:01:04:e7:5a:30:e9:6d:b3:7e:
         e4:a0:75:58:86:74:ba:39:e9:16:4d:c4:93:78:5a:b0:d8:fd:
         e7:9c:41:a6:2d:f7:83:3c:ab:9a:9e:ad:94:ac:6e:25:a2:3f:
         df:52:40:e8:6a:81:12:0b:71:a3:f2:66:ca:1b:1a:2a:80:b0:
         65:9e:25:fe:6f:d5:b2:1a:95:40:b4:10:2e:f6:dc:1a:47:ec:
         0f:e7:01:81:42:14:d5:ef:2f:49:22:29:36:c7:8a:1a:9c:5f:
         d1:ba:b8:46:8b:c0:90:5a:c2:b5:7f:19:ea:b7:f7:41:a4:d1:
         16:8b:8c:64
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUKCKIqpodL8Yrk5UBLWEv6AK1adMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZCNUM2Q0Q1NzY2NkFFNUQ0RUIzNjVBOTcyODhCMUFC
M0Y5REYwODAeFw0yNjAxMDYxOTIwMDZaFw0yNzAxMDUxOTI1MDZaMDMxMTAvBgNV
BAMTKDlGMkNCMzVBOEZDQTEzNTBFNTk4QTU3QjE0MzgzNTAxRjYxOTY1MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY2UjWV2lYDHpOQGCaM/acl0M3
zxNgxMs0SNCdepK8HuGswuQ0luvORMkkWeS1gL3Dn8uJlitdmcSKlmUezV6OPvpE
1XDuETJfm++8wK64HfcB0Q2pWdYcpwz+fhWsqryndYDU6cUlFvUZPY62c1YT2y2e
iF7Yf4AjYfrxRP5R4GUSx1l26hj1jX6eSwO15dFBElHq/3h7kpR0rfZNGkZvgqto
oemRKT+tV8ZVaRF7FSHWomOBGy7JsxLVXqUrEoLG6/sLQlEzlGArM6Oz4oxlJ84H
wZTNy8ld+MRxqP/sO3zSdMe0hetEgvah4ZMXgw+K4UZO8JlqZj/+ncJuPJBnAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUnyyzWo/KE1DlmKV7FDg1AfYZZTYwHwYDVR0j
BBgwFoAUtrXGzVdmauXU6zZalyiLGrP53wgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQkRFRTIzOTRFNDczQjRGODkzREU3RTFEQkVBQjZEMkRG
RjgyNTk0RDMyMkMxNjVEMjNGNkU1NzA4QzIxNjIyLzAvQjZCNUM2Q0Q1NzY2NkFF
NUQ0RUIzNjVBOTcyODhCMUFCM0Y5REYwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNkI1QzZDRDU3NjY2QUU1RDRF
QjM2NUE5NzI4OEIxQUIzRjlERjA4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0JERUUyMzk0RTQ3M0I0Rjg5M0RFN0UxREJFQUI2RDJERkY4MjU5NEQz
MjJDMTY1RDIzRjZFNTcwOEMyMTYyMi8wLzMxMzgzOTJlMzEzMjM3MmUzMTM2MzYy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3MzAzMDMyMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG9
f6YwDQYJKoZIhvcNAQELBQADggEBAFtNp8uMVDS/LKVgIe+RXayk8uH8vaTMJnTw
XuLOVDT+IGxUI4jHu60VU9lJpfO31aqCX7HLbPnwZOELpgHfe/gm2MJCQowL+tBl
AJGb9NMDcRH87NSmw1GhxQMZUDdSNZ93xs1ATljvBzFJX7fycenHFHfTAF5p/A+v
c5BLJPJ5/GPru7UYdwEE51ow6W2zfuSgdViGdLo56RZNxJN4WrDY/eecQaYt94M8
q5qerZSsbiWiP99SQOhqgRILcaPyZsobGiqAsGWeJf5v1bIalUC0EC723BpH7A/n
AYFCFNXvL0kiKTbHihqcX9G6uEaLwJBawrV/Geq390Gk0RaLjGQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:37 2026 by rpki-client